$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa File: 9f181286-8858-3f98-a10e-686c757b5b7f.roa (raw, json) Hash identifier: wFIhBdv53VCaIsM/fGt66nPsJU70ISTCOWA19jOSXv4= Subject key identifier: 17:66:C3:68:C6:CE:6A:D9:90:A1:17:62:EF:80:4F:93:30:2C:48:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A39CE85CD4976823533E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.16.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:ce:85:cd:49:76:82:35:33:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3585ffb2-96b7-4f00-a552-b13cab6f93c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:e9:1e:7c:27:4e:c0:38:01:4f:85:f8:a8: 48:b3:4f:4e:d8:4a:64:98:3e:48:f1:23:ea:d6:24: cd:06:3d:92:45:8c:b1:87:14:72:87:9f:cc:75:aa: d6:40:15:99:7b:3d:8e:cb:dc:d3:d5:9e:d5:8f:a4: f7:15:1d:af:82:67:15:7f:d0:5e:42:5c:ee:db:d9: 98:07:79:12:8f:fb:74:a9:38:1c:f4:c1:22:25:fc: d1:71:9e:1b:d9:71:e0:09:0c:55:ce:0d:98:1a:3c: bf:18:db:9a:27:75:7f:4c:12:23:3d:fd:02:f9:23: 8b:fe:bc:75:db:c6:85:2e:2e:af:ab:4b:1c:c7:d3: 4d:55:c4:57:82:c5:94:bb:53:53:90:30:47:1a:79: bc:8e:2d:5d:bb:5a:13:44:8e:c5:e0:0b:71:e9:75: 58:03:fd:ac:86:82:ec:82:5c:78:52:96:90:3a:dc: fa:7a:73:a0:6c:bd:d3:e8:1f:58:09:04:8e:e5:1b: 6f:87:49:72:85:9c:bc:ba:3e:c1:d4:13:f4:cf:f5: 75:3c:27:a9:a0:7a:d3:d3:44:08:a0:ef:41:ff:ad: 38:cb:ca:09:58:c6:fb:32:b9:1a:c6:c5:48:97:34: 70:94:63:2c:5c:92:2f:bc:4e:f5:4f:9d:ba:91:d5: 4c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:66:C3:68:C6:CE:6A:D9:90:A1:17:62:EF:80:4F:93:30:2C:48:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f181286-8858-3f98-a10e-686c757b5b7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.16.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1a:f2:88:2f:82:71:85:51:4a:b6:5e:ca:90:79:7d:28:f6: 49:8b:92:30:27:a4:0d:f2:9f:ca:90:52:1f:c0:fb:d7:10:fc: ad:07:d8:9a:d6:3e:37:a3:07:04:69:0f:48:9f:df:0f:3a:2e: fc:ae:71:79:18:26:8e:54:34:d0:5a:d9:15:64:24:4e:36:fe: 43:fa:37:7a:73:90:93:d1:14:2c:b5:e7:40:21:25:cc:77:39: b5:c4:b4:4c:38:7b:6d:76:b1:87:92:8a:8f:a4:2b:13:2e:08: 56:3f:b4:eb:f9:d6:69:5e:60:fc:53:a2:25:6d:84:ae:28:de: d7:75:60:75:6f:1d:89:c0:88:c8:2b:ad:90:d7:ea:1b:1f:0f: ae:25:7f:56:29:31:a3:86:a9:b9:d3:66:16:75:83:f6:41:21: b6:e6:76:d6:0e:4b:c2:36:31:a1:bc:83:7b:da:ff:4d:6a:8e: 4c:06:57:18:29:02:fa:26:4e:45:56:d4:49:46:57:36:c3:02: 21:53:bb:75:47:94:42:db:bb:71:51:18:01:12:1c:93:60:86: d3:1f:65:f9:70:a7:77:b3:43:99:bd:35:6a:c8:5f:3a:bf:91: 36:79:ea:d2:ef:34:24:24:1e:4b:44:05:32:7b:ce:07:18:82: 30:c9:07:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjnOhc1JdoI1M+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzU4NWZmYjItOTZiNy00ZjAwLWE1NTItYjEzY2FiNmY5M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HpHnwnTsA4AU+F+KhIs09O2EpkmD5I8SPq 1iTNBj2SRYyxhxRyh5/MdarWQBWZez2Oy9zT1Z7Vj6T3FR2vgmcVf9BeQlzu29mY B3kSj/t0qTgc9MEiJfzRcZ4b2XHgCQxVzg2YGjy/GNuaJ3V/TBIjPf0C+SOL/rx1 28aFLi6vq0scx9NNVcRXgsWUu1NTkDBHGnm8ji1du1oTRI7F4Atx6XVYA/2shoLs glx4UpaQOtz6enOgbL3T6B9YCQSO5Rtvh0lyhZy8uj7B1BP0z/V1PCepoHrT00QI oO9B/604y8oJWMb7MrkaxsVIlzRwlGMsXJIvvE71T526kdVMtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdmw2jGzmrZkKEXYu+AT5MwLEh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxODEyODYtODg1OC0z Zjk4LWExMGUtNjg2Yzc1N2I1YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEca8ogvgnGFUUq2XsqQeX0o9kmLkjAnpA3yn8qQUh/A+9cQ/K0H2JrW PjejBwRpD0if3w86LvyucXkYJo5UNNBa2RVkJE42/kP6N3pzkJPRFCy150AhJcx3 ObXEtEw4e212sYeSio+kKxMuCFY/tOv51mleYPxToiVthK4o3td1YHVvHYnAiMgr rZDX6hsfD64lf1YpMaOGqbnTZhZ1g/ZBIbbmdtYOS8I2MaG8g3va/01qjkwGVxgp AvomTkVW1ElGVzbDAiFTu3VHlELbu3FRGAESHJNghtMfZflwp3ezQ5m9NWrIXzq/ kTZ56tLvNCQkHktEBTJ7zgcYgjDJBys= -----END CERTIFICATE-----Generated at Sat May 10 07:48:58 2025 by rpki-client