$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa File: b33780e5-e153-3634-b935-b042d6daf97c.roa (raw, json) Hash identifier: AS0PmA3B8S9cmdD7/BWFp8avi0Mq+afuB8lVjs8z50U= Subject key identifier: 7F:0D:C2:81:1A:C1:7C:28:F4:15:A4:2A:F3:DC:37:0C:98:82:0E:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4C2271A152068BDF1A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 54966 IP address blocks: 64.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4c:22:71:a1:52:06:8b:df:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9ebae40c-d891-464d-9efa-ced56e673a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:78:e2:24:a6:44:fa:fd:63:0c:08:d1:a6: fb:b6:44:8c:63:b1:43:fa:07:cb:cb:e1:5d:d7:92: b5:60:56:a6:5f:7f:9b:32:d9:3c:3d:a5:72:b8:36: 88:13:cc:43:15:dd:d9:00:90:0f:4b:70:ea:55:ab: 58:8a:d3:0b:01:8e:71:4a:c1:07:19:4c:ab:37:e5: 23:e1:4c:5d:8a:37:87:ff:4b:dc:76:78:b9:1b:97: a4:26:73:17:e7:56:e3:60:71:90:bc:bb:a7:29:b3: dc:97:d1:1e:c4:42:6a:0c:f5:fc:e5:dd:51:67:02: ae:e7:ac:80:a8:c0:31:75:73:74:85:b4:d5:51:e6: 54:a3:13:c2:79:b6:11:ce:01:23:3b:7f:de:b1:e0: d7:ea:06:b9:27:5f:5c:25:4c:68:e8:3a:28:cd:cc: 05:89:f6:4b:25:54:99:1c:d4:24:39:30:70:17:ff: 78:f9:9d:f6:bd:3b:08:d0:05:df:e0:4f:e1:fc:9f: d6:c8:46:1f:c0:37:a9:2e:4e:d1:6c:ec:73:33:5d: 54:06:7b:7d:2f:86:38:02:80:62:1c:56:23:fd:3d: de:d1:b7:f6:3e:74:cb:4c:83:d3:0f:12:8b:90:ee: 0a:98:76:2f:39:c8:7d:54:2f:13:0f:83:05:a1:fe: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0D:C2:81:1A:C1:7C:28:F4:15:A4:2A:F3:DC:37:0C:98:82:0E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b33780e5-e153-3634-b935-b042d6daf97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:1b:8e:f1:d8:0f:a6:a0:d0:45:32:46:db:16:54:bd:48:b7: 58:08:95:b0:5d:e6:d8:4a:5d:ac:de:e9:00:e4:35:48:f0:57: e8:b2:d0:84:46:95:d9:32:b1:8d:05:f2:24:35:6d:0e:94:d4: ad:76:21:d0:95:39:4b:ac:58:81:8b:54:ed:7f:7f:16:d1:0e: e4:ec:b9:d9:b7:b7:8d:ad:b0:79:4e:17:c2:81:6f:2d:06:92: 2a:5c:b6:dd:ce:54:4f:55:6f:17:85:44:d0:5f:bc:11:89:d5: 80:89:ba:b1:88:e4:6d:66:41:0c:d9:83:7d:86:d8:0e:68:f0: fb:a8:cf:c5:e9:ae:03:9f:8d:5c:e8:49:2e:cf:3f:3e:5b:53: 51:78:06:7a:bc:ac:b7:f7:44:5e:40:05:e4:7d:54:05:47:5b: 92:8c:fb:5e:82:47:d0:5a:7c:99:b7:fb:a4:0a:fc:f0:62:df: 0f:c2:f8:48:64:c4:e1:8f:52:22:6f:f3:c5:df:03:d8:6f:57: d5:06:00:df:04:ed:a7:72:fd:12:bc:2c:05:d4:49:33:f1:8d: 8c:b9:61:f4:fe:c9:30:06:3d:78:0f:39:b9:4a:f7:1c:e1:00: a1:e6:c5:a6:71:d5:5f:e6:8f:95:62:7b:b9:29:39:5b:94:c5: 96:43:72:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkwicaFSBovfGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OWViYWU0MGMtZDg5MS00NjRkLTllZmEtY2VkNTZlNjczYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKN44iSmRPr9YwwI0ab7tkSMY7FD+gfLy+Fd 15K1YFamX3+bMtk8PaVyuDaIE8xDFd3ZAJAPS3DqVatYitMLAY5xSsEHGUyrN+Uj 4UxdijeH/0vcdni5G5ekJnMX51bjYHGQvLunKbPcl9EexEJqDPX85d1RZwKu56yA qMAxdXN0hbTVUeZUoxPCebYRzgEjO3/eseDX6ga5J19cJUxo6DoozcwFifZLJVSZ HNQkOTBwF/94+Z32vTsI0AXf4E/h/J/WyEYfwDepLk7RbOxzM11UBnt9L4Y4AoBi HFYj/T3e0bf2PnTLTIPTDxKLkO4KmHYvOch9VC8TD4MFof6DXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8NwoEawXwo9BWkKvPcNwyYgg56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjMzNzgwZTUtZTE1My0z NjM0LWI5MzUtYjA0MmQ2ZGFmOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAbjvHYD6ag0EUyRtsWVL1It1gIlbBd5thKXaze6QDkNUjwV+iy0IRG ldkysY0F8iQ1bQ6U1K12IdCVOUusWIGLVO1/fxbRDuTsudm3t42tsHlOF8KBby0G kipctt3OVE9VbxeFRNBfvBGJ1YCJurGI5G1mQQzZg32G2A5o8Puoz8XprgOfjVzo SS7PPz5bU1F4Bnq8rLf3RF5ABeR9VAVHW5KM+16CR9BafJm3+6QK/PBi3w/C+Ehk xOGPUiJv88XfA9hvV9UGAN8E7ady/RK8LAXUSTPxjYy5YfT+yTAGPXgPOblK9xzh AKHmxaZx1V/mj5Vie7kpOVuUxZZDck0= -----END CERTIFICATE-----Generated at Sat May 10 12:39:28 2025 by rpki-client