$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa File: ca89145a-e83c-386d-ad0b-887d862762e0.roa (raw, json) Hash identifier: jEZAh1tFCRxcCWMwCXOURyNB+ivgTpivwOOatsKy2k0= Subject key identifier: B5:30:1C:D8:B9:B8:FE:47:91:DB:FE:64:33:9A:A1:7C:90:3D:0F:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A112404B097576117F400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.61.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:24:04:b0:97:57:61:17:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1ac3a90b-3c88-4ddf-81cf-190dc3600ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f0:7b:95:70:20:40:96:6e:3e:ff:c3:a0:4e: 36:d0:b7:11:e8:9d:bb:68:ef:32:8e:d7:74:7a:f9: 97:c3:f7:f6:41:0e:da:05:84:34:b4:45:ef:9b:26: 27:39:9e:63:d9:3c:2b:9f:44:f0:b3:84:03:27:48: 02:04:c9:7c:9b:76:88:5c:56:9e:5b:e5:e9:e3:5f: cb:6d:b2:b2:d5:b4:87:40:a8:d3:b0:2a:47:01:50: 5d:5b:94:e5:c6:f1:64:3f:36:12:8b:f1:aa:8d:bc: 85:9e:47:6f:6d:7a:e4:f3:f6:8f:11:a2:f7:f6:53: 54:e1:96:c3:55:34:97:e1:50:02:7f:a5:e0:f8:a6: 49:be:e0:18:ca:fb:64:5a:84:3e:ea:70:ff:f0:b3: 3a:d8:63:64:5b:88:ba:13:e3:ea:7a:26:ba:2d:a7: 0f:7d:fa:cf:24:bd:cb:e7:17:7c:91:b1:48:ad:99: 87:86:f9:3c:cd:a1:fc:53:5f:e8:cd:a0:3a:0d:bc: 0c:c3:80:50:83:1f:c6:53:86:b5:bc:27:22:fa:a1: cb:a7:be:15:99:b4:23:6f:8b:ee:03:0c:38:d5:fe: 86:5f:3f:59:04:2b:73:c6:ef:4a:b1:4e:c0:30:9c: 43:48:70:03:e0:b7:a7:d8:f5:cb:4e:cc:0e:8b:a6: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:30:1C:D8:B9:B8:FE:47:91:DB:FE:64:33:9A:A1:7C:90:3D:0F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca89145a-e83c-386d-ad0b-887d862762e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.61.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d7:f4:e8:78:33:52:0f:78:de:2b:5a:8d:9f:3b:4a:aa:5f: 81:9d:1f:d2:01:1a:50:8c:29:24:e5:53:8f:1a:a1:58:dc:1e: 07:63:74:1f:7f:33:5e:cd:52:84:34:b9:b7:a0:d8:59:e8:f5: 7a:13:28:91:61:85:02:c6:01:55:b6:99:5b:f8:9a:39:f7:7d: 2f:38:3e:32:fa:68:84:5a:e2:62:86:ad:e3:75:d9:1c:0b:ef: 0d:8f:f2:77:a4:d1:0e:2e:3b:06:fe:0c:99:7e:84:f8:3b:11: 66:4a:2c:49:c6:de:e4:03:10:39:9c:6c:69:a6:83:f9:e8:56: 2a:3d:a8:40:34:0a:6a:06:57:ac:c5:e1:55:9c:fc:12:93:1c: 37:77:d9:1a:41:32:58:b9:f6:a4:e5:92:fe:f6:2f:7f:45:cf: 64:50:4a:32:b3:cb:75:15:f4:43:79:89:e4:3e:e5:73:5e:22: 99:02:d5:8c:4d:c6:67:00:18:83:33:58:3a:c6:cb:ee:af:20: e4:ef:89:f6:8a:c0:17:2f:1d:cb:8e:91:f4:91:9d:22:b5:db: 11:e2:20:a7:90:96:53:90:e1:a3:92:f6:92:35:7a:0f:a0:3d: eb:a8:63:1b:3b:f5:b7:88:d2:6c:e1:34:94:65:44:b0:bf:78: 3a:79:2f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShEkBLCXV2EX9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWFjM2E5MGItM2M4OC00ZGRmLTgxY2YtMTkwZGMzNjAwZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifB7lXAgQJZuPv/DoE420LcR6J27aO8yjtd0 evmXw/f2QQ7aBYQ0tEXvmyYnOZ5j2Twrn0Tws4QDJ0gCBMl8m3aIXFaeW+Xp41/L bbKy1bSHQKjTsCpHAVBdW5TlxvFkPzYSi/GqjbyFnkdvbXrk8/aPEaL39lNU4ZbD VTSX4VACf6Xg+KZJvuAYyvtkWoQ+6nD/8LM62GNkW4i6E+Pqeia6LacPffrPJL3L 5xd8kbFIrZmHhvk8zaH8U1/ozaA6DbwMw4BQgx/GU4a1vCci+qHLp74VmbQjb4vu Aww41f6GXz9ZBCtzxu9KsU7AMJxDSHAD4Len2PXLTswOi6ZB5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUwHNi5uP5Hkdv+ZDOaoXyQPQ9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E4OTE0NWEtZTgzYy0z ODZkLWFkMGItODg3ZDg2Mjc2MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQD0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7X9Oh4M1IPeN4rWo2fO0qqX4GdH9IBGlCMKSTlU48aoVjcHgdjdB9/ M17NUoQ0ubeg2Fno9XoTKJFhhQLGAVW2mVv4mjn3fS84PjL6aIRa4mKGreN12RwL 7w2P8nek0Q4uOwb+DJl+hPg7EWZKLEnG3uQDEDmcbGmmg/noVio9qEA0CmoGV6zF 4VWc/BKTHDd32RpBMli59qTlkv72L39Fz2RQSjKzy3UV9EN5ieQ+5XNeIpkC1YxN xmcAGIMzWDrGy+6vIOTvifaKwBcvHcuOkfSRnSK12xHiIKeQllOQ4aOS9pI1eg+g PeuoYxs79beI0mzhNJRlRLC/eDp5LwY= -----END CERTIFICATE-----Generated at Sat May 10 07:33:16 2025 by rpki-client