$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa File: a48c4031-9001-3dda-aefc-539842bcaa83.roa (raw, json) Hash identifier: /N4PgFBAlLH01I6L9Cvz2gx3qoPPJn6QRksuFhu7Dh8= Subject key identifier: 8B:66:8D:E5:43:AC:B4:9A:18:94:16:10:CD:4D:E2:FB:63:64:53:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4BF11BB59DB46C0D8500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 54120 IP address blocks: 64.206.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4b:f1:1b:b5:9d:b4:6c:0d:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=33ab7f11-4956-4521-b433-34184010ae46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7d:92:e3:cc:7c:a7:1e:11:e9:fc:83:b7:f2: 57:36:b2:c3:d1:7a:f5:dc:91:13:83:26:72:04:c0: e2:b1:58:4e:98:18:a4:55:bd:ce:1e:1f:32:9c:3f: 0b:42:56:a0:a2:c6:4b:3a:2d:d9:8f:3c:1c:50:98: 4e:ee:5b:20:22:24:85:10:5f:f9:18:7a:81:76:6d: d3:eb:d3:e8:31:9e:75:9e:5e:d7:f8:b4:98:f3:0e: b1:ac:63:ce:ef:58:d2:33:97:54:50:8b:47:6b:55: 2d:d0:b8:49:30:b9:92:84:b4:db:85:26:8b:61:77: 2a:1b:44:a4:c2:67:99:a3:e7:7a:b1:d1:8f:b2:ec: fe:7f:d3:48:3c:46:f9:cf:8e:87:ee:09:1c:2b:29: 5f:fa:8c:45:fe:f0:0a:97:d0:90:42:b7:5e:0c:09: bb:78:7d:9e:81:0a:1f:c3:ab:89:6c:2d:31:f6:3f: 93:32:9c:b0:b0:e6:ed:3a:59:95:31:89:b9:e5:86: fe:85:d1:83:5d:f2:68:67:27:35:eb:91:95:ab:8c: 45:d3:24:61:df:a4:60:f6:d4:9e:14:25:29:bc:fb: d4:d2:fa:95:66:49:aa:76:67:da:1b:b9:15:90:24: 67:33:10:f8:a3:4c:74:69:88:04:2f:30:f6:8b:1f: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:66:8D:E5:43:AC:B4:9A:18:94:16:10:CD:4D:E2:FB:63:64:53:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a48c4031-9001-3dda-aefc-539842bcaa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2d:85:fe:16:82:e7:1b:43:05:85:fc:5a:d2:ac:fc:05:12: fa:a1:20:4b:99:26:1b:3c:a9:58:10:ae:19:94:b4:02:b8:31: ee:13:ac:c4:72:14:e0:91:70:77:81:e7:d9:e7:1a:a0:6f:08: 02:6c:b8:3f:92:e3:d7:cc:0e:5f:ae:71:54:c9:e7:cd:35:05: c6:9c:a4:6c:24:df:50:93:33:52:33:f3:31:ea:50:ae:1e:9b: eb:ee:23:a3:c1:b7:0c:98:80:bc:9c:91:2e:84:90:88:0b:35: 1c:ab:53:ef:31:06:58:ca:ec:3c:34:47:65:0f:51:94:d2:8c: d6:b1:82:ff:44:14:02:71:86:20:03:12:72:48:c1:f2:1b:93: 49:36:a0:52:0a:b2:bc:5e:68:08:9f:ff:d0:a1:d3:64:2a:c1: 4e:ea:eb:68:90:7c:28:90:95:52:31:fd:d9:2b:92:16:21:ab: f7:c0:ad:2d:02:4d:6f:c9:95:ae:1a:63:29:17:76:0a:18:0a: bb:bb:07:47:85:90:f6:f6:46:77:6e:fd:9e:b4:b3:f6:dd:45: 16:d0:e6:ce:9b:77:fc:74:f2:a5:b8:61:02:0f:43:05:e1:dd: 47:62:27:32:46:85:80:6a:d5:d1:3b:22:50:14:a3:11:93:f9: ae:37:93:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkvxG7WdtGwNhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzNhYjdmMTEtNDk1Ni00NTIxLWI0MzMtMzQxODQwMTBhZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H2S48x8px4R6fyDt/JXNrLD0Xr13JETgyZy BMDisVhOmBikVb3OHh8ynD8LQlagosZLOi3ZjzwcUJhO7lsgIiSFEF/5GHqBdm3T 69PoMZ51nl7X+LSY8w6xrGPO71jSM5dUUItHa1Ut0LhJMLmShLTbhSaLYXcqG0Sk wmeZo+d6sdGPsuz+f9NIPEb5z46H7gkcKylf+oxF/vAKl9CQQrdeDAm7eH2egQof w6uJbC0x9j+TMpywsObtOlmVMYm55Yb+hdGDXfJoZyc165GVq4xF0yRh36Rg9tSe FCUpvPvU0vqVZkmqdmfaG7kVkCRnMxD4o0x0aYgELzD2ix+z8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItmjeVDrLSaGJQWEM1N4vtjZFPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ4YzQwMzEtOTAwMS0z ZGRhLWFlZmMtNTM5ODQyYmNhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYthf4WgucbQwWF/FrSrPwFEvqhIEuZJhs8qVgQrhmUtAK4Me4TrMRy FOCRcHeB59nnGqBvCAJsuD+S49fMDl+ucVTJ5801BcacpGwk31CTM1Iz8zHqUK4e m+vuI6PBtwyYgLyckS6EkIgLNRyrU+8xBljK7Dw0R2UPUZTSjNaxgv9EFAJxhiAD EnJIwfIbk0k2oFIKsrxeaAif/9Ch02QqwU7q62iQfCiQlVIx/dkrkhYhq/fArS0C TW/Jla4aYykXdgoYCru7B0eFkPb2Rndu/Z60s/bdRRbQ5s6bd/x08qW4YQIPQwXh 3UdiJzJGhYBq1dE7IlAUoxGT+a43k2I= -----END CERTIFICATE-----Generated at Sat May 10 13:44:09 2025 by rpki-client