$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa File: 5453459a-6eb2-3994-9041-412771cabb7c.roa (raw, json) Hash identifier: M4gY42LF58n9QFmT4fPls0GNb2hFgBjVixIIwAO+Nqs= Subject key identifier: 1F:9F:41:26:8F:38:E0:34:92:7B:22:2E:75:D5:D0:2D:F9:C7:CC:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1132228A4D8888A76980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:32:22:8a:4d:88:88:a7:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=aa668d08-5d3f-4ee5-a8c0-f92fb3a7a107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:f6:f3:95:f6:51:de:a0:70:3d:33:d9:a3: a2:f5:16:3a:77:be:08:e5:86:cf:9d:9a:b1:c7:72: 9a:62:8a:0a:4d:f8:25:61:eb:4b:d7:58:7d:0f:37: 8a:ff:43:27:61:6c:7d:05:4f:65:f2:f0:34:1a:ce: f5:06:7a:0c:c3:d2:b5:b4:81:c2:98:eb:f5:11:a3: f8:59:4e:c2:b8:32:73:d5:b8:15:04:c4:a8:3d:91: 65:25:29:02:d6:cc:57:4a:f5:e8:f5:7a:2e:67:f1: 96:96:f6:85:cc:1c:b2:fb:d3:95:77:3c:26:72:5b: 2d:8e:c0:05:ed:12:b9:c3:1a:e5:ef:cc:f3:c7:09: 9b:2f:0c:3d:89:13:0f:16:b4:2e:d1:2a:bd:77:ab: 01:53:1b:ec:dc:73:84:28:ea:66:62:5c:c4:00:5f: 50:4b:af:6f:f7:c9:59:14:ab:76:24:46:3d:bb:30: 94:96:66:45:4f:bd:36:1b:29:95:04:cd:b2:bd:57: 0a:3a:46:c1:89:67:02:57:ce:bd:62:1c:17:ed:99: cd:96:d7:53:99:ed:1f:62:54:14:43:35:d0:74:f6: a7:a0:11:77:13:8a:2b:50:f7:96:eb:8e:c4:f5:fd: ba:4e:42:35:6c:d2:ab:d4:20:06:07:b9:f7:10:c0: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9F:41:26:8F:38:E0:34:92:7B:22:2E:75:D5:D0:2D:F9:C7:CC:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5453459a-6eb2-3994-9041-412771cabb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e6:aa:4c:a3:de:a9:b4:b0:f4:c9:d7:ce:d0:9f:4b:a0:86: 17:9b:22:3e:3d:ad:d0:07:68:c0:12:ca:1d:b3:64:6a:59:4e: a5:94:0c:32:a5:8e:a4:75:c5:65:64:cd:19:cb:82:8f:40:ad: 52:45:d7:5f:aa:b9:23:37:88:86:f6:be:1d:32:9c:9e:e5:bb: e3:8d:a9:66:b6:2a:f8:76:06:10:3e:4b:c0:35:c1:fd:76:c9: 72:64:31:7a:85:8a:62:6e:d0:0d:32:69:8b:ad:cb:48:2d:6a: 5d:a6:0e:c2:7c:e2:3a:fd:83:7f:0b:60:a2:e3:f9:1c:34:66: 5b:94:a5:fe:01:70:c1:a0:3d:34:d8:fb:86:07:1a:69:39:37: 97:07:4f:51:fe:30:05:10:ab:dc:47:8b:5e:c4:6e:8a:56:b2: 70:bb:fd:f8:a3:55:15:92:1a:a2:99:93:41:4f:c3:10:7a:2c: bd:17:9f:ce:ec:0d:b6:48:7d:de:e1:62:f7:6b:72:bd:cb:1e: 7f:65:d1:6f:71:6b:df:82:e6:71:f5:de:65:c7:2e:f8:a8:6c: d1:ac:93:27:6d:b2:85:bb:19:4e:79:81:af:7f:ec:07:2a:73: 48:b6:d8:34:b7:3c:86:5b:16:1f:53:4b:1a:c0:2e:36:d9:85: d7:95:d0:c5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShEyIopNiIinaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWE2NjhkMDgtNWQzZi00ZWU1LWE4YzAtZjkyZmIzYTdhMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG/285X2Ud6gcD0z2aOi9RY6d74I5YbPnZqx x3KaYooKTfglYetL11h9DzeK/0MnYWx9BU9l8vA0Gs71BnoMw9K1tIHCmOv1EaP4 WU7CuDJz1bgVBMSoPZFlJSkC1sxXSvXo9XouZ/GWlvaFzByy+9OVdzwmclstjsAF 7RK5wxrl78zzxwmbLww9iRMPFrQu0Sq9d6sBUxvs3HOEKOpmYlzEAF9QS69v98lZ FKt2JEY9uzCUlmZFT702GymVBM2yvVcKOkbBiWcCV869YhwX7ZnNltdTme0fYlQU QzXQdPanoBF3E4orUPeW647E9f26TkI1bNKr1CAGB7n3EMDgdQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFB+fQSaPOOA0knsiLnXV0C35x8xEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ1MzQ1OWEtNmViMi0z OTk0LTkwNDEtNDEyNzcxY2FiYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQFAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd+aqTKPeqbSw9MnXztCfS6CGF5siPj2t0AdowBLKHbNkallOpZQMMqWO pHXFZWTNGcuCj0CtUkXXX6q5IzeIhva+HTKcnuW7442pZrYq+HYGED5LwDXB/XbJ cmQxeoWKYm7QDTJpi63LSC1qXaYOwnziOv2DfwtgouP5HDRmW5Sl/gFwwaA9NNj7 hgcaaTk3lwdPUf4wBRCr3EeLXsRuilaycLv9+KNVFZIaopmTQU/DEHosvRefzuwN tkh93uFi92tyvcsef2XRb3Fr34LmcfXeZccu+Khs0ayTJ22yhbsZTnmBr3/sBypz SLbYNLc8hlsWH1NLGsAuNtmF15XQxQ== -----END CERTIFICATE-----Generated at Sun May 11 16:49:44 2025 by rpki-client