$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa File: b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa (raw, json) Hash identifier: bbbod/G0Af7SzhhOod+p8D+pbiN3kM2jEJH4M3/NYR8= Subject key identifier: 29:0E:5E:48:57:88:B1:C2:BF:46:87:F8:DC:A8:EC:F8:38:E1:18:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB574E2A2B81D812E20C060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 67.141.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:74:e2:a2:b8:1d:81:2e:20:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=d8c89cdb-c05b-4473-be5d-7cbaf5f68a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:4a:34:3a:a2:ec:e8:56:c7:04:0c:cf:3e: 74:aa:a7:90:ae:52:1c:37:b6:6c:03:be:b7:87:2a: 31:dc:7e:70:f5:30:85:eb:10:17:1e:9d:21:d9:19: 18:67:76:6d:24:54:19:1f:ae:70:a0:fd:c9:6f:04: ac:71:43:c8:05:f0:9b:60:6b:fe:4f:98:22:ce:56: c5:b6:99:0d:65:f0:e2:9c:18:0e:47:82:fc:87:80: 98:0e:06:ec:5f:1c:ea:81:e3:1e:73:45:c4:30:e0: 5b:2c:ff:a2:39:87:b3:81:3f:40:ea:03:c2:ea:25: 82:2e:32:23:7b:2a:4e:a1:bc:17:c5:40:c8:e9:b0: 88:5e:8b:b7:a8:a5:b4:4e:a2:ad:62:41:76:e4:96: 6a:fe:4a:11:3c:a6:ed:40:21:9b:90:b1:5e:7e:70: 03:0f:cf:66:64:8e:7d:8f:f0:70:e5:4c:5c:58:81: 3c:a0:6b:37:fa:42:c1:4f:ad:61:92:6f:80:03:61: 7c:b0:9a:58:e5:66:eb:87:08:8e:f7:ec:fa:81:4b: 9c:0d:54:2f:af:54:7f:64:8c:d1:a4:c8:87:a7:55: d1:b0:9f:3f:32:61:62:dd:10:30:a8:0c:74:f2:f9: 53:ad:2d:b2:89:f6:5e:a6:d8:2b:3e:e4:b4:75:4b: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:5E:48:57:88:B1:C2:BF:46:87:F8:DC:A8:EC:F8:38:E1:18:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f9:91:10:52:cd:48:c7:b7:b6:38:5a:46:28:90:c3:2a:ec: f6:03:48:5d:03:8f:8c:f8:af:04:28:c6:16:8f:77:df:20:07: d5:21:4b:0f:c7:9e:d6:2f:af:a2:38:17:17:2f:41:90:7d:e2: 4c:d6:f0:13:8a:44:1f:f8:c9:0c:a0:6d:21:77:3d:25:76:44: 63:09:d0:42:4a:a9:da:e7:5d:e2:31:02:44:fd:c8:02:e0:eb: ae:9b:5f:f3:73:1e:b3:12:aa:47:be:8b:ee:6b:04:6c:5c:16: fa:f0:2f:d0:79:40:71:81:1f:f0:27:79:4a:54:be:cd:2d:9f: 98:8c:a9:69:85:69:92:d8:aa:63:03:f3:ff:62:a4:c7:7c:ef: ba:05:05:ac:99:9f:82:e6:a4:59:ee:3f:43:46:e9:09:8a:69: 45:ab:60:8c:12:08:da:b3:3b:65:59:84:51:a7:90:ab:28:cf: 03:d1:6a:23:fa:f2:81:00:13:f5:66:9f:f8:a4:fa:1d:7d:b7: 55:d5:44:d2:56:7f:da:ff:bb:dc:2c:c6:20:48:2c:98:96:2d: 9d:73:85:05:bd:63:a5:4e:dc:b2:23:94:ad:6a:c1:d3:43:e7: 99:6e:ec:cf:7d:d3:a3:ae:55:dc:33:fd:01:8d:9d:2d:e6:71: 3e:cb:54:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXTiorgdgS4gwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDhjODljZGItYzA1Yi00NDczLWJlNWQtN2NiYWY1ZjY4YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmehKNDqi7OhWxwQMzz50qqeQrlIcN7ZsA763 hyox3H5w9TCF6xAXHp0h2RkYZ3ZtJFQZH65woP3JbwSscUPIBfCbYGv+T5gizlbF tpkNZfDinBgOR4L8h4CYDgbsXxzqgeMec0XEMOBbLP+iOYezgT9A6gPC6iWCLjIj eypOobwXxUDI6bCIXou3qKW0TqKtYkF25JZq/koRPKbtQCGbkLFefnADD89mZI59 j/Bw5UxcWIE8oGs3+kLBT61hkm+AA2F8sJpY5WbrhwiO9+z6gUucDVQvr1R/ZIzR pMiHp1XRsJ8/MmFi3RAwqAx08vlTrS2yifZeptgrPuS0dUvCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkOXkhXiLHCv0aH+Nyo7Pg44RjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ5NjA5YzAtYmYzZS0z OWM3LTk0MTYtZDNjZjE5ZmU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz5kRBSzUjHt7Y4WkYokMMq7PYDSF0Dj4z4rwQoxhaPd98gB9UhSw/H ntYvr6I4FxcvQZB94kzW8BOKRB/4yQygbSF3PSV2RGMJ0EJKqdrnXeIxAkT9yALg 666bX/NzHrMSqke+i+5rBGxcFvrwL9B5QHGBH/AneUpUvs0tn5iMqWmFaZLYqmMD 8/9ipMd877oFBayZn4LmpFnuP0NG6QmKaUWrYIwSCNqzO2VZhFGnkKsozwPRaiP6 8oEAE/Vmn/ik+h19t1XVRNJWf9r/u9wsxiBILJiWLZ1zhQW9Y6VO3LIjlK1qwdND 55lu7M9906OuVdwz/QGNnS3mcT7LVDc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:34 2025 by rpki-client