$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa File: b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa (raw, json) Hash identifier: oBE0+fGIfA0gzuZs+vHG5eJGSX8VEbcMahPvSOOcNh8= Subject key identifier: BE:2E:EE:BA:4B:87:DB:7D:5C:87:A7:9B:13:8C:CB:C5:85:14:1E:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71672F0B3F05759C9C6E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.141.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:67:2f:0b:3f:05:75:9c:9c:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=ee9f77b2-cb8b-4552-b2e7-c575d92bde41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:fb:d0:ff:be:d6:f6:2d:57:ef:a7:63:66: 43:60:ff:34:14:05:ff:2d:04:11:24:a4:c3:92:7a: bc:75:93:53:d1:79:ce:73:d3:e9:0a:b4:76:b3:30: c2:dd:14:c1:79:52:55:82:90:f9:40:86:86:94:4b: 27:7c:4a:6c:0f:bc:59:d8:38:fb:9f:9f:a3:cf:2f: ba:6e:c9:41:c8:1b:63:26:17:04:f7:05:02:76:4c: 47:fa:a8:9d:2a:f5:f7:36:df:86:cb:b4:0b:ea:f1: d1:4f:de:6b:dd:4e:60:39:a5:00:1e:b4:6c:96:dc: 95:9c:02:ba:a3:49:0b:79:34:6c:0d:02:8e:66:93: 79:a0:8c:ff:09:ce:48:c0:c8:ee:e5:53:3d:08:51: 03:54:0f:1c:63:2e:63:f9:00:10:b3:0b:57:49:e7: c6:b3:9b:13:64:14:a1:da:e9:cf:e6:06:ee:61:b0: 3f:f8:ef:c2:81:e7:a7:01:72:5d:ab:af:d7:10:96: 51:ec:a5:49:4c:84:ab:75:41:6f:88:10:32:60:2b: 92:f1:6c:3a:71:05:de:b0:78:3b:3d:1d:49:65:64: 4b:65:46:74:24:98:4d:0c:69:8f:43:a0:7a:b7:d5: e2:92:d3:63:e6:32:50:82:eb:fe:79:1e:ef:dc:43: e4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2E:EE:BA:4B:87:DB:7D:5C:87:A7:9B:13:8C:CB:C5:85:14:1E:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:21:27:7e:8f:51:ee:f0:f7:96:d7:f0:9e:4f:0b:b9:d2:bb: 23:44:4b:4f:35:0d:17:e5:bf:e0:f9:78:5e:0a:71:0e:35:4b: 4e:2f:cd:33:d9:18:17:fb:a5:80:b1:a0:23:43:70:d9:e7:d6: f3:4a:fa:7f:f5:cf:70:75:5f:2c:c5:bc:44:e5:be:7c:6f:33: 8f:b1:ce:62:02:a4:c2:30:13:ec:7e:d6:d8:50:7a:cb:d5:d8: a8:f4:4d:99:ce:9d:ab:d2:58:dd:e9:82:82:ba:74:05:ae:ea: 40:15:c0:cd:3f:76:ee:94:a7:92:9e:8c:7d:0b:94:e2:61:dd: e9:20:15:b8:05:46:34:13:c5:03:b8:82:81:f7:4e:4c:bf:89: 68:33:1e:32:71:bc:1e:17:9e:64:dc:9f:ef:0b:6f:8b:29:5e: 47:04:fb:5e:f4:73:e1:cb:36:62:6b:58:82:ea:dd:a1:92:49: 73:42:e6:cc:eb:7b:6a:e8:06:2b:fe:c4:20:15:82:bb:93:dc: 90:a8:8a:f8:59:3b:ae:44:b3:02:76:f8:2e:0b:87:cc:11:cf: f1:3f:09:55:e8:b7:e2:7a:b5:b9:24:17:47:50:67:eb:6a:da: aa:db:94:b7:ce:f0:b1:a7:df:ae:84:b7:cc:58:be:e7:84:9f: 81:ff:b2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWcvCz8FdZycboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWU5Zjc3YjItY2I4Yi00NTUyLWIyZTctYzU3NWQ5MmJkZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0r70P++1vYtV++nY2ZDYP80FAX/LQQRJKTD knq8dZNT0XnOc9PpCrR2szDC3RTBeVJVgpD5QIaGlEsnfEpsD7xZ2Dj7n5+jzy+6 bslByBtjJhcE9wUCdkxH+qidKvX3Nt+Gy7QL6vHRT95r3U5gOaUAHrRsltyVnAK6 o0kLeTRsDQKOZpN5oIz/Cc5IwMju5VM9CFEDVA8cYy5j+QAQswtXSefGs5sTZBSh 2unP5gbuYbA/+O/CgeenAXJdq6/XEJZR7KVJTISrdUFviBAyYCuS8Ww6cQXesHg7 PR1JZWRLZUZ0JJhNDGmPQ6B6t9XiktNj5jJQguv+eR7v3EPkNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4u7rpLh9t9XIenmxOMy8WFFB5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ5NjA5YzAtYmYzZS0z OWM3LTk0MTYtZDNjZjE5ZmU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4hJ36PUe7w95bX8J5PC7nSuyNES081DRflv+D5eF4KcQ41S04vzTPZ GBf7pYCxoCNDcNnn1vNK+n/1z3B1XyzFvETlvnxvM4+xzmICpMIwE+x+1thQesvV 2Kj0TZnOnavSWN3pgoK6dAWu6kAVwM0/du6Up5KejH0LlOJh3ekgFbgFRjQTxQO4 goH3Tky/iWgzHjJxvB4XnmTcn+8Lb4spXkcE+170c+HLNmJrWILq3aGSSXNC5szr e2roBiv+xCAVgruT3JCoivhZO65EswJ2+C4Lh8wRz/E/CVXot+J6tbkkF0dQZ+tq 2qrblLfO8LGn366Et8xYvueEn4H/soI= -----END CERTIFICATE-----Generated at Fri Mar 14 13:52:26 2025 by rpki-client