$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75527b3e-4bf9-3354-83c4-c337cb82cc12.roa File: 75527b3e-4bf9-3354-83c4-c337cb82cc12.roa (raw, json) Hash identifier: J6Xu86a9btrOuH37he7mim7TFdlFZeUhAu3ipNENFOk= Subject key identifier: 20:3A:EC:E1:21:69:85:4C:C8:05:8E:50:70:23:26:FA:1A:72:AE:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71670B42BBE94F79612E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75527b3e-4bf9-3354-83c4-c337cb82cc12.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.141.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:67:0b:42:bb:e9:4f:79:61:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=1bef4a98-6434-4a13-87da-64cb5fc02557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:8d:62:20:40:41:81:94:3f:9f:02:d8:bc: 80:ef:57:11:67:05:4e:72:8c:e7:bf:40:b4:39:a9: 40:7c:d9:ea:92:af:20:54:4f:74:9f:7b:19:1a:8a: 21:e6:53:1d:8e:f6:6d:fb:95:74:4d:97:76:5e:d5: 01:e7:26:86:7f:f8:f8:2d:28:57:6f:26:ce:65:dc: 67:b2:da:30:d5:a3:fc:c4:28:82:64:b2:d8:a3:26: 29:cf:a5:1b:61:aa:2e:cb:7c:50:33:53:d4:9c:93: 62:14:7a:e2:03:d7:5d:af:b4:81:2a:63:ad:ec:4a: 84:e3:60:98:86:b4:e9:2e:f3:54:6e:30:7b:2c:f2: 51:c7:c5:de:0b:e5:4e:f5:9f:5a:1f:00:41:42:d9: df:6f:74:57:97:5a:79:c4:02:e5:b5:69:1f:c4:7a: 49:8b:3d:08:20:38:2d:f8:39:3c:72:55:da:ee:c8: 56:0a:30:57:4a:e6:c2:ab:8d:e3:41:3b:a5:89:dc: c9:63:ff:42:67:61:8f:45:18:30:cc:43:84:d8:79: e2:37:3d:f9:6a:19:46:7c:29:e2:ec:67:25:02:d7: af:07:40:67:de:b3:62:ec:2c:86:53:0c:a4:41:49: 10:21:2f:5a:95:7f:00:84:04:67:b7:77:69:f6:43: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3A:EC:E1:21:69:85:4C:C8:05:8E:50:70:23:26:FA:1A:72:AE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75527b3e-4bf9-3354-83c4-c337cb82cc12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:8a:44:03:bc:28:9e:43:29:09:10:e7:b7:90:86:7c:d9:bc: 81:1c:3e:fb:b4:11:c8:7f:28:6b:1b:8e:7b:3e:a0:7e:46:f8: 4c:97:c0:38:ff:7d:3a:67:82:41:e2:0a:fd:3f:0a:28:2a:3f: 67:de:75:49:6d:35:27:0f:7e:52:db:23:fe:aa:c4:1b:24:94: 14:6d:c3:3e:10:84:d1:31:55:2d:36:0e:d1:86:dd:e9:30:77: 58:10:23:01:23:36:19:76:fc:59:93:74:93:63:7e:95:22:01: 07:b8:42:b3:15:fe:10:0f:15:c0:74:b5:74:c6:94:64:a2:54: 27:a3:e3:1c:78:bc:00:e0:9f:be:3e:dc:25:2d:75:5b:a6:22: 9f:3e:cf:d1:55:aa:62:49:0b:5f:5f:4b:cf:88:12:7f:de:76: 81:76:aa:8c:9e:98:ad:7d:77:af:f8:02:aa:86:be:d2:54:7b: 06:00:02:11:ec:7a:dd:09:bc:18:b6:f0:e9:4e:ed:6d:cd:43: 70:13:18:9d:44:16:64:e2:18:23:95:e8:5c:52:49:e7:7f:f1: 4b:92:94:1a:ab:b5:8e:d0:81:e7:df:a3:78:69:b9:07:0b:90: dd:81:e2:e6:7d:fe:80:77:e8:4e:61:27:43:cd:e5:a7:1a:90: c9:94:de:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWcLQrvpT3lhLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MWJlZjRhOTgtNjQzNC00YTEzLTg3ZGEtNjRjYjVmYzAyNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMWNYiBAQYGUP58C2LyA71cRZwVOcoznv0C0 OalAfNnqkq8gVE90n3sZGooh5lMdjvZt+5V0TZd2XtUB5yaGf/j4LShXbybOZdxn stow1aP8xCiCZLLYoyYpz6UbYaouy3xQM1PUnJNiFHriA9ddr7SBKmOt7EqE42CY hrTpLvNUbjB7LPJRx8XeC+VO9Z9aHwBBQtnfb3RXl1p5xALltWkfxHpJiz0IIDgt +Dk8clXa7shWCjBXSubCq43jQTulidzJY/9CZ2GPRRgwzEOE2HniNz35ahlGfCni 7GclAtevB0Bn3rNi7CyGUwykQUkQIS9alX8AhARnt3dp9kNYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA67OEhaYVMyAWOUHAjJvoacq6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU1MjdiM2UtNGJmOS0z MzU0LTgzYzQtYzMzN2NiODJjYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ41UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOKRAO8KJ5DKQkQ57eQhnzZvIEcPvu0Ech/KGsbjns+oH5G+EyXwDj/ fTpngkHiCv0/CigqP2fedUltNScPflLbI/6qxBsklBRtwz4QhNExVS02DtGG3ekw d1gQIwEjNhl2/FmTdJNjfpUiAQe4QrMV/hAPFcB0tXTGlGSiVCej4xx4vADgn74+ 3CUtdVumIp8+z9FVqmJJC19fS8+IEn/edoF2qoyemK19d6/4AqqGvtJUewYAAhHs et0JvBi28OlO7W3NQ3ATGJ1EFmTiGCOV6FxSSed/8UuSlBqrtY7Qgeffo3hpuQcL kN2B4uZ9/oB36E5hJ0PN5acakMmU3kk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:18 2025 by rpki-client