$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6a0006e-20ee-309d-bf8d-600d047b322c.roa File: e6a0006e-20ee-309d-bf8d-600d047b322c.roa (raw, json) Hash identifier: FZW9lzaqzlhY+Ufp+EMJROtWtBI8AI0Xl26vf/ap568= Subject key identifier: B6:64:95:91:EA:D1:26:2E:EF:77:79:77:A9:AF:EB:F1:E7:4C:91:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3A73DD45465EB4EDD540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6a0006e-20ee-309d-bf8d-600d047b322c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.115.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:73:dd:45:46:5e:b4:ed:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0bc08112-dadf-4ad8-82f2-7cdb8642f686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:66:a1:81:36:4b:bf:84:44:b0:67:53:d9: 21:bd:6c:03:2a:00:0b:5a:69:63:70:b3:a5:c7:52: 9f:a9:51:6f:a7:14:1d:e8:da:1a:30:86:98:d0:43: 70:cf:6a:b6:75:9a:76:b5:ec:53:df:7a:89:64:c1: 73:52:8e:c5:5f:90:19:29:73:0c:ce:cc:ce:df:a1: 99:a9:92:b5:41:18:f3:64:69:a6:4e:39:fc:6b:40: 75:1f:3b:0b:6a:c6:cd:9a:c8:10:6f:7f:00:6f:e6: 3f:8c:38:d2:d5:69:cf:62:06:f1:6a:bd:c8:f9:f4: 65:95:1d:31:89:6e:d9:69:c3:ed:6a:7f:72:89:ab: 40:9b:4a:0d:f2:f1:b8:43:fe:27:ec:6d:5b:a4:04: 18:f5:d9:14:6c:ad:f0:d4:20:00:9d:e2:5b:f9:a5: f1:20:2e:5f:34:6e:58:55:84:22:29:66:cc:d2:83: 17:97:22:93:c8:00:21:5a:8c:9e:6a:5f:89:e3:39: d7:c2:d1:be:cf:f2:01:b5:6b:08:d2:56:0d:ca:51: 76:4a:93:20:97:a7:f9:1f:ea:b5:59:7d:f6:64:51: c5:13:cd:ec:a3:52:bb:bc:c1:8a:24:24:b3:99:b1: 9b:b9:43:96:5e:cf:f6:17:6f:7a:68:da:d0:9f:42: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:95:91:EA:D1:26:2E:EF:77:79:77:A9:AF:EB:F1:E7:4C:91:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6a0006e-20ee-309d-bf8d-600d047b322c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.115.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:79:15:85:83:b1:41:8a:8c:6d:ae:3c:9c:a5:9e:0f:39:06: 1a:1a:61:b0:14:8f:d0:54:1a:05:31:4a:0f:58:9d:d8:f6:22: cd:d4:5c:b3:41:1d:43:5f:67:34:8a:14:b9:55:6e:c0:0d:62: 78:aa:bb:b6:ec:f4:b2:f6:8a:73:b0:48:4a:4c:50:c3:4f:7f: 76:1b:5d:81:94:0d:82:4b:b1:c4:56:0b:8b:59:03:46:f3:8e: 08:19:fc:0e:42:be:d2:6b:20:3a:ef:50:01:6e:0a:82:01:bf: 71:83:3d:31:5b:74:86:5e:7e:7a:84:7f:7b:11:fd:c7:62:87: e7:8c:8d:c4:0d:4b:fe:55:4f:88:bb:bc:a6:10:f8:60:cd:fc: 2d:f4:bc:16:21:2c:84:c1:1e:9d:14:2a:23:a5:93:65:19:92: 8c:09:87:ea:04:ad:ea:9c:23:2b:f9:54:35:5c:bf:3b:8e:e0: 0e:42:83:16:81:3f:f3:be:06:15:83:b8:69:fe:d7:03:47:71: be:13:c9:da:a6:b6:5b:94:7c:9e:6d:04:87:8f:9b:99:8b:e2: 48:b3:31:c1:39:ad:4e:59:0e:f9:76:34:9e:f1:bf:1d:31:0e: a6:c7:af:4f:d2:11:7a:bf:9f:64:8e:d4:8d:54:c4:02:08:39: 05:8d:8d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjpz3UVGXrTt1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MGJjMDgxMTItZGFkZi00YWQ4LTgyZjItN2NkYjg2NDJmNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aJmoYE2S7+ERLBnU9khvWwDKgALWmljcLOl x1KfqVFvpxQd6NoaMIaY0ENwz2q2dZp2texT33qJZMFzUo7FX5AZKXMMzszO36GZ qZK1QRjzZGmmTjn8a0B1HzsLasbNmsgQb38Ab+Y/jDjS1WnPYgbxar3I+fRllR0x iW7ZacPtan9yiatAm0oN8vG4Q/4n7G1bpAQY9dkUbK3w1CAAneJb+aXxIC5fNG5Y VYQiKWbM0oMXlyKTyAAhWoyeal+J4znXwtG+z/IBtWsI0lYNylF2SpMgl6f5H+q1 WX32ZFHFE83so1K7vMGKJCSzmbGbuUOWXs/2F296aNrQn0KUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZklZHq0SYu73d5d6mv6/HnTJEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTZhMDAwNmUtMjBlZS0z MDlkLWJmOGQtNjAwZDA0N2IzMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt5FYWDsUGKjG2uPJylng85BhoaYbAUj9BUGgUxSg9Yndj2Is3UXLNB HUNfZzSKFLlVbsANYniqu7bs9LL2inOwSEpMUMNPf3YbXYGUDYJLscRWC4tZA0bz jggZ/A5CvtJrIDrvUAFuCoIBv3GDPTFbdIZefnqEf3sR/cdih+eMjcQNS/5VT4i7 vKYQ+GDN/C30vBYhLITBHp0UKiOlk2UZkowJh+oEreqcIyv5VDVcvzuO4A5CgxaB P/O+BhWDuGn+1wNHcb4TydqmtluUfJ5tBIePm5mL4kizMcE5rU5ZDvl2NJ7xvx0x DqbHr0/SEXq/n2SO1I1UxAIIOQWNjXg= -----END CERTIFICATE-----Generated at Sat May 10 09:55:10 2025 by rpki-client