$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa File: e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa (raw, json) Hash identifier: aY2KExwkMhBagoLBqEOhucXMf7l4eHKmpEu5oBqcf4A= Subject key identifier: 49:E3:FA:74:DD:DB:15:10:03:17:BE:06:32:BA:8A:D6:1B:EC:12:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3A454828FC9006DF2A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.89.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:45:48:28:fc:90:06:df:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=267a9994-d176-4fdb-bbf6-3cd4b038a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:3d:f5:d0:b3:fe:15:e8:d5:08:d2:6f:76: f9:7c:28:01:c3:ad:54:fa:41:8d:13:cd:6d:10:91: c0:3b:d8:a7:76:0e:f9:f5:3e:d0:d4:10:90:9e:91: e1:2f:a9:48:a9:9f:26:d9:93:0c:a8:70:d0:d4:0a: 66:7e:cf:78:91:25:a5:3d:fe:47:aa:3f:b4:02:74: a3:5d:03:fe:d0:cc:8b:eb:97:af:04:5a:10:e5:8f: 44:2c:ba:7f:34:d2:9a:8a:b1:5f:8a:8d:44:45:eb: 8a:02:dc:99:2a:9e:03:9f:f6:67:72:69:24:b1:93: 17:86:da:2f:f7:83:7a:1a:8a:b1:6f:6f:84:9e:e9: 99:e4:56:3d:9b:fa:b9:1f:b8:58:13:3f:a2:11:3d: 8b:6d:81:09:00:6b:81:34:b7:0f:81:7c:16:6d:35: 4f:c4:5b:08:1c:1f:7c:ae:11:2c:ec:5e:18:17:14: cb:f5:c7:73:82:3b:af:2f:79:86:3e:90:37:74:1e: 18:56:16:6a:d8:b3:a1:b9:7a:dc:61:5b:69:93:91: 44:ec:a6:51:77:c8:67:5c:0e:e1:f9:c5:30:a6:16: c3:23:86:fc:28:95:7a:34:60:89:a1:be:60:93:79: ab:e5:a1:a9:89:a9:d4:b0:94:c9:4a:65:d4:1b:0f: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E3:FA:74:DD:DB:15:10:03:17:BE:06:32:BA:8A:D6:1B:EC:12:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9fe2190-1bbc-3158-ac33-3a29ba432e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.89.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:48:29:0e:5c:fc:1e:57:6a:b5:8b:36:ab:25:ff:20:91:2f: 07:e6:f8:92:18:c0:5b:b4:70:43:10:1a:85:ef:7e:78:5a:63: d1:8d:76:90:aa:3b:2d:af:d2:bd:7e:1e:e4:5a:73:5a:42:64: bc:e1:23:a8:dd:65:d5:49:33:0b:a5:12:04:1a:72:a5:77:58: ec:8f:28:2a:40:c9:54:79:b6:bb:28:0a:85:6c:a5:04:9d:a3: a4:75:c0:86:7a:2b:e4:58:1a:5e:60:ce:08:eb:94:66:a9:85: 5f:0c:22:b1:aa:2c:50:1b:f8:9c:b2:1f:87:c9:19:63:7c:90: a4:1a:a2:fd:09:00:25:b6:72:21:18:90:28:8c:7b:8b:fb:75: 96:cd:0f:ac:1c:c5:83:71:38:7c:76:46:19:5e:f1:3e:ac:96: 48:7c:88:12:8a:21:32:0c:b7:88:30:7c:ab:40:0f:05:67:39: ca:a3:cb:e5:fd:fe:81:4e:1f:42:d7:25:36:af:6e:f6:0c:3c: 22:1f:74:00:7a:5d:8d:f1:f0:a1:b2:aa:19:13:c9:6c:e0:0e: 25:c2:f0:e9:2f:93:07:97:00:4c:eb:56:7d:10:67:81:7e:88: 68:10:64:33:02:de:cd:43:b9:54:31:d7:44:cb:cf:e1:35:af: 41:ec:d7:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjpFSCj8kAbfKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjY3YTk5OTQtZDE3Ni00ZmRiLWJiZjYtM2NkNGIwMzhhODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6499dCz/hXo1QjSb3b5fCgBw61U+kGNE81t EJHAO9indg759T7Q1BCQnpHhL6lIqZ8m2ZMMqHDQ1Apmfs94kSWlPf5Hqj+0AnSj XQP+0MyL65evBFoQ5Y9ELLp/NNKairFfio1EReuKAtyZKp4Dn/ZncmkksZMXhtov 94N6Goqxb2+EnumZ5FY9m/q5H7hYEz+iET2LbYEJAGuBNLcPgXwWbTVPxFsIHB98 rhEs7F4YFxTL9cdzgjuvL3mGPpA3dB4YVhZq2LOhuXrcYVtpk5FE7KZRd8hnXA7h +cUwphbDI4b8KJV6NGCJob5gk3mr5aGpianUsJTJSmXUGw+O5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnj+nTd2xUQAxe+BjK6itYb7BLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTlmZTIxOTAtMWJiYy0z MTU4LWFjMzMtM2EyOWJhNDMyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFIKQ5c/B5XarWLNqsl/yCRLwfm+JIYwFu0cEMQGoXvfnhaY9GNdpCq Oy2v0r1+HuRac1pCZLzhI6jdZdVJMwulEgQacqV3WOyPKCpAyVR5trsoCoVspQSd o6R1wIZ6K+RYGl5gzgjrlGaphV8MIrGqLFAb+JyyH4fJGWN8kKQaov0JACW2ciEY kCiMe4v7dZbND6wcxYNxOHx2Rhle8T6slkh8iBKKITIMt4gwfKtADwVnOcqjy+X9 /oFOH0LXJTavbvYMPCIfdAB6XY3x8KGyqhkTyWzgDiXC8OkvkweXAEzrVn0QZ4F+ iGgQZDMC3s1DuVQx10TLz+E1r0Hs16s= -----END CERTIFICATE-----Generated at Sat May 10 21:11:02 2025 by rpki-client