$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae0b907-00bf-3cc3-a028-0eae8ef165b5.roa File: 7ae0b907-00bf-3cc3-a028-0eae8ef165b5.roa (raw, json) Hash identifier: 0nG2ggYgAumzFCmiD23iYS9X14K2Vr6XHmyzT4Q9Mp0= Subject key identifier: 91:B5:81:3D:34:DC:D3:95:3C:B6:26:A0:C4:A6:82:AA:77:53:7B:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A39F1CB1D280F96EF1080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae0b907-00bf-3cc3-a028-0eae8ef165b5.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.24.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:f1:cb:1d:28:0f:96:ef:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=45433fc8-80da-4c4c-847a-1574bdbd2ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2d:9b:a7:d7:e1:3e:86:cf:b2:45:b6:0a:35: 66:8d:0a:2f:c7:24:31:6c:f8:f9:04:74:29:0a:a4: d9:d6:47:d5:c9:77:57:ca:31:83:56:93:78:7c:0f: 1d:38:9e:b1:34:a5:17:c9:fd:6c:ad:4f:fd:5d:a1: bc:f8:9e:02:c5:b9:c7:a8:c4:bb:ae:64:c3:83:59: 03:6a:b4:2c:f3:ad:5b:a4:13:cd:b6:38:db:3d:4f: 7c:29:32:c7:af:26:35:00:dc:56:46:85:3e:c9:69: 59:3b:3d:e7:4f:74:04:f3:70:70:47:4c:c7:b4:c9: da:35:64:8d:4a:fb:31:49:5e:58:56:12:de:86:a0: 92:78:da:ce:2a:4c:72:a6:d3:01:d2:51:c5:e5:de: fe:8d:b6:11:c3:fb:a3:fe:64:0e:aa:56:be:dc:46: 4b:58:50:20:68:ac:94:11:39:bb:2b:b2:bb:48:d1: 6a:6b:db:aa:58:42:c6:70:60:0d:19:71:de:0e:e5: 11:0f:5b:9e:90:9c:19:62:2e:a4:35:11:d1:2b:8e: c0:a1:ff:76:24:19:78:85:fe:e0:67:35:59:ed:6d: de:51:f5:cb:5b:d5:d1:5e:50:76:16:94:26:a1:f7: f8:8f:c3:d6:03:a7:3e:84:d4:ed:d0:83:d6:21:16: bd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B5:81:3D:34:DC:D3:95:3C:B6:26:A0:C4:A6:82:AA:77:53:7B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7ae0b907-00bf-3cc3-a028-0eae8ef165b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:20:56:ef:1f:59:bc:58:e3:23:14:4d:0e:69:af:b8:92:8d: 60:b4:35:c8:e6:0a:c3:bf:ce:02:fe:9d:bd:46:9d:72:2d:40: 71:f7:4c:e6:13:a5:4c:43:ab:42:bb:ab:6c:29:68:2a:3e:6c: 7d:45:51:1e:fd:7f:16:ba:d2:fb:51:73:c2:ea:d2:3e:f5:61: b3:91:c9:2f:69:ee:0e:20:1a:2d:b5:09:bd:74:6e:1a:c2:44: a4:2b:62:ed:7b:5b:59:dc:90:a8:ee:df:44:98:9c:c9:85:bf: de:9f:89:a0:2e:ab:be:ae:8a:6e:b2:3d:f7:a4:5c:85:6a:de: 59:af:29:d7:e1:d5:2e:cf:4a:72:56:7f:87:de:39:90:57:7d: 6d:84:ac:c7:0f:d2:e7:d2:53:f7:a1:f4:8a:b4:f4:0e:36:7f: b6:49:68:c1:4f:5f:28:88:20:55:ab:3b:43:8c:5e:7f:33:a3: f7:71:d3:ff:a6:ec:2e:d6:d8:04:b7:95:3e:d6:e9:66:74:a8: b1:6f:e1:84:a1:3a:9f:30:bc:6d:5b:a6:f9:94:3f:a2:7a:7b: 89:49:97:ee:3d:01:44:7e:99:fb:b5:1d:c3:0c:44:e3:e8:d9: 2e:96:09:5c:c2:f7:00:53:19:8b:09:21:07:68:d7:35:59:58: e6:22:55:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjnxyx0oD5bvEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDU0MzNmYzgtODBkYS00YzRjLTg0N2EtMTU3NGJkYmQyZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi2bp9fhPobPskW2CjVmjQovxyQxbPj5BHQp CqTZ1kfVyXdXyjGDVpN4fA8dOJ6xNKUXyf1srU/9XaG8+J4CxbnHqMS7rmTDg1kD arQs861bpBPNtjjbPU98KTLHryY1ANxWRoU+yWlZOz3nT3QE83BwR0zHtMnaNWSN SvsxSV5YVhLehqCSeNrOKkxyptMB0lHF5d7+jbYRw/uj/mQOqla+3EZLWFAgaKyU ETm7K7K7SNFqa9uqWELGcGANGXHeDuURD1uekJwZYi6kNRHRK47Aof92JBl4hf7g ZzVZ7W3eUfXLW9XRXlB2FpQmoff4j8PWA6c+hNTt0IPWIRa9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG1gT003NOVPLYmoMSmgqp3U3vzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2FlMGI5MDctMDBiZi0z Y2MzLWEwMjgtMGVhZThlZjE2NWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8gVu8fWbxY4yMUTQ5pr7iSjWC0NcjmCsO/zgL+nb1GnXItQHH3TOYT pUxDq0K7q2wpaCo+bH1FUR79fxa60vtRc8Lq0j71YbORyS9p7g4gGi21Cb10bhrC RKQrYu17W1nckKju30SYnMmFv96fiaAuq76uim6yPfekXIVq3lmvKdfh1S7PSnJW f4feOZBXfW2ErMcP0ufSU/eh9Iq09A42f7ZJaMFPXyiIIFWrO0OMXn8zo/dx0/+m 7C7W2AS3lT7W6WZ0qLFv4YShOp8wvG1bpvmUP6J6e4lJl+49AUR+mfu1HcMMROPo 2S6WCVzC9wBTGYsJIQdo1zVZWOYiVXk= -----END CERTIFICATE-----Generated at Fri May 9 23:45:41 2025 by rpki-client