$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa File: a2880666-4566-3c6f-8c7d-496e76f824a3.roa (raw, json) Hash identifier: 4FtISQqGEbL6KaH/PzEZ9rGQ6lvuafxEgSiTBrbLNPc= Subject key identifier: 25:8B:9F:78:64:8F:99:20:EE:41:46:F7:9F:77:50:56:89:B1:1C:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4C8599293A81DE02D898 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 393238 IP address blocks: 64.199.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4c:85:99:29:3a:81:de:02:d8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=602b6f0f-997c-41d8-8745-97b57bb72efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:fb:6c:9c:58:91:2e:1a:59:79:80:f0:4a: 57:2b:77:d4:4c:a1:a0:79:1f:0c:ff:b3:0f:88:4a: b3:ec:3b:86:df:4f:4d:73:29:49:52:7c:a0:a2:57: 90:51:a3:a9:a1:85:9a:97:10:b7:1d:49:20:a9:f1: 00:f9:ce:6b:a7:d3:2f:81:62:a9:18:1d:06:ef:40: b7:e0:57:b9:ef:88:81:28:64:ca:f0:b8:a0:95:e8: fe:51:39:96:c3:e6:3a:ba:c0:73:f6:c7:f3:be:7b: 09:56:97:1f:19:91:f4:ad:3c:8f:c7:97:f4:32:ca: 13:f8:c4:2e:37:97:87:5d:7e:aa:61:70:73:a0:4f: cd:46:4a:40:d8:ad:61:d9:78:3e:7d:f4:fe:37:39: 4b:bc:a5:98:ff:08:fb:4b:47:37:10:1a:88:1d:06: 34:94:81:5d:4a:ea:e1:b6:e8:d5:a6:3e:c7:c6:72: cf:13:a6:46:12:19:de:fd:aa:2c:71:a0:32:73:92: b2:82:c5:32:f6:f7:c1:53:fc:bb:85:b1:b6:7e:bc: 84:c6:7a:53:65:e3:05:9c:b7:9d:be:b5:1d:73:bc: 89:8b:39:f0:25:e9:86:14:f6:52:94:4b:ba:74:b9: 3f:22:45:6e:d4:fd:2a:0b:fb:de:30:19:b0:a4:5c: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8B:9F:78:64:8F:99:20:EE:41:46:F7:9F:77:50:56:89:B1:1C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2880666-4566-3c6f-8c7d-496e76f824a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:bf:c4:7b:cb:27:49:0a:00:7a:81:8d:8e:b2:f6:81:f0:b8: a6:4b:eb:6a:1b:0b:87:79:bd:68:f6:93:f5:d0:d1:d9:09:ab: 15:62:fb:04:8f:31:b4:46:e7:18:9a:c0:aa:ff:d9:bd:ad:97: 11:c9:f9:8e:fd:a5:37:c6:30:3d:62:21:7a:d0:b0:85:fc:2d: c2:9f:9b:b7:48:dd:4f:91:3f:f2:d9:35:d4:55:5f:6a:4f:42: 01:c2:a8:6b:6b:5a:34:02:ca:ea:b2:48:f6:a7:10:bc:f6:37: 00:19:14:da:fa:ab:be:4b:60:e5:bd:aa:c3:43:f1:47:3c:2b: 8a:f3:35:88:59:9e:51:06:c3:7b:5e:91:ea:c0:57:44:17:a0: 1b:b9:ff:2a:9c:ee:c0:8f:29:86:87:b0:8e:ac:e1:9f:42:f9: 41:de:ed:42:dc:83:d0:e1:32:79:31:a2:b0:30:91:80:80:01: ca:bf:22:00:76:a8:50:2b:b6:3f:01:f0:04:ba:2e:85:07:44: 51:0f:48:c5:6a:ee:7b:a3:47:ca:d9:a1:6d:1d:79:03:6b:0c: 4b:f8:ee:5f:a1:99:73:f5:99:5d:18:73:19:a0:93:2e:47:8a: 8a:fc:01:1b:f8:45:51:38:31:6b:c2:7e:87:27:aa:23:e3:11: d8:48:55:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkyFmSk6gd4C2JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjAyYjZmMGYtOTk3Yy00MWQ4LTg3NDUtOTdiNTdiYjcyZWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkb7bJxYkS4aWXmA8EpXK3fUTKGgeR8M/7MP iEqz7DuG309NcylJUnygoleQUaOpoYWalxC3HUkgqfEA+c5rp9MvgWKpGB0G70C3 4Fe574iBKGTK8Liglej+UTmWw+Y6usBz9sfzvnsJVpcfGZH0rTyPx5f0MsoT+MQu N5eHXX6qYXBzoE/NRkpA2K1h2Xg+ffT+NzlLvKWY/wj7S0c3EBqIHQY0lIFdSurh tujVpj7HxnLPE6ZGEhne/aoscaAyc5KygsUy9vfBU/y7hbG2fryExnpTZeMFnLed vrUdc7yJiznwJemGFPZSlEu6dLk/IkVu1P0qC/veMBmwpFxGtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWLn3hkj5kg7kFG9593UFaJsRwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI4ODA2NjYtNDU2Ni0z YzZmLThjN2QtNDk2ZTc2ZjgyNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS/xHvLJ0kKAHqBjY6y9oHwuKZL62obC4d5vWj2k/XQ0dkJqxVi+wSP MbRG5xiawKr/2b2tlxHJ+Y79pTfGMD1iIXrQsIX8LcKfm7dI3U+RP/LZNdRVX2pP QgHCqGtrWjQCyuqySPanELz2NwAZFNr6q75LYOW9qsND8Uc8K4rzNYhZnlEGw3te kerAV0QXoBu5/yqc7sCPKYaHsI6s4Z9C+UHe7ULcg9DhMnkxorAwkYCAAcq/IgB2 qFArtj8B8AS6LoUHRFEPSMVq7nujR8rZoW0deQNrDEv47l+hmXP1mV0Ycxmgky5H ior8ARv4RVE4MWvCfocnqiPjEdhIVTo= -----END CERTIFICATE-----Generated at Sat May 10 13:13:10 2025 by rpki-client