$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa File: 0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa (raw, json) Hash identifier: 89BVW1TyS7Xp0OxlLJhm2YmhdzFNnQ46B3FC+BudGeA= Subject key identifier: 11:77:D1:33:33:FD:14:56:7B:E8:32:3F:9B:5F:AC:4F:AC:0F:4D:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2A9D5EA6A9C4920E3459B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa Signing time: Thu 20 Feb 2025 18:14:42 +0000 ROA not before: Thu 20 Feb 2025 18:14:42 +0000 ROA not after: Wed 21 May 2025 17:14:42 +0000 asID: 7029 IP address blocks: 67.141.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:a9:d5:ea:6a:9c:49:20:e3:45:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:14:42 2025 GMT Not After : May 21 17:14:42 2025 GMT Subject: CN=9a32d635-9e39-4b63-b9ba-92a0d6f326c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:52:50:e8:34:29:80:7e:50:b5:17:fc:a8: f9:88:39:60:ae:bc:7d:6b:b2:ab:e6:19:fc:95:0b: df:6e:23:6f:0f:4d:7c:a7:e4:f1:2d:0c:dc:d7:c0: 10:8d:9e:34:76:66:ef:be:4f:59:bf:7e:0f:2b:33: 0a:e6:1c:2f:df:b2:6b:fb:0b:39:86:fd:96:99:d2: 10:ed:ab:e6:50:50:06:d5:b1:21:e6:6e:e5:e6:a3: 24:06:b1:9e:c6:bb:c2:95:ed:61:c4:31:6f:f1:0a: b4:46:b8:6c:46:04:b0:09:a1:d6:b5:de:53:98:e7: 9e:05:52:42:d3:33:d9:df:8c:87:ef:5d:b5:28:c5: cc:04:cb:fb:06:fc:d7:02:8f:9a:d0:7b:88:8e:71: 1c:11:69:b2:5a:48:33:be:5e:59:d2:83:83:1f:c2: e6:fc:14:ca:cd:f3:72:92:8c:1f:da:1b:b0:ae:9e: 0c:03:11:ba:14:bb:01:03:02:f9:83:8d:b1:57:d3: 65:98:04:b3:d3:23:aa:0f:73:4a:fe:fa:f7:2e:f7: 9a:28:12:49:28:fc:b7:f6:34:72:6b:68:43:45:2e: e2:57:59:7a:19:39:92:e8:8b:c3:02:34:6f:e7:76: b7:ae:a9:a6:75:a4:46:89:60:f9:ae:f9:b3:24:ff: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:77:D1:33:33:FD:14:56:7B:E8:32:3F:9B:5F:AC:4F:AC:0F:4D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0aceaa06-2a51-3a36-be8a-d1b45e35b570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:db:45:3c:55:59:21:86:47:5e:2a:0c:38:1c:4a:71:26:0e: b2:91:07:ab:ec:f2:5e:2e:17:9c:fc:cf:f4:20:4d:01:0c:37: 09:db:e3:17:b3:8a:d4:36:3d:3e:6c:59:33:3b:d5:d5:25:2d: 3d:a1:a3:20:53:33:ea:b6:21:b9:df:01:37:93:3c:3f:06:b3: ce:88:cc:50:f6:1c:04:b6:c9:73:e9:f1:25:1f:ac:dd:97:9b: 07:6f:12:ae:fb:47:bb:45:77:07:14:fe:30:63:28:be:f8:60: b8:75:db:bd:56:f4:50:d8:98:2b:4c:0b:ba:b7:71:37:54:fc: 87:cd:c2:5d:6a:d7:f5:76:dc:7f:6d:77:12:74:f5:d0:46:0d: d7:cc:d7:7b:94:e2:27:3e:af:f9:4e:6e:4c:62:a5:1a:ae:4d: a7:73:d7:13:49:55:56:24:0d:bc:84:de:53:a2:56:4c:12:b8: 63:33:2c:22:94:8e:f6:20:db:1f:92:aa:a5:cb:38:d4:ef:c2: 95:20:23:49:02:8f:35:3f:c9:0d:83:ef:04:6c:41:86:f0:9a: 65:cf:b6:c7:1a:f9:13:f5:be:32:1c:fb:48:a6:5c:2e:f1:5a: 2f:f5:f7:61:28:c9:0b:bd:c4:15:19:45:d3:ed:ad:92:75:68: 59:f8:c5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqdXqapxJIONFmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTQ0MloXDTI1MDUyMTE3MTQ0MlowLzEtMCsGA1UEAxMk OWEzMmQ2MzUtOWUzOS00YjYzLWI5YmEtOTJhMGQ2ZjMyNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieJSUOg0KYB+ULUX/Kj5iDlgrrx9a7Kr5hn8 lQvfbiNvD018p+TxLQzc18AQjZ40dmbvvk9Zv34PKzMK5hwv37Jr+ws5hv2WmdIQ 7avmUFAG1bEh5m7l5qMkBrGexrvCle1hxDFv8Qq0RrhsRgSwCaHWtd5TmOeeBVJC 0zPZ34yH7121KMXMBMv7BvzXAo+a0HuIjnEcEWmyWkgzvl5Z0oODH8Lm/BTKzfNy kowf2huwrp4MAxG6FLsBAwL5g42xV9NlmASz0yOqD3NK/vr3LveaKBJJKPy39jRy a2hDRS7iV1l6GTmS6IvDAjRv53a3rqmmdaRGiWD5rvmzJP9GpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF30TMz/RRWe+gyP5tfrE+sD01gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGFjZWFhMDYtMmE1MS0z YTM2LWJlOGEtZDFiNDVlMzViNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjbRTxVWSGGR14qDDgcSnEmDrKRB6vs8l4uF5z8z/QgTQEMNwnb4xez itQ2PT5sWTM71dUlLT2hoyBTM+q2IbnfATeTPD8Gs86IzFD2HAS2yXPp8SUfrN2X mwdvEq77R7tFdwcU/jBjKL74YLh1271W9FDYmCtMC7q3cTdU/IfNwl1q1/V23H9t dxJ09dBGDdfM13uU4ic+r/lObkxipRquTadz1xNJVVYkDbyE3lOiVkwSuGMzLCKU jvYg2x+SqqXLONTvwpUgI0kCjzU/yQ2D7wRsQYbwmmXPtsca+RP1vjIc+0imXC7x Wi/192EoyQu9xBUZRdPtrZJ1aFn4xfM= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:48 2025 by rpki-client