$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa File: 45e1a55b-69f2-3aea-b493-cb40144517d7.roa (raw, json) Hash identifier: GGzHkLB5l7laPEwZya+OyPFp3pjRhRqXrGrbeD6MfZc= Subject key identifier: 87:1A:C3:4D:DE:38:A5:58:54:1D:89:DA:95:77:E7:1F:99:3C:17:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A11A6203D0A853E730A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.196.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:a6:20:3d:0a:85:3e:73:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ff91d4c9-2e16-448e-bdcf-f634e7b2d65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4a:69:4a:46:c6:5b:4e:2d:ca:f6:1c:b8:94: 0e:57:58:28:cb:93:00:07:66:d0:89:0a:06:df:5a: 50:9f:f1:9e:4a:22:27:c3:8a:0c:0d:66:ab:97:94: 23:c1:f3:22:09:3b:a5:e8:40:d0:57:12:6a:ee:62: 29:11:d5:27:b6:2b:79:60:c8:26:6e:9a:1d:0e:a1: f4:d6:4c:e2:af:a8:d8:ba:8b:7f:21:dc:b4:fc:ad: 34:29:08:69:03:a4:99:b0:78:8f:a3:b0:dc:78:77: 6c:a4:d6:db:38:75:0a:3a:13:47:1b:e6:2a:e3:b7: f6:ba:4b:f4:17:46:09:c4:6e:e4:30:fe:e4:87:c5: a6:3f:b0:48:07:ad:8e:4c:4b:8f:de:da:0d:cd:2d: bd:7d:49:16:df:5e:87:ee:3a:a2:60:29:87:8e:07: b3:79:b4:da:5d:b2:f2:a8:db:cb:6f:1a:58:7f:dd: 4c:5f:d4:b0:d3:0e:8b:09:4d:1e:84:e7:cb:8f:71: 54:60:29:95:b8:40:f2:a9:e4:e4:a5:d6:f0:75:45: 6f:ec:58:50:77:2e:1b:e5:03:ed:8a:85:30:2f:bd: 4b:5a:47:53:08:1b:7e:6c:37:38:15:a6:9b:04:a6: de:70:15:1f:20:a2:41:bb:25:ae:e1:c3:69:ab:0f: 48:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1A:C3:4D:DE:38:A5:58:54:1D:89:DA:95:77:E7:1F:99:3C:17:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e1a55b-69f2-3aea-b493-cb40144517d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6d:44:ee:0d:fe:c7:27:4a:70:74:24:5e:5c:bf:2f:fa:61: 38:e2:f7:1a:c0:5c:9e:ad:b2:d8:0e:80:10:82:64:0f:f4:0b: cb:39:e8:46:1a:79:a3:09:58:30:f4:e1:3b:3b:55:62:90:60: 74:0e:7c:f8:e8:55:d6:b6:26:32:a8:4c:64:92:b9:11:d5:a3: f5:0b:df:bb:92:0e:19:76:50:1c:7c:d5:b5:e9:85:88:a2:20: 1a:ea:87:3c:19:ea:da:f1:b8:bd:54:9c:ae:4a:37:e8:d1:73: 9b:c8:59:36:72:6e:54:f5:11:04:7f:55:c9:19:7c:0f:a5:d4: d0:70:b4:47:69:61:86:21:23:53:b3:10:f0:69:7c:7a:dc:39: d6:e5:64:04:3b:27:3b:8f:96:e8:2f:7b:f4:80:e2:82:14:39: a6:5b:b6:21:20:38:d6:1d:29:4c:62:47:bd:a4:68:72:09:c7: ad:56:8e:fb:ca:21:11:b7:dd:5c:e5:15:69:2d:3b:06:ad:d3: 8d:90:68:bd:95:db:82:dc:7b:5c:43:7c:be:14:39:d4:6b:b3: 27:6a:9f:7c:15:01:bf:a1:ad:ce:3c:9d:e6:f6:99:ee:4f:ff: 41:38:91:45:d0:4e:43:97:58:f9:45:cf:7d:18:64:b6:e7:dd: 13:d1:c2:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShGmID0KhT5zCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmY5MWQ0YzktMmUxNi00NDhlLWJkY2YtZjYzNGU3YjJkNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEppSkbGW04tyvYcuJQOV1goy5MAB2bQiQoG 31pQn/GeSiInw4oMDWarl5QjwfMiCTul6EDQVxJq7mIpEdUntit5YMgmbpodDqH0 1kzir6jYuot/Idy0/K00KQhpA6SZsHiPo7DceHdspNbbOHUKOhNHG+Yq47f2ukv0 F0YJxG7kMP7kh8WmP7BIB62OTEuP3toNzS29fUkW316H7jqiYCmHjgezebTaXbLy qNvLbxpYf91MX9Sw0w6LCU0ehOfLj3FUYCmVuEDyqeTkpdbwdUVv7FhQdy4b5QPt ioUwL71LWkdTCBt+bDc4FaabBKbecBUfIKJBuyWu4cNpqw9IQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcaw03eOKVYVB2J2pV35x+ZPBeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlMWE1NWItNjlmMi0z YWVhLWI0OTMtY2I0MDE0NDUxN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZtRO4N/scnSnB0JF5cvy/6YTji9xrAXJ6tstgOgBCCZA/0C8s56EYa eaMJWDD04Ts7VWKQYHQOfPjoVda2JjKoTGSSuRHVo/UL37uSDhl2UBx81bXphYii IBrqhzwZ6trxuL1UnK5KN+jRc5vIWTZyblT1EQR/VckZfA+l1NBwtEdpYYYhI1Oz EPBpfHrcOdblZAQ7JzuPlugve/SA4oIUOaZbtiEgONYdKUxiR72kaHIJx61WjvvK IRG33VzlFWktOwat042QaL2V24Lce1xDfL4UOdRrsydqn3wVAb+hrc48neb2me5P /0E4kUXQTkOXWPlFz30YZLbn3RPRwhs= -----END CERTIFICATE-----Generated at Sun May 11 10:44:16 2025 by rpki-client