$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa File: 32c9f427-a3e0-378d-8608-0451c0373bca.roa (raw, json) Hash identifier: jXRxpGDONMaNbgTLQMFlbbLDgADIgq5MNQObpsmCmqQ= Subject key identifier: FE:39:8E:9B:93:51:79:02:D2:82:F1:A1:69:5B:38:B4:33:13:59:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3A2CDA2BA9319DA37200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.69.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:2c:da:2b:a9:31:9d:a3:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ff21acdb-694c-4bb8-9021-cc9dab9a7826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:d3:33:eb:e4:9b:c2:32:27:f3:13:77:a3: 4f:95:48:3c:f3:79:1d:dc:b7:b9:d1:90:71:32:41: 89:8f:f7:9c:f3:5a:52:d6:d2:2f:5a:eb:fb:5d:c5: 73:ba:f1:e0:f6:e1:76:91:b0:43:33:59:d1:94:ab: 47:bc:aa:a6:fe:f0:24:8b:2e:67:02:b7:89:23:a6: 02:dc:16:8f:4a:d9:17:84:1a:f1:a3:50:4d:25:f0: 1c:00:1c:5b:22:23:17:f3:6e:0e:00:f4:3e:4b:e5: 0a:e0:fb:56:cf:f1:5d:0e:3c:63:4c:1e:9e:99:d1: b8:cf:84:b0:16:ca:bc:db:c3:c3:99:c2:1f:49:f0: 7c:81:e3:25:db:1c:cd:c9:cc:b0:91:8d:17:92:f1: 44:9d:94:fb:85:a3:d2:d9:f5:be:56:48:ef:5c:db: 12:9b:68:0a:7d:38:ca:db:4b:e4:b3:ff:f6:f3:0f: 28:59:22:e0:74:2b:91:10:97:3f:90:ca:12:b6:fd: 06:f1:93:5e:75:86:b0:4e:53:33:82:c9:4d:1e:a4: 7b:39:d5:81:69:80:00:a1:4d:81:38:1d:e3:91:f7: 22:21:6f:2c:f8:6a:d8:bf:fc:e9:c7:e8:0a:6c:6c: cf:25:a5:6c:75:28:e0:0e:68:9c:86:f8:b1:9b:2d: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:39:8E:9B:93:51:79:02:D2:82:F1:A1:69:5B:38:B4:33:13:59:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32c9f427-a3e0-378d-8608-0451c0373bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.69.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4b:b1:f6:0d:2b:40:d5:9a:99:a3:89:f6:b4:88:ba:15:1f: 8b:94:97:7b:28:c8:8e:90:30:f9:f3:8a:87:b0:8c:8a:82:df: ba:c4:6a:26:b9:91:fc:58:77:13:9f:be:bd:9a:69:58:83:01: 9d:33:72:a1:a3:be:22:82:76:c5:eb:ee:c2:3a:d1:fb:8b:e9: 9a:16:f2:54:b5:ec:93:3f:ec:dd:5f:18:5e:ae:ec:77:6e:66: 91:f8:dc:26:20:62:01:d9:16:50:64:59:88:51:f5:bb:a3:b7: 10:65:49:68:90:dc:91:13:29:0e:03:1f:16:b6:3d:a2:51:2c: 18:22:61:df:0e:6e:69:c0:e7:f0:1c:cf:10:7c:16:41:fd:6f: 11:f5:ba:d1:1e:9f:24:eb:63:52:5e:4e:64:23:76:93:4d:ec: bc:9a:d4:0d:70:c0:3d:a4:b6:4d:c6:0b:c1:cc:98:e7:4c:42: 3a:1c:ed:4d:ac:44:3a:80:12:70:57:63:66:97:e2:92:20:40: fc:8b:c0:5b:20:43:82:30:c9:68:1c:a9:12:06:e8:f4:0f:dd: ec:cd:e0:a5:e5:a1:22:f2:85:bf:45:86:07:02:6d:d4:a2:97: 41:47:3a:84:ef:2c:df:20:e3:bb:8f:6d:c1:05:9a:5b:97:d5: 1e:74:08:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjos2iupMZ2jcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmYyMWFjZGItNjk0Yy00YmI4LTkwMjEtY2M5ZGFiOWE3ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBvTM+vkm8IyJ/MTd6NPlUg883kd3Le50ZBx MkGJj/ec81pS1tIvWuv7XcVzuvHg9uF2kbBDM1nRlKtHvKqm/vAkiy5nAreJI6YC 3BaPStkXhBrxo1BNJfAcABxbIiMX824OAPQ+S+UK4PtWz/FdDjxjTB6emdG4z4Sw Fsq828PDmcIfSfB8geMl2xzNycywkY0XkvFEnZT7haPS2fW+VkjvXNsSm2gKfTjK 20vks//28w8oWSLgdCuREJc/kMoStv0G8ZNedYawTlMzgslNHqR7OdWBaYAAoU2B OB3jkfciIW8s+GrYv/zpx+gKbGzPJaVsdSjgDmichvixmy1oewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP45jpuTUXkC0oLxoWlbOLQzE1ngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzJjOWY0MjctYTNlMC0z NzhkLTg2MDgtMDQ1MWMwMzczYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQEVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpLsfYNK0DVmpmjifa0iLoVH4uUl3soyI6QMPnzioewjIqC37rEaia5 kfxYdxOfvr2aaViDAZ0zcqGjviKCdsXr7sI60fuL6ZoW8lS17JM/7N1fGF6u7Hdu ZpH43CYgYgHZFlBkWYhR9bujtxBlSWiQ3JETKQ4DHxa2PaJRLBgiYd8ObmnA5/Ac zxB8FkH9bxH1utEenyTrY1JeTmQjdpNN7Lya1A1wwD2ktk3GC8HMmOdMQjoc7U2s RDqAEnBXY2aX4pIgQPyLwFsgQ4IwyWgcqRIG6PQP3ezN4KXloSLyhb9FhgcCbdSi l0FHOoTvLN8g47uPbcEFmluX1R50CL4= -----END CERTIFICATE-----Generated at Sun May 11 10:16:09 2025 by rpki-client