$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa File: dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa (raw, json) Hash identifier: bp9fFWg2r9964QYKUUarAv0LcgqG0PddehB1vZ+QDqo= Subject key identifier: 79:9D:43:82:3D:2D:8A:7B:84:69:04:9E:A3:DB:82:F4:59:65:D9:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F8BBB448A9725E158519E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 67.224.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:bb:b4:48:a9:72:5e:15:85:19:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=216b4cb1-1ac0-4a1a-818e-50d978e879dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d0:fe:40:50:4a:11:da:54:ca:dd:80:85:8e: fc:cc:28:45:f4:76:06:1a:fb:f3:0d:83:9f:0e:34: 0d:1b:c6:a6:cf:66:55:35:d4:cf:0f:cb:ac:c4:66: fa:d7:79:ad:15:91:2d:e3:cf:98:b5:91:b4:ff:95: 03:db:01:31:c2:62:be:76:ec:a0:a7:c4:65:39:2d: 42:fc:27:83:58:c2:f7:89:be:bf:07:9a:20:7f:18: bf:8c:d4:2f:a3:1a:59:06:b9:e5:47:63:23:15:d7: 15:31:15:51:b6:51:9a:69:23:62:2e:56:8a:f5:24: 8f:c9:c7:3f:84:ed:1f:22:ab:55:22:0f:b5:d3:a2: 0b:23:2d:de:02:a8:cd:a2:37:be:1a:b8:5e:e2:41: 23:24:bb:53:f4:c4:a8:f2:25:57:7e:f3:b1:f7:52: e6:f7:e7:cc:80:ef:27:8e:9e:24:8f:22:79:90:a9: 00:17:3a:5d:9c:bd:1f:6e:eb:b4:dd:90:5e:42:25: b8:d4:45:55:20:9d:45:cb:33:13:37:62:06:45:62: 2a:da:40:74:ba:a2:47:f4:15:b5:fd:be:32:16:63: a3:74:c2:a4:86:6c:91:45:6e:7c:5f:0d:0c:4d:a9: 1a:0c:5a:64:d7:57:9e:82:58:32:ea:0e:34:38:16: f0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:43:82:3D:2D:8A:7B:84:69:04:9E:A3:DB:82:F4:59:65:D9:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:39:f0:33:67:86:80:77:6c:ef:59:b8:18:40:54:63:68:e6: 2e:c7:53:0a:d6:fd:cf:a7:ad:63:43:1a:05:dc:6a:78:19:35: 1a:45:54:66:f3:86:61:b4:9c:36:0e:5b:55:ed:5c:aa:12:75: ef:78:84:b8:76:dd:af:4c:9e:97:88:1a:64:b7:d4:17:10:63: 6e:73:84:d7:b4:2f:ab:cd:08:8a:92:4d:3c:ea:86:88:63:9d: 1d:f9:38:b9:0d:45:3b:e3:d6:82:fc:17:42:e9:d9:08:ed:ce: 7c:dd:b6:4a:33:d7:48:97:37:25:ea:92:7a:8a:43:fa:88:b3: e9:fb:7b:dd:21:9f:f0:96:17:dd:c8:a8:b0:af:9b:3b:bb:fa: cc:78:18:a4:9e:4d:53:13:22:05:3b:fd:5b:44:17:61:59:0d: 60:f1:d9:42:29:38:fb:7c:5c:73:b8:16:df:f1:87:d5:24:23: 96:c2:61:46:5a:38:97:a1:75:08:63:41:69:fd:5e:98:e6:80: 23:5b:b1:6d:20:16:49:fe:06:a0:a4:c9:b5:1d:80:82:7b:26: 6d:1b:1f:0e:32:e5:58:fb:a8:48:cf:02:67:db:65:cf:da:91: 9b:7f:ff:4c:ef:30:5d:6d:56:5c:d9:a8:d8:9d:24:17:94:2a: f6:76:65:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Lu0SKlyXhWFGeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjE2YjRjYjEtMWFjMC00YTFhLTgxOGUtNTBkOTc4ZTg3OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ND+QFBKEdpUyt2AhY78zChF9HYGGvvzDYOf DjQNG8amz2ZVNdTPD8usxGb613mtFZEt48+YtZG0/5UD2wExwmK+duygp8RlOS1C /CeDWML3ib6/B5ogfxi/jNQvoxpZBrnlR2MjFdcVMRVRtlGaaSNiLlaK9SSPycc/ hO0fIqtVIg+106ILIy3eAqjNoje+Grhe4kEjJLtT9MSo8iVXfvOx91Lm9+fMgO8n jp4kjyJ5kKkAFzpdnL0fbuu03ZBeQiW41EVVIJ1FyzMTN2IGRWIq2kB0uqJH9BW1 /b4yFmOjdMKkhmyRRW58Xw0MTakaDFpk11eeglgy6g40OBbw3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmdQ4I9LYp7hGkEnqPbgvRZZdmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFkMWZjODItZjBlYy0z ZTc1LWI2YWMtZGJmNzk1YmQwYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ+AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA58DNnhoB3bO9ZuBhAVGNo5i7HUwrW/c+nrWNDGgXcangZNRpFVGbz hmG0nDYOW1XtXKoSde94hLh23a9MnpeIGmS31BcQY25zhNe0L6vNCIqSTTzqhohj nR35OLkNRTvj1oL8F0Lp2Qjtznzdtkoz10iXNyXqknqKQ/qIs+n7e90hn/CWF93I qLCvmzu7+sx4GKSeTVMTIgU7/VtEF2FZDWDx2UIpOPt8XHO4Ft/xh9UkI5bCYUZa OJehdQhjQWn9XpjmgCNbsW0gFkn+BqCkybUdgIJ7Jm0bHw4y5Vj7qEjPAmfbZc/a kZt//0zvMF1tVlzZqNidJBeUKvZ2Zao= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:07 2025 by rpki-client