$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa File: e121129d-58f0-3ca0-b388-f88902b0d991.roa (raw, json) Hash identifier: Ox9S5x0SEQlq5/qG6Vgq2j4BfIjEjgv2c/DeuuxPzGU= Subject key identifier: 29:1B:1F:A7:72:33:F2:EE:47:94:84:AA:76:3C:72:FD:4E:74:BA:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A108743A53364B463AE30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 64.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:10:87:43:a5:33:64:b4:63:ae:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=b2c44642-d79f-47de-9fbc-8c664bad3863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:02:f2:fe:ee:d2:67:a2:7a:dd:41:a1:1d: 8f:a3:1d:01:4a:03:b1:e1:11:31:1d:28:6f:f0:de: bc:1a:9c:77:54:07:08:16:c6:66:d8:20:0b:4a:bd: 65:ed:06:87:6c:ed:85:67:01:80:90:7a:bc:ae:b0: d2:cc:71:b5:b6:c6:af:9a:ea:c4:a4:a6:60:73:83: 86:6f:99:db:d9:1d:60:41:2d:b5:1f:6b:1d:3d:d8: e0:5f:71:64:e2:39:e5:b6:9f:f4:6d:96:9e:64:d6: 6b:76:bd:59:0a:03:40:e8:9a:4c:9e:8e:ed:74:64: 2f:6b:86:fc:b4:86:dd:95:48:96:2c:cf:25:3e:74: 1e:69:d3:33:b9:3c:bf:a3:2f:0a:5e:24:e9:8e:03: 1e:2b:c1:b1:70:ad:24:74:30:7a:49:79:62:8d:0e: 98:b2:c2:4d:2a:3a:46:bb:29:d4:1d:e8:bc:c7:9a: 7c:58:ce:6c:5d:96:7c:3e:9d:11:3b:14:bb:86:2a: c1:a8:67:cb:2d:c0:5a:28:36:ff:8a:76:5b:0c:95: 2c:4c:26:0d:73:fd:ff:25:a4:cb:b5:5b:41:fc:4b: ee:a9:6f:85:bd:c0:21:4c:6d:4b:6e:6e:c5:39:ce: c1:71:fc:28:91:c5:5b:4c:28:02:91:4b:0e:d4:54: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:1F:A7:72:33:F2:EE:47:94:84:AA:76:3C:72:FD:4E:74:BA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e121129d-58f0-3ca0-b388-f88902b0d991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.206.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:78:d0:83:70:84:4c:20:df:fa:5a:d8:13:9d:80:10:05:0f: 7a:7d:2e:c8:b6:8f:fe:a7:e1:fc:c8:db:57:49:22:1d:35:65: 46:e0:6e:ee:dc:b9:56:19:c6:d8:bb:d1:ca:16:ce:e7:01:b3: b2:65:53:28:90:e6:50:49:87:69:58:59:f0:29:ed:30:1d:55: 6f:64:3b:e5:34:f2:41:c1:3a:17:0b:36:6f:58:ec:b4:27:f5: 57:5c:0d:00:56:7a:4f:d8:0c:d4:55:68:46:7d:3b:b4:30:e1: ba:1c:e6:4b:a5:07:c4:1f:fa:5d:30:4a:27:14:54:b1:c3:35: c0:51:28:b6:94:75:d2:8a:8a:07:34:31:a1:40:33:f6:10:42: d0:ab:76:cf:25:f2:9a:78:88:5a:c2:d1:93:9d:b6:6a:4d:fc: a4:36:8c:44:48:02:9c:3c:9c:88:da:a1:b1:2c:52:33:40:ec: 49:cd:50:98:c9:c9:9a:40:2f:61:ac:fd:66:27:86:c3:8d:d2: 11:10:72:42:d3:8d:74:dc:9e:85:a0:a8:92:16:83:37:ae:48: d8:85:45:b9:1b:9d:3a:82:b7:56:42:1a:ea:a1:d8:8d:92:38: a1:e1:17:e0:5b:12:1d:0a:ee:98:78:42:dd:c6:3f:82:5f:df: 50:0d:f9:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhCHQ6UzZLRjrjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YjJjNDQ2NDItZDc5Zi00N2RlLTlmYmMtOGM2NjRiYWQzODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6REC8v7u0meiet1BoR2Pox0BSgOx4RExHShv 8N68Gpx3VAcIFsZm2CALSr1l7QaHbO2FZwGAkHq8rrDSzHG1tsavmurEpKZgc4OG b5nb2R1gQS21H2sdPdjgX3Fk4jnltp/0bZaeZNZrdr1ZCgNA6JpMno7tdGQva4b8 tIbdlUiWLM8lPnQeadMzuTy/oy8KXiTpjgMeK8GxcK0kdDB6SXlijQ6YssJNKjpG uynUHei8x5p8WM5sXZZ8Pp0ROxS7hirBqGfLLcBaKDb/inZbDJUsTCYNc/3/JaTL tVtB/EvuqW+FvcAhTG1Lbm7FOc7BcfwokcVbTCgCkUsO1FSrbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkbH6dyM/LuR5SEqnY8cv1OdLqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTEyMTEyOWQtNThmMC0z Y2EwLWIzODgtZjg4OTAyYjBkOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQM7nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE540INwhEwg3/pa2BOdgBAFD3p9Lsi2j/6n4fzI21dJIh01ZUbgbu7c uVYZxti70coWzucBs7JlUyiQ5lBJh2lYWfAp7TAdVW9kO+U08kHBOhcLNm9Y7LQn 9VdcDQBWek/YDNRVaEZ9O7Qw4boc5kulB8Qf+l0wSicUVLHDNcBRKLaUddKKigc0 MaFAM/YQQtCrds8l8pp4iFrC0ZOdtmpN/KQ2jERIApw8nIjaobEsUjNA7EnNUJjJ yZpAL2Gs/WYnhsON0hEQckLTjXTcnoWgqJIWgzeuSNiFRbkbnTqCt1ZCGuqh2I2S OKHhF+BbEh0K7ph4Qt3GP4Jf31AN+Uw= -----END CERTIFICATE-----Generated at Sun May 11 04:22:59 2025 by rpki-client