$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b471ef86-146a-3614-9a1c-6b05bb83f629.roa File: b471ef86-146a-3614-9a1c-6b05bb83f629.roa (raw, json) Hash identifier: EBhxrz5HpHFq1lcv9W8e+NiwWiQDC1kWrk44r8gqU8Q= Subject key identifier: AF:33:0E:BD:F3:4B:BE:82:7A:D3:2C:D5:58:58:F3:D2:5B:7E:D1:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A39DA70DD0A2589A522F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b471ef86-146a-3614-9a1c-6b05bb83f629.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.19.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:da:70:dd:0a:25:89:a5:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b09dd101-f1a5-46d9-a8a0-330d836c4ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0f:ab:3c:97:f4:75:05:f2:c3:ba:70:a8:d9: 24:cd:da:71:2a:9b:07:cd:52:26:ca:ad:cc:d9:a7: d4:f5:3d:71:56:95:b1:54:ed:a3:4b:72:67:a8:20: 5b:fd:1b:e6:7c:74:b3:45:2e:a8:ac:77:a9:16:77: 81:65:f3:ee:bd:89:22:08:f3:9f:8a:80:2d:14:ef: ab:bc:6b:f4:de:4a:8f:6e:4e:80:83:6c:ff:10:d3: cf:75:da:7c:3c:5d:53:9e:4e:4b:19:2a:93:f4:fa: ca:fc:37:fe:1a:07:b1:5a:d6:04:39:ca:fb:7a:70: f5:25:78:1f:f3:7e:da:d4:9e:91:5f:b5:3e:24:7d: 37:5c:21:94:71:9a:32:9a:59:51:cf:9e:81:ae:43: 70:00:ea:2d:27:d4:35:d0:dc:a2:13:da:4d:2f:56: 30:87:42:af:45:9c:3e:9a:7f:7a:de:d5:50:02:24: 17:3c:9a:53:76:c6:37:b2:17:1f:9c:57:48:54:c7: 2a:45:21:fa:55:e1:94:b5:c9:70:4a:d8:6d:5f:b2: b4:78:7c:57:ea:0d:be:93:57:9d:7e:95:00:c6:ab: 94:d1:ef:28:e8:30:56:75:66:3e:1d:be:d3:eb:7f: 9b:86:41:8e:3f:31:17:bf:b5:a6:47:e8:9b:9e:2f: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:33:0E:BD:F3:4B:BE:82:7A:D3:2C:D5:58:58:F3:D2:5B:7E:D1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b471ef86-146a-3614-9a1c-6b05bb83f629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.19.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5d:f6:a0:13:bb:61:08:a9:81:1e:76:0c:84:7f:37:eb:78: 2b:04:60:18:b4:87:ae:6e:71:7e:55:f4:47:ec:0b:a2:75:1e: b9:ad:a4:03:f2:30:c2:82:c6:54:7f:43:55:25:75:7d:77:5d: fd:dd:db:50:f0:c2:2e:74:bf:c9:83:2b:08:88:77:74:83:90: 34:8c:09:21:48:a3:22:03:e6:61:b8:98:9c:49:b5:b4:fb:3c: 21:90:84:25:c4:34:a7:76:fe:42:30:b9:44:56:06:d4:9b:a9: 0a:06:d5:be:8a:8a:e4:01:8c:fa:b9:b6:39:13:d4:0d:24:7a: 6a:2b:fa:56:32:6c:e5:15:cb:b3:69:8e:14:13:d6:cb:b0:c3: d2:24:75:8c:43:54:c5:b2:10:6e:d5:16:16:94:c6:fc:a9:95: ef:6a:b6:10:5a:ec:2f:8b:d6:cd:0a:1a:67:55:ab:10:a0:b8: 6d:fd:dd:7d:1c:83:69:7d:9f:85:2c:8a:fa:80:07:5b:6e:28: ff:e4:a1:ea:f6:a3:64:7a:61:34:fc:00:ff:86:72:c7:cf:7a: 3c:aa:db:29:06:e4:f1:66:54:15:24:ac:a8:fa:f9:d0:2e:01: 8a:53:14:49:a8:83:d5:fd:82:ba:c7:20:bb:10:00:84:95:f5: 83:e9:48:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjnacN0KJYmlIvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjA5ZGQxMDEtZjFhNS00NmQ5LWE4YTAtMzMwZDgzNmM0ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA+rPJf0dQXyw7pwqNkkzdpxKpsHzVImyq3M 2afU9T1xVpWxVO2jS3JnqCBb/RvmfHSzRS6orHepFneBZfPuvYkiCPOfioAtFO+r vGv03kqPbk6Ag2z/ENPPddp8PF1Tnk5LGSqT9PrK/Df+GgexWtYEOcr7enD1JXgf 837a1J6RX7U+JH03XCGUcZoymllRz56BrkNwAOotJ9Q10NyiE9pNL1Ywh0KvRZw+ mn963tVQAiQXPJpTdsY3shcfnFdIVMcqRSH6VeGUtclwSthtX7K0eHxX6g2+k1ed fpUAxquU0e8o6DBWdWY+Hb7T63+bhkGOPzEXv7WmR+ibni9MvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8zDr3zS76CetMs1VhY89JbftHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ3MWVmODYtMTQ2YS0z NjE0LTlhMWMtNmIwNWJiODNmNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQBMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRd9qATu2EIqYEedgyEfzfreCsEYBi0h65ucX5V9EfsC6J1HrmtpAPy MMKCxlR/Q1UldX13Xf3d21Dwwi50v8mDKwiId3SDkDSMCSFIoyID5mG4mJxJtbT7 PCGQhCXENKd2/kIwuURWBtSbqQoG1b6KiuQBjPq5tjkT1A0kemor+lYybOUVy7Np jhQT1suww9IkdYxDVMWyEG7VFhaUxvyple9qthBa7C+L1s0KGmdVqxCguG393X0c g2l9n4UsivqAB1tuKP/koer2o2R6YTT8AP+GcsfPejyq2ykG5PFmVBUkrKj6+dAu AYpTFEmog9X9grrHILsQAISV9YPpSHQ= -----END CERTIFICATE-----Generated at Sat May 10 20:58:12 2025 by rpki-client