$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa File: 10bf7baf-b687-318f-85ac-84eaaad50d3e.roa (raw, json) Hash identifier: nCfmubbcSOfBffUkWKeSog+39bljnPhnIJBAgI9HDeg= Subject key identifier: A2:58:54:7C:DD:91:B6:83:25:A8:B7:E5:7B:49:4B:08:E5:64:BF:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93C45678D439175001B200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa Signing time: Thu 06 Feb 2025 18:13:43 +0000 ROA not before: Thu 06 Feb 2025 18:13:43 +0000 ROA not after: Wed 07 May 2025 17:13:43 +0000 asID: 7029 IP address blocks: 67.141.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:c4:56:78:d4:39:17:50:01:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:43 2025 GMT Not After : May 7 17:13:43 2025 GMT Subject: CN=80f28465-34d5-416d-b04e-14d79c3f612e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:45:a8:30:5e:ae:7f:42:04:e9:1c:a8:9d: 12:2e:2d:3f:b1:bb:e8:dd:0f:bd:b1:4f:4a:69:70: dd:0d:b8:cb:00:4c:da:db:70:21:3b:d2:02:35:80: b2:d5:e9:9e:d9:ff:5e:3b:85:ca:48:d4:45:29:b7: 35:e7:32:6d:79:84:a8:46:5c:69:cf:cc:98:55:60: 96:0e:ec:d2:47:0f:22:36:ea:10:78:e9:fc:71:bf: ce:7a:4a:3d:c4:40:15:01:bb:e9:4f:0e:8f:e2:b4: 67:35:35:ca:62:3f:e4:e0:e7:0f:13:53:d8:1b:e8: 06:ad:37:46:95:8c:95:50:8f:63:5d:fb:12:46:dd: 89:3c:13:99:00:d5:c9:fb:1e:0e:59:fa:24:7e:4e: 61:d9:d0:44:58:ba:13:02:21:6d:7c:be:ae:80:b9: 02:7e:6c:a7:a7:4c:08:7d:83:8d:c1:a0:c9:25:a2: 3f:32:50:f2:24:cc:0a:9f:76:e3:df:90:53:3c:58: 4a:70:b0:ca:8b:d8:ee:2f:91:e8:71:1e:3d:e5:fd: f3:6d:bb:72:ea:b0:8c:e5:e8:64:80:92:a6:6f:52: 73:21:35:6a:b5:9d:dc:f4:80:d0:08:67:49:c9:11: 7f:11:33:0b:90:09:3e:35:c2:bd:f6:15:72:45:15: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:54:7C:DD:91:B6:83:25:A8:B7:E5:7B:49:4B:08:E5:64:BF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:92:20:73:10:0f:60:ba:60:8b:b0:59:e5:bf:77:10:fe:9d: 1f:21:16:a3:1c:5e:81:d8:72:04:67:03:db:e1:d7:2f:71:e3: c8:56:f5:d3:a6:a6:bd:90:ab:ed:10:6b:85:de:ff:5f:8a:fe: e4:67:22:cf:d8:24:08:dc:ff:93:dc:ae:dc:c8:61:cc:3a:76: 0a:3e:32:56:ae:29:d9:e7:1f:28:7f:27:cf:d8:63:88:52:b3: ac:86:83:cb:7d:4e:4a:29:a0:82:e4:25:ef:a2:01:fd:64:33: 3a:48:d0:c4:4a:04:ce:af:f3:f0:4a:e1:63:dd:af:a2:e5:e3: cc:14:e5:b0:7f:fc:34:56:b4:f6:7e:3d:3f:bc:22:b3:93:2e: 77:0a:4e:f0:ff:83:a5:c5:57:55:53:84:a7:a9:a9:43:bd:96: a9:ec:2d:fa:9b:10:4c:57:e7:aa:ba:2a:f7:90:9e:e1:4e:30: a9:ae:ff:49:7e:92:8c:35:87:6a:be:35:4e:04:83:72:16:f8: 4f:36:71:dd:83:6f:ee:54:86:fe:97:e2:28:5a:83:57:4e:82: b7:01:30:fc:b6:d1:13:78:47:ad:24:33:94:b4:ed:2f:e8:6a: c9:14:3e:fc:84:fc:16:4f:db:cd:a0:51:d9:c1:c2:eb:6a:e1: b5:7c:2d:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk8RWeNQ5F1ABsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTM0M1oXDTI1MDUwNzE3MTM0M1owLzEtMCsGA1UEAxMk ODBmMjg0NjUtMzRkNS00MTZkLWIwNGUtMTRkNzljM2Y2MTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo5FqDBern9CBOkcqJ0SLi0/sbvo3Q+9sU9K aXDdDbjLAEza23AhO9ICNYCy1eme2f9eO4XKSNRFKbc15zJteYSoRlxpz8yYVWCW DuzSRw8iNuoQeOn8cb/Oeko9xEAVAbvpTw6P4rRnNTXKYj/k4OcPE1PYG+gGrTdG lYyVUI9jXfsSRt2JPBOZANXJ+x4OWfokfk5h2dBEWLoTAiFtfL6ugLkCfmynp0wI fYONwaDJJaI/MlDyJMwKn3bj35BTPFhKcLDKi9juL5HocR495f3zbbty6rCM5ehk gJKmb1JzITVqtZ3c9IDQCGdJyRF/ETMLkAk+NcK99hVyRRX8awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJYVHzdkbaDJai35XtJSwjlZL/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBiZjdiYWYtYjY4Ny0z MThmLTg1YWMtODRlYWFhZDUwZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ41oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiSIHMQD2C6YIuwWeW/dxD+nR8hFqMcXoHYcgRnA9vh1y9x48hW9dOm pr2Qq+0Qa4Xe/1+K/uRnIs/YJAjc/5PcrtzIYcw6dgo+MlauKdnnHyh/J8/YY4hS s6yGg8t9TkopoILkJe+iAf1kMzpI0MRKBM6v8/BK4WPdr6Ll48wU5bB//DRWtPZ+ PT+8IrOTLncKTvD/g6XFV1VThKepqUO9lqnsLfqbEExX56q6KveQnuFOMKmu/0l+ kow1h2q+NU4Eg3IW+E82cd2Db+5Uhv6X4ihag1dOgrcBMPy20RN4R60kM5S07S/o askUPvyE/BZP282gUdnBwutq4bV8LX0= -----END CERTIFICATE-----Generated at Sun Apr 6 11:05:50 2025 by rpki-client