$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa File: 3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa (raw, json) Hash identifier: ERGqBawzfKMOoX3vapXELFIJVNtSac34ANQxHTsYojw= Subject key identifier: 02:AA:1E:8C:CE:00:A1:73:63:0A:34:BF:64:58:00:F8:4A:7B:9D:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C22AA7907C347AD16FE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 67.141.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:22:aa:79:07:c3:47:ad:16:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=84055d91-1b77-4bbe-9eeb-9d20faea060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:01:fb:ae:a8:eb:d5:ab:96:b4:6d:3e:98: ac:6c:ee:02:5d:45:f1:ca:27:48:1a:b4:9c:06:69: 93:cb:c1:aa:de:89:75:14:97:91:4a:a0:36:4d:07: 19:3a:36:d6:0c:57:81:2c:24:03:12:ac:d0:75:31: c8:87:10:5f:84:89:d2:52:74:ea:be:ef:09:98:2d: ed:95:14:ed:46:b4:99:aa:10:89:8e:8e:14:b0:96: 20:be:cd:34:34:b6:7c:79:c0:0d:9b:ed:6d:9a:d9: 3a:c6:f4:4c:7c:41:8d:84:e4:8c:59:ee:b8:0a:6f: c7:75:de:72:2f:78:96:45:20:2e:d9:ee:5e:4d:6f: a2:ac:6e:a3:60:e4:5d:e3:52:bb:a8:26:f5:3c:2f: d1:20:52:0d:6e:27:77:17:38:a4:7d:9b:f7:10:03: e1:47:75:31:e0:a6:c1:a5:24:4e:f7:72:d9:88:0f: f1:bc:c8:c2:cd:42:67:af:52:65:18:ab:00:c6:a9: bb:34:82:0b:d8:f5:4b:ee:9a:81:84:6f:c7:dc:35: 76:14:48:9f:46:09:aa:61:e1:64:e7:22:65:62:e1: 34:11:6c:74:59:81:68:c2:11:3d:ec:3a:0e:14:cd: 69:65:34:38:46:2c:b8:9a:f0:de:f1:49:0f:34:e6: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:1E:8C:CE:00:A1:73:63:0A:34:BF:64:58:00:F8:4A:7B:9D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:aa:78:ec:cc:aa:4d:c0:49:3e:b3:97:f9:77:2f:9d:62:a2: 62:70:e1:11:80:99:93:2c:bc:16:f8:c3:a5:66:f7:4e:8b:f7: 85:85:30:82:5b:19:10:9e:b3:e3:e2:9f:a2:f2:17:ee:1d:9b: 84:ca:a7:d7:64:cf:9e:42:53:5e:d2:e1:63:c1:24:63:cb:4f: b0:d8:ea:24:f0:fd:48:0b:1a:42:cf:6d:2e:f8:02:6d:3d:9c: 0b:10:ee:c9:00:29:8a:4a:43:74:a3:6e:7b:f2:c4:d8:64:a7: 3a:e3:d3:55:89:65:09:5b:1c:35:e9:df:7f:66:43:ea:83:c4: 35:94:89:56:03:12:29:21:06:8e:e0:79:b3:a6:cb:a4:dc:ea: 7d:ad:ac:33:24:a2:23:51:74:a2:2b:0e:eb:bd:e2:d1:b6:c3: 98:f4:da:09:f8:09:5c:ce:b7:0c:fe:5a:2d:c6:a4:4b:8d:58: 21:f8:9a:1e:12:21:60:90:43:66:b3:89:29:97:7a:c1:d3:a0: fd:f3:08:2b:7d:98:db:e0:ef:de:7d:e7:bf:09:a0:1a:de:25: 9f:d1:d7:34:43:0b:9a:08:f6:6c:2e:c5:ac:b2:50:2e:b6:e0: 1b:c9:10:e4:64:4b:f3:1c:b0:a8:d9:9c:9e:e2:9d:4a:31:58: ce:26:4e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCKqeQfDR60W/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ODQwNTVkOTEtMWI3Ny00YmJlLTllZWItOWQyMGZhZWEwNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ0B+66o69WrlrRtPpisbO4CXUXxyidIGrSc BmmTy8Gq3ol1FJeRSqA2TQcZOjbWDFeBLCQDEqzQdTHIhxBfhInSUnTqvu8JmC3t lRTtRrSZqhCJjo4UsJYgvs00NLZ8ecANm+1tmtk6xvRMfEGNhOSMWe64Cm/Hdd5y L3iWRSAu2e5eTW+irG6jYORd41K7qCb1PC/RIFINbid3FzikfZv3EAPhR3Ux4KbB pSRO93LZiA/xvMjCzUJnr1JlGKsAxqm7NIIL2PVL7pqBhG/H3DV2FEifRgmqYeFk 5yJlYuE0EWx0WYFowhE97DoOFM1pZTQ4Riy4mvDe8UkPNOZyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKqHozOAKFzYwo0v2RYAPhKe51IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwNmJiMjEtMjYyNy0z YTJhLWE1Y2QtZThiOWQxMjI1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ43fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuqeOzMqk3AST6zl/l3L51iomJw4RGAmZMsvBb4w6Vm906L94WFMIJb GRCes+Pin6LyF+4dm4TKp9dkz55CU17S4WPBJGPLT7DY6iTw/UgLGkLPbS74Am09 nAsQ7skAKYpKQ3SjbnvyxNhkpzrj01WJZQlbHDXp339mQ+qDxDWUiVYDEikhBo7g ebOmy6Tc6n2trDMkoiNRdKIrDuu94tG2w5j02gn4CVzOtwz+Wi3GpEuNWCH4mh4S IWCQQ2aziSmXesHToP3zCCt9mNvg7959578JoBreJZ/R1zRDC5oI9mwuxayyUC62 4BvJEORkS/McsKjZnJ7inUoxWM4mTrg= -----END CERTIFICATE-----Generated at Sun Apr 6 00:50:41 2025 by rpki-client