$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa File: 452a8ba2-ade7-3b56-98f5-02f50e546db8.roa (raw, json) Hash identifier: 3qlHb6RTEPCB/jRCsWPZC3W2PoPy8MlAK0AIG3X8Gj0= Subject key identifier: FE:4B:31:C9:49:2E:71:4A:38:87:9B:B0:61:A9:16:50:EA:27:3D:D8 Certificate issuer: /CN=291133eb-e436-4803-adab-f37835fc18e3 Certificate serial: 010D0C9F43285849ED4FBF97776BAD598329CF40 Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 24753 IP address blocks: 64.49.154.0/23 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:bf:97:77:6b:ad:59:83:29:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=3e281059-e324-4aba-94ed-c313a123ab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:76:62:2a:d4:cc:88:12:e7:95:a7:6a:1e: 57:96:77:58:b0:31:cc:44:71:53:c1:59:7a:dc:b4: 3a:cc:47:de:2a:70:ad:b5:c2:82:22:53:d5:30:e1: cd:be:60:48:16:21:b1:3b:5f:90:8e:ef:c4:0c:dd: 4e:5d:fb:a6:fe:e9:92:f0:4c:41:52:af:59:44:b7: c8:0f:ee:d3:33:f9:be:00:2d:0a:b3:bb:ca:e9:c9: f7:97:22:00:d7:ec:e6:97:87:7c:43:ca:bc:01:ae: 9b:8f:a1:04:4b:2c:81:93:3b:38:c3:bf:5a:75:1f: 3a:86:5b:ba:65:05:81:c7:57:09:43:d9:28:ad:a3: 87:80:21:2e:5d:b6:28:7d:e7:07:45:df:3d:4a:15: 6b:1e:9e:35:d0:0c:16:68:21:49:8a:33:73:15:7a: f0:6c:70:4d:a9:29:8b:e8:58:dc:a7:e5:25:4b:7f: 77:8e:ac:6d:89:c6:be:71:e8:06:de:38:b0:b0:df: 9e:8a:d7:8d:4f:2f:ed:fe:c7:d8:2c:a3:e9:89:7c: 61:3a:f8:74:e2:b9:a6:45:b8:97:74:f8:9f:a0:10: ef:80:6a:9d:f8:d2:b8:3a:3e:ac:b9:19:6e:16:78: d5:65:a7:09:e8:8a:54:08:0f:de:91:1a:b3:e4:a6: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4B:31:C9:49:2E:71:4A:38:87:9B:B0:61:A9:16:50:EA:27:3D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/452a8ba2-ade7-3b56-98f5-02f50e546db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl X509v3 Authority Key Identifier: keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer sbgp-ipAddrBlock: critical IPv4: 64.49.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e9:7b:89:0b:cf:4e:cf:2b:60:64:17:89:22:3c:7c:fe:af: b3:1b:b0:90:6f:7a:84:50:64:17:33:c8:51:01:3b:31:80:e2: 9b:6c:8e:9a:ac:3d:4f:8f:46:f5:cf:27:3f:ac:73:02:c2:90: 04:b4:32:d9:f3:90:cc:85:bc:82:dd:65:65:89:2d:94:64:06: 5c:b9:88:a0:2a:cc:15:dc:a4:82:32:c5:90:c9:d9:7f:8b:c9: 74:25:31:42:1b:32:53:ee:ea:bb:c7:53:d5:28:c9:a5:3a:a5: 41:17:5e:ba:29:66:5b:76:f9:bb:50:cb:15:73:3a:03:70:c2: 7c:4d:73:3f:98:c8:40:ca:37:3d:2b:53:cb:60:0b:8e:7a:c5: 74:17:1f:bb:9a:35:73:61:72:39:c6:dd:01:5a:b1:14:6d:bf: 9f:27:6f:cc:5a:73:b2:36:6e:12:51:1f:67:24:55:b5:29:43: f3:03:24:c7:98:1d:75:80:a6:3d:1b:02:37:36:32:be:4e:a1: 3c:08:58:a9:ef:c2:1c:1b:b7:12:17:3b:9c:ba:06:79:aa:50: 28:7c:04:40:29:0f:90:24:e5:90:49:8c:45:18:5c:a4:79:94: 79:45:ef:15:f0:d2:d0:7e:b7:c7:43:99:8c:17:43:8d:31:6c: 33:0e:f6:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT7+Xd2utWYMpz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx OGUzMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk M2UyODEwNTktZTMyNC00YWJhLTk0ZWQtYzMxM2ExMjNhYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcJ2YirUzIgS55Wnah5XlndYsDHMRHFTwVl6 3LQ6zEfeKnCttcKCIlPVMOHNvmBIFiGxO1+Qju/EDN1OXfum/umS8ExBUq9ZRLfI D+7TM/m+AC0Ks7vK6cn3lyIA1+zml4d8Q8q8Aa6bj6EESyyBkzs4w79adR86hlu6 ZQWBx1cJQ9koraOHgCEuXbYofecHRd89ShVrHp410AwWaCFJijNzFXrwbHBNqSmL 6Fjcp+UlS393jqxtica+cegG3jiwsN+eiteNTy/t/sfYLKPpiXxhOvh04rmmRbiX dPifoBDvgGqd+NK4Oj6suRluFnjVZacJ6IpUCA/ekRqz5KY+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5LMclJLnFKOIebsGGpFlDqJz3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvNDUyYThiYTItYWRlNy0z YjU2LTk4ZjUtMDJmNTBlNTQ2ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4 MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQDGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjpe4kLz07PK2BkF4kiPHz+r7MbsJBveoRQZBczyFEBOzGA4ptsjpqs PU+PRvXPJz+scwLCkAS0MtnzkMyFvILdZWWJLZRkBly5iKAqzBXcpIIyxZDJ2X+L yXQlMUIbMlPu6rvHU9UoyaU6pUEXXropZlt2+btQyxVzOgNwwnxNcz+YyEDKNz0r U8tgC456xXQXH7uaNXNhcjnG3QFasRRtv58nb8xac7I2bhJRH2ckVbUpQ/MDJMeY HXWApj0bAjc2Mr5OoTwIWKnvwhwbtxIXO5y6BnmqUCh8BEApD5Ak5ZBJjEUYXKR5 lHlF7xXw0tB+t8dDmYwXQ40xbDMO9jw= -----END CERTIFICATE-----Generated at Sun Jun 8 12:34:13 2025 by rpki-client