$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa File: b0bf5451-2f57-3e77-8edd-17c3306ac388.roa (raw, json) Hash identifier: nqtKKYuTM6mgbZPHFNoK/aUSxY3jH61omd82gfzQOR4= Subject key identifier: 36:B8:E2:DF:22:F1:DD:8D:BC:E0:D8:C2:90:3E:57:32:EC:F6:96:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210ED7EF4B7F7230DA79480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.224.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ed:7e:f4:b7:f7:23:0d:a7:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=df4f2dca-ee1f-4d0e-afef-9177a9a84607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:d2:47:a0:a7:89:f8:17:90:84:27:8f:84: 6d:88:19:fe:65:a8:72:e7:7e:fb:6e:56:b2:a5:40: a2:63:ed:58:fc:18:7b:4a:43:ed:9d:59:d9:42:a3: b4:ed:cd:6b:b7:72:2d:38:a1:c9:48:f6:13:18:c9: 9a:9f:31:62:19:ef:4d:20:e7:f9:fe:7d:f8:75:60: e7:8b:d8:52:bd:73:62:74:ab:13:73:7c:5d:a8:b6: 90:97:58:e7:cb:c2:ef:45:d6:cb:74:58:b0:83:04: 28:85:e2:e5:ba:53:1d:87:7f:64:f5:04:bc:fb:c7: 93:0f:75:a9:3c:5d:9d:bd:6b:93:f9:45:a1:35:85: e7:8c:d1:11:fb:52:5b:ea:1c:17:26:b5:44:a4:7f: dd:94:51:d5:bf:42:12:0f:2a:62:fc:f7:7c:82:5c: 6b:44:68:3a:87:0e:0e:34:77:17:70:23:60:07:fd: ca:26:c1:88:37:65:9a:e7:2c:3e:2d:37:21:e7:72: 63:55:8d:3a:cc:5d:c5:ee:ec:1b:2e:cb:be:7f:05: 07:14:f2:e4:06:97:23:1e:bf:49:f8:8b:ba:86:c9: 8f:12:d9:d8:68:30:db:0a:a5:41:cd:21:3e:97:f0: 00:78:a9:8b:dc:67:94:06:27:8e:82:c3:4d:ce:db: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B8:E2:DF:22:F1:DD:8D:BC:E0:D8:C2:90:3E:57:32:EC:F6:96:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b0bf5451-2f57-3e77-8edd-17c3306ac388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:32:5c:b7:50:0d:a9:83:43:84:52:a6:0b:ba:c7:8c:fa:7f: 8c:af:86:28:3a:d5:21:ae:ae:4e:a8:14:9d:66:48:06:19:ea: 55:93:9d:8b:cc:3a:5d:9a:b7:b7:73:10:c6:82:27:02:46:c4: f9:c5:9f:3e:29:d9:1d:bf:80:90:61:98:4b:22:57:30:96:9a: dd:14:ec:d3:3a:33:d2:ba:39:84:03:48:2b:63:ac:29:ba:05: 66:f3:de:45:ce:d0:08:14:77:32:31:35:85:87:7c:7f:b4:a7: 69:e5:a7:99:97:15:4a:81:96:86:11:86:38:ef:44:06:71:21: bf:a9:80:2b:84:3b:8b:9b:21:ae:61:38:45:da:af:05:3c:54: 00:cd:4b:d4:ff:53:55:36:40:3a:01:2b:76:48:14:6a:07:a9: 85:6a:d6:aa:d5:67:5a:1c:97:74:94:b7:1f:7a:a9:f3:00:64: 3f:83:42:0d:db:7f:1d:1e:1d:45:3a:30:58:2f:01:49:c0:32: 55:10:1e:71:27:33:54:ce:df:99:72:81:ee:e8:0a:de:50:70: 7f:55:4a:90:96:a6:2b:bf:22:c0:82:33:68:3b:fc:59:95:64: ae:8a:59:e1:da:b3:c9:84:d0:77:23:9e:f4:4e:75:59:97:ac: d9:03:30:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO1+9Lf3Iw2nlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGY0ZjJkY2EtZWUxZi00ZDBlLWFmZWYtOTE3N2E5YTg0NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4XSR6CnifgXkIQnj4RtiBn+Zahy5377blay pUCiY+1Y/Bh7SkPtnVnZQqO07c1rt3ItOKHJSPYTGMmanzFiGe9NIOf5/n34dWDn i9hSvXNidKsTc3xdqLaQl1jny8LvRdbLdFiwgwQoheLlulMdh39k9QS8+8eTD3Wp PF2dvWuT+UWhNYXnjNER+1Jb6hwXJrVEpH/dlFHVv0ISDypi/Pd8glxrRGg6hw4O NHcXcCNgB/3KJsGIN2Wa5yw+LTch53JjVY06zF3F7uwbLsu+fwUHFPLkBpcjHr9J +Iu6hsmPEtnYaDDbCqVBzSE+l/AAeKmL3GeUBieOgsNNzttlXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa44t8i8d2NvODYwpA+VzLs9pZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjBiZjU0NTEtMmY1Ny0z ZTc3LThlZGQtMTdjMzMwNmFjMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ+AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsyXLdQDamDQ4RSpgu6x4z6f4yvhig61SGurk6oFJ1mSAYZ6lWTnYvM Ol2at7dzEMaCJwJGxPnFnz4p2R2/gJBhmEsiVzCWmt0U7NM6M9K6OYQDSCtjrCm6 BWbz3kXO0AgUdzIxNYWHfH+0p2nlp5mXFUqBloYRhjjvRAZxIb+pgCuEO4ubIa5h OEXarwU8VADNS9T/U1U2QDoBK3ZIFGoHqYVq1qrVZ1ocl3SUtx96qfMAZD+DQg3b fx0eHUU6MFgvAUnAMlUQHnEnM1TO35lyge7oCt5QcH9VSpCWpiu/IsCCM2g7/FmV ZK6KWeHas8mE0HcjnvROdVmXrNkDMIM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:31 2025 by rpki-client