$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa File: a15dd1fc-a5e6-3111-ac70-b3161353326b.roa (raw, json) Hash identifier: 1hFLvJJaE5armOpIOzd7JGb/j284twEGeajxSw1kKfI= Subject key identifier: F1:22:D0:5B:F2:23:AB:7E:6B:BE:41:DB:B3:38:DE:44:5B:D9:D2:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E00685C907A8C9F76E6B36C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.141.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:85:c9:07:a8:c9:f7:6e:6b:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=7297c8db-287a-42a3-801d-28dce3ba2b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:3b:9d:aa:70:c9:38:9d:e3:ff:e1:4b:5d: 06:c6:27:87:9f:d3:c1:be:1a:c6:11:b5:5b:53:30: a3:89:c1:7d:c2:3f:ff:7b:0f:b1:d3:bb:6b:21:8c: b9:50:bb:bd:4d:97:67:ee:0c:17:84:2b:16:6d:30: 20:12:de:8a:d1:2b:8a:6c:53:f7:0a:54:43:60:c8: ed:8c:de:70:3c:86:35:e9:b4:e2:c2:54:2f:70:7b: 6d:a7:b9:27:8e:cf:94:3d:71:9e:1c:62:1b:e4:a6: da:b5:97:59:cf:a0:d4:6a:18:ea:40:5f:0e:fb:42: 94:9b:e6:2a:49:28:63:38:d2:58:6f:00:58:f8:79: 3d:60:c7:85:bf:07:e2:99:c6:54:ef:cd:3b:86:e9: 1e:64:8d:76:ee:11:21:6a:c7:90:8f:07:20:61:40: 70:79:66:34:b2:5b:6a:6c:73:34:f6:18:b5:b9:dc: b1:de:1b:6b:12:a2:31:2b:9f:ba:3a:fd:41:56:cb: 8f:83:91:34:7b:d3:20:f9:30:64:62:7d:55:18:da: ea:58:8c:ec:96:ed:94:3e:21:a2:d3:5f:ca:3c:a6: fb:72:47:31:b5:c2:a2:f5:70:80:01:7f:31:bb:9f: 27:82:80:90:5d:d7:ea:bf:dd:f5:b2:67:81:da:57: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:22:D0:5B:F2:23:AB:7E:6B:BE:41:DB:B3:38:DE:44:5B:D9:D2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a15dd1fc-a5e6-3111-ac70-b3161353326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0e:69:fd:eb:53:db:7c:4b:d5:7d:a8:d4:7b:ee:3d:be:1c: 54:a3:fb:fa:5a:35:45:8e:5d:34:d1:ba:1f:49:19:65:38:80: cc:d9:af:8e:c6:f1:9c:75:bd:02:78:f6:53:b3:a4:3f:bb:f2: 78:ea:f0:49:58:dc:b4:d0:df:4b:46:c4:8b:72:81:f2:cf:75: 6f:aa:cc:85:2a:c7:e9:7b:f0:ce:79:ac:c2:7e:fc:d2:3c:52: 66:45:5a:70:f8:c8:40:58:c0:68:52:9b:13:91:e3:47:83:52: 62:69:80:0e:e5:39:f5:20:c3:b7:de:bb:3b:d3:25:23:e4:72: f4:84:da:00:22:ad:9b:a1:61:fd:99:ea:4e:6f:b8:0c:1d:c9: 71:df:72:63:93:71:eb:cc:e8:b0:06:a4:4c:9f:5f:1d:67:ac: fc:9e:33:e1:5c:4e:7f:77:03:1c:2c:a7:7f:4c:d0:b6:1b:ef: 0d:c7:f1:bb:cc:44:cb:bc:bb:5c:d2:0f:93:ce:c3:79:5a:65: 42:5f:fe:f5:5c:0e:08:54:d1:91:b8:58:f7:6c:c9:f4:45:5c: 17:d4:ed:0c:78:fc:7d:9c:62:10:4a:66:72:e5:7e:f1:48:a0: 65:30:ea:e1:59:11:49:52:12:1d:d1:4f:97:ac:6e:0e:42:c1: be:db:62:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoXJB6jJ925rNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NzI5N2M4ZGItMjg3YS00MmEzLTgwMWQtMjhkY2UzYmEyYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdY7napwyTid4//hS10GxieHn9PBvhrGEbVb UzCjicF9wj//ew+x07trIYy5ULu9TZdn7gwXhCsWbTAgEt6K0SuKbFP3ClRDYMjt jN5wPIY16bTiwlQvcHttp7knjs+UPXGeHGIb5KbatZdZz6DUahjqQF8O+0KUm+Yq SShjONJYbwBY+Hk9YMeFvwfimcZU7807hukeZI127hEhaseQjwcgYUBweWY0sltq bHM09hi1udyx3htrEqIxK5+6Ov1BVsuPg5E0e9Mg+TBkYn1VGNrqWIzslu2UPiGi 01/KPKb7ckcxtcKi9XCAAX8xu58ngoCQXdfqv931smeB2leShwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEi0FvyI6t+a75B27M43kRb2dLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE1ZGQxZmMtYTVlNi0z MTExLWFjNzAtYjMxNjEzNTMzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ436MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8Oaf3rU9t8S9V9qNR77j2+HFSj+/paNUWOXTTRuh9JGWU4gMzZr47G 8Zx1vQJ49lOzpD+78njq8ElY3LTQ30tGxItygfLPdW+qzIUqx+l78M55rMJ+/NI8 UmZFWnD4yEBYwGhSmxOR40eDUmJpgA7lOfUgw7feuzvTJSPkcvSE2gAirZuhYf2Z 6k5vuAwdyXHfcmOTcevM6LAGpEyfXx1nrPyeM+FcTn93Axwsp39M0LYb7w3H8bvM RMu8u1zSD5POw3laZUJf/vVcDghU0ZG4WPdsyfRFXBfU7Qx4/H2cYhBKZnLlfvFI oGUw6uFZEUlSEh3RT5esbg5Cwb7bYtA= -----END CERTIFICATE-----Generated at Sun Apr 6 03:28:45 2025 by rpki-client