$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa File: c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa (raw, json) Hash identifier: K26t7K6EITY8c2jH9yQz8fsiWCVWNkGCdENbDw4X7e4= Subject key identifier: 09:8A:27:9A:6C:63:55:31:FE:0F:0D:BC:38:7F:7E:C5:9E:9E:B6:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA7103095688DEFF32659F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.140.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:03:09:56:88:de:ff:32:65:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=04dd08c6-9d8b-411c-81b2-36f86df762b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:52:f7:32:2c:c9:dc:b2:be:78:19:51:34:67: 63:a9:f7:26:cc:09:b4:c8:6b:e8:be:3d:3b:13:b5: a0:b6:49:e7:b4:07:f6:83:76:c5:98:42:44:8b:71: 0c:ef:e2:40:f7:68:3e:c4:69:70:15:e6:8e:50:8e: 1a:f9:60:26:c5:4e:43:13:d0:cf:2e:75:1f:80:44: 21:81:3b:48:e1:e6:e9:24:0d:e4:87:88:13:22:5b: b6:11:8f:7f:c3:b2:0b:90:b7:ec:85:e3:ed:c7:19: 56:8a:4f:8f:ae:37:2c:5b:cc:aa:ca:56:c0:97:62: 12:8f:05:43:75:20:86:27:b0:47:b1:dd:e1:60:2c: 90:6e:0c:5b:55:f0:46:ec:6b:22:5b:9a:aa:e5:e7: 08:39:08:53:6e:5e:b9:31:75:19:6f:2c:e1:38:f7: fe:6b:c5:94:b3:f4:a1:db:94:3b:0f:cd:e5:d0:8c: 55:f0:bf:c2:ca:21:04:e4:c9:78:e5:15:5d:b3:4e: a3:8e:30:5e:5d:a3:1d:13:a1:34:62:d3:ea:6f:62: c8:f1:b5:67:1b:6c:f8:6c:23:f1:bd:7e:e0:3d:e5: 40:2e:c6:42:38:72:af:fa:db:f2:69:ac:99:64:cc: 2b:3b:71:d1:f2:34:af:de:61:fa:75:3c:83:03:3d: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8A:27:9A:6C:63:55:31:FE:0F:0D:BC:38:7F:7E:C5:9E:9E:B6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:53:fc:90:64:04:03:bd:03:51:36:8b:8e:16:5a:e5:d8:fe: f1:f4:d3:76:d4:31:96:a6:f9:e6:ef:b2:9e:c0:cb:d2:cb:29: 8a:31:32:74:78:43:ed:be:ef:56:4d:67:84:dd:16:78:1d:6e: e1:7b:26:5d:0f:0e:c1:98:7b:6d:b4:82:5b:bf:aa:e5:fd:d0: 0a:e6:1c:eb:86:19:10:cf:af:e4:ce:2b:f8:e9:c8:6c:b2:e0: 8b:e9:14:46:74:38:f7:3a:e1:2b:6b:ce:6c:4b:c2:92:5e:70: 4e:e0:4c:20:af:80:0c:a6:27:c4:7e:cc:d3:9e:64:c9:70:f0: c9:b4:fd:5c:e7:d6:9d:b0:3d:4b:68:b3:41:be:25:49:f4:cd: 8c:b0:c1:52:d1:21:1b:8c:42:4c:74:17:56:ba:94:c5:0a:8c: 0c:ff:29:0a:46:6a:9f:75:c5:92:b6:6c:06:77:8a:93:47:15: 80:cd:da:ab:65:f3:26:65:15:47:1c:75:4c:ab:2d:4c:73:b5: 0e:7d:e9:68:9d:ce:98:c7:28:e4:0a:24:f7:78:44:11:1f:d1: 89:b4:c1:00:48:71:d0:62:53:f5:3c:73:1b:d1:9f:ae:d4:37: 29:2a:53:89:3c:17:8b:c2:2c:dc:9d:d4:01:69:22:0a:f9:e4: dd:be:96:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQMJVoje/zJln0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MDRkZDA4YzYtOWQ4Yi00MTFjLTgxYjItMzZmODZkZjc2MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFL3MizJ3LK+eBlRNGdjqfcmzAm0yGvovj07 E7WgtknntAf2g3bFmEJEi3EM7+JA92g+xGlwFeaOUI4a+WAmxU5DE9DPLnUfgEQh gTtI4ebpJA3kh4gTIlu2EY9/w7ILkLfshePtxxlWik+PrjcsW8yqylbAl2ISjwVD dSCGJ7BHsd3hYCyQbgxbVfBG7GsiW5qq5ecIOQhTbl65MXUZbyzhOPf+a8WUs/Sh 25Q7D83l0IxV8L/CyiEE5Ml45RVds06jjjBeXaMdE6E0YtPqb2LI8bVnG2z4bCPx vX7gPeVALsZCOHKv+tvyaayZZMwrO3HR8jSv3mH6dTyDAz23dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmKJ5psY1Ux/g8NvDh/fsWenraUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzAzYTYwNWEtNzBkOS0z YzNlLWFjODMtNDE5YTAxZjA3ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABT/JBkBAO9A1E2i44WWuXY/vH003bUMZam+ebvsp7Ay9LLKYoxMnR4 Q+2+71ZNZ4TdFngdbuF7Jl0PDsGYe220glu/quX90ArmHOuGGRDPr+TOK/jpyGyy 4IvpFEZ0OPc64StrzmxLwpJecE7gTCCvgAymJ8R+zNOeZMlw8Mm0/Vzn1p2wPUto s0G+JUn0zYywwVLRIRuMQkx0F1a6lMUKjAz/KQpGap91xZK2bAZ3ipNHFYDN2qtl 8yZlFUccdUyrLUxztQ596WidzpjHKOQKJPd4RBEf0Ym0wQBIcdBiU/U8cxvRn67U NykqU4k8F4vCLNyd1AFpIgr55N2+lrE= -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:22 2025 by rpki-client