$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa File: 8ae4279a-c4bd-324e-a66f-630dd143537c.roa (raw, json) Hash identifier: haGHuIxjCIRVMPhInhTmIy/qi7+2z6Z/iMmQOBPeWCg= Subject key identifier: 47:F7:D8:7D:BE:59:76:74:85:BD:CA:3D:81:86:26:8F:F6:08:D0:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93C71DB720DD1AF5B14C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa Signing time: Thu 06 Feb 2025 18:13:44 +0000 ROA not before: Thu 06 Feb 2025 18:13:44 +0000 ROA not after: Wed 07 May 2025 17:13:44 +0000 asID: 7029 IP address blocks: 67.224.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:c7:1d:b7:20:dd:1a:f5:b1:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:44 2025 GMT Not After : May 7 17:13:44 2025 GMT Subject: CN=220d8943-b360-4a2e-980e-b051bfc07bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:bf:93:93:19:fb:50:3c:a4:88:5d:d4:15: 50:8a:7c:6f:a6:15:15:5f:7a:11:cc:23:53:87:5a: 3f:01:5c:d0:8a:c4:34:9c:dd:61:93:ab:3c:ba:26: 56:6e:6f:26:3e:45:09:39:d4:af:87:b7:8c:8c:cf: 71:89:cb:f9:87:11:d3:60:17:11:8e:59:83:02:f5: 66:3b:6c:02:fc:19:40:ba:f0:09:07:b3:cb:02:08: 81:d6:2a:66:22:36:06:80:63:a5:d8:bc:c7:33:dd: 49:db:53:70:10:c1:87:e6:38:e0:00:0d:b6:83:6d: fe:2b:dc:f0:d1:f3:77:7f:6a:a3:18:c5:fb:b1:0e: d2:b5:ad:82:eb:02:95:d3:93:ad:ed:d0:d8:69:39: 6e:bc:cc:6b:7e:52:5d:94:7b:a8:56:91:a7:49:8d: 75:f6:97:be:86:b7:75:b3:3e:19:ea:f6:e2:2d:9d: 6a:55:0a:2a:93:b6:66:57:4e:ca:38:ea:bd:89:75: 58:27:89:cb:6d:b0:1c:49:09:35:a0:5b:40:c7:02: 45:53:fb:18:95:b2:0a:f8:9d:6c:86:fe:e1:8a:fb: 40:ec:02:ac:fd:c0:c3:02:73:bc:6d:26:c4:39:41: 3d:0e:af:7a:4a:8c:71:6c:33:4f:72:04:ab:06:d7: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F7:D8:7D:BE:59:76:74:85:BD:CA:3D:81:86:26:8F:F6:08:D0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ae4279a-c4bd-324e-a66f-630dd143537c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b0:58:0f:ef:13:c1:7b:2b:05:45:a7:ca:7b:f1:39:2f:9d: 88:b5:58:27:e9:85:d3:86:57:e2:59:cb:c9:e4:24:02:ff:86: 8b:07:c2:c2:cc:18:19:d9:de:89:07:f0:ef:ca:fc:94:07:c8: 61:ca:f5:b1:03:23:62:86:04:88:c0:68:06:a3:77:a0:b7:db: 63:ea:3c:da:ee:cb:c8:13:a9:8d:78:20:2b:08:f9:d5:ff:4f: ce:d8:f0:54:64:60:3e:ba:35:a6:90:51:37:e2:23:0c:59:0d: 2e:83:e5:d9:e1:61:9b:6d:5a:7d:99:43:c9:02:f5:57:68:64: e2:24:e2:a9:64:22:7f:06:9c:03:c3:3b:7a:4b:55:28:26:8c: 79:7e:ee:61:3d:29:e2:9a:f6:fd:20:46:e8:9a:aa:55:15:04: 35:38:3e:5a:1d:82:5d:15:ca:8b:a5:30:3b:be:d1:ae:c1:5d: 2b:5f:40:3b:9c:73:70:5d:36:78:0e:0e:32:0c:86:37:ef:89: 93:f8:59:58:7d:76:8f:90:e1:f1:d0:20:ca:63:e1:a1:1b:87: f8:f0:6a:93:7f:57:0f:b7:cc:f4:1f:71:2c:81:25:ad:68:da: be:b8:f1:09:51:f5:24:e2:8a:66:a2:59:28:44:b4:b6:45:8f: 5d:71:ff:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk8cdtyDdGvWxTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTM0NFoXDTI1MDUwNzE3MTM0NFowLzEtMCsGA1UEAxMk MjIwZDg5NDMtYjM2MC00YTJlLTk4MGUtYjA1MWJmYzA3YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixC/k5MZ+1A8pIhd1BVQinxvphUVX3oRzCNT h1o/AVzQisQ0nN1hk6s8uiZWbm8mPkUJOdSvh7eMjM9xicv5hxHTYBcRjlmDAvVm O2wC/BlAuvAJB7PLAgiB1ipmIjYGgGOl2LzHM91J21NwEMGH5jjgAA22g23+K9zw 0fN3f2qjGMX7sQ7Sta2C6wKV05Ot7dDYaTluvMxrflJdlHuoVpGnSY119pe+hrd1 sz4Z6vbiLZ1qVQoqk7ZmV07KOOq9iXVYJ4nLbbAcSQk1oFtAxwJFU/sYlbIK+J1s hv7hivtA7AKs/cDDAnO8bSbEOUE9Dq96SoxxbDNPcgSrBteCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf32H2+WXZ0hb3KPYGGJo/2CNBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGFlNDI3OWEtYzRiZC0z MjRlLWE2NmYtNjMwZGQxNDM1MzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ+A4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmwWA/vE8F7KwVFp8p78TkvnYi1WCfphdOGV+JZy8nkJAL/hosHwsLM GBnZ3okH8O/K/JQHyGHK9bEDI2KGBIjAaAajd6C322PqPNruy8gTqY14ICsI+dX/ T87Y8FRkYD66NaaQUTfiIwxZDS6D5dnhYZttWn2ZQ8kC9VdoZOIk4qlkIn8GnAPD O3pLVSgmjHl+7mE9KeKa9v0gRuiaqlUVBDU4Plodgl0VyoulMDu+0a7BXStfQDuc c3BdNngODjIMhjfviZP4WVh9do+Q4fHQIMpj4aEbh/jwapN/Vw+3zPQfcSyBJa1o 2r648QlR9STiimaiWShEtLZFj11x/wk= -----END CERTIFICATE-----Generated at Sat Apr 5 20:47:56 2025 by rpki-client