$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa File: 0423614b-9ba5-3454-9f69-13330d5e26bc.roa (raw, json) Hash identifier: yPuFmWXEKNPtvG9p1Xn7yGEubgsIuur/L286bToiPu0= Subject key identifier: 52:98:C3:3F:B3:15:C1:C1:69:C7:EA:5B:DC:A2:76:FD:0F:F0:0D:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5D885C7C53FE2C47B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 67.141.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5d:88:5c:7c:53:fe:2c:47:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=33e0aa47-04a4-40e0-93ac-89b91d57c361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:33:43:4f:6d:ee:81:2e:72:ba:0a:4d:9d:f7: e2:de:21:6c:ab:ff:f6:2c:00:4d:57:a0:8d:1c:f1: 36:19:00:d6:63:09:4a:8d:08:7f:3a:6e:53:af:61: 0d:b0:a5:34:2e:8e:ed:05:e3:ea:05:43:2f:b5:25: 11:18:75:1b:e0:89:c3:71:96:f9:da:36:83:04:f2: ab:68:10:bc:74:b6:cb:fe:92:53:61:b7:19:00:d3: 9a:1c:93:6c:14:26:a8:cf:99:7c:f1:fb:36:46:d7: 50:20:a8:19:f7:31:24:d1:9f:25:dd:c0:f9:58:11: 5e:79:eb:42:66:fd:8a:b5:45:37:20:ea:ab:7a:ee: 7d:db:30:99:8d:f2:98:6c:2d:8f:4c:3b:74:27:e4: a5:07:0b:10:0d:80:35:a5:0c:3f:25:7f:6e:f7:5c: 68:59:e7:09:36:d3:ac:00:dc:0b:cf:a9:24:4c:8f: 37:7e:31:0e:f4:74:30:cd:a8:04:19:89:a1:e1:ba: 10:97:21:25:5c:d6:d4:c6:39:bb:b2:fd:73:f5:0e: 4c:70:59:e5:58:5e:29:fe:e5:f0:a7:f7:65:82:8c: f7:fd:0a:9a:51:83:7c:ee:85:e1:96:5f:ac:46:d2: 3f:bc:17:b6:f4:15:ae:2b:23:02:02:4e:8c:c9:6d: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:C3:3F:B3:15:C1:C1:69:C7:EA:5B:DC:A2:76:FD:0F:F0:0D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0423614b-9ba5-3454-9f69-13330d5e26bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:7a:c4:b4:46:11:b9:8f:b1:b7:e2:f2:66:6c:22:8f:52:41: 13:e1:1f:0c:27:a3:11:84:90:fd:b7:4c:7e:7e:4d:39:a5:b2: 0b:c7:71:77:d9:ec:23:d0:52:be:c0:f1:16:36:37:33:b0:c7: e0:8c:fe:19:8d:3d:b2:21:ed:62:e7:f9:20:c0:81:ad:8c:c9: cc:29:f6:7d:af:e6:f0:53:6e:0d:27:8e:ed:c1:ff:28:8c:75: 56:16:0d:9d:ca:b2:95:16:31:c5:e9:f7:0c:6a:14:ad:ec:50: f9:d8:18:9c:e4:06:5a:91:57:d4:4b:b9:6a:9f:fe:9c:b9:36: 25:0f:55:4e:73:bc:30:79:99:ba:a4:16:04:74:94:a5:81:e5: 01:99:55:df:0d:05:e6:32:28:05:6c:a0:98:29:08:16:7d:5d: c6:0a:b2:32:02:a9:9a:8d:ba:b9:9a:31:36:a7:a2:21:fb:e4: 09:fe:1b:e8:a6:e3:f9:72:f8:38:72:50:88:75:b8:99:18:7c: 07:09:a8:d7:c0:34:64:72:76:0f:d9:a8:6a:07:2f:93:24:70: fb:13:03:ce:d4:95:79:4b:ea:8d:12:6c:b5:d2:45:4d:55:8d: 9a:f7:55:3e:58:f7:32:e3:7c:cc:18:6c:19:d2:0a:5f:e9:99: bc:f9:37:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF2IXHxT/ixHsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MzNlMGFhNDctMDRhNC00MGUwLTkzYWMtODliOTFkNTdjMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTNDT23ugS5yugpNnffi3iFsq//2LABNV6CN HPE2GQDWYwlKjQh/Om5Tr2ENsKU0Lo7tBePqBUMvtSURGHUb4InDcZb52jaDBPKr aBC8dLbL/pJTYbcZANOaHJNsFCaoz5l88fs2RtdQIKgZ9zEk0Z8l3cD5WBFeeetC Zv2KtUU3IOqreu592zCZjfKYbC2PTDt0J+SlBwsQDYA1pQw/JX9u91xoWecJNtOs ANwLz6kkTI83fjEO9HQwzagEGYmh4boQlyElXNbUxjm7sv1z9Q5McFnlWF4p/uXw p/dlgoz3/QqaUYN87oXhll+sRtI/vBe29BWuKyMCAk6MyW32ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKYwz+zFcHBacfqW9yidv0P8A3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQyMzYxNGItOWJhNS0z NDU0LTlmNjktMTMzMzBkNWUyNmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ6xLRGEbmPsbfi8mZsIo9SQRPhHwwnoxGEkP23TH5+TTmlsgvHcXfZ 7CPQUr7A8RY2NzOwx+CM/hmNPbIh7WLn+SDAga2Mycwp9n2v5vBTbg0nju3B/yiM dVYWDZ3KspUWMcXp9wxqFK3sUPnYGJzkBlqRV9RLuWqf/py5NiUPVU5zvDB5mbqk FgR0lKWB5QGZVd8NBeYyKAVsoJgpCBZ9XcYKsjICqZqNurmaMTanoiH75An+G+im 4/ly+DhyUIh1uJkYfAcJqNfANGRydg/ZqGoHL5MkcPsTA87UlXlL6o0SbLXSRU1V jZr3VT5Y9zLjfMwYbBnSCl/pmbz5N9E= -----END CERTIFICATE-----Generated at Sat Apr 5 23:22:25 2025 by rpki-client