$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2acffed-8947-3ff6-8460-1445d1a67576.roa File: b2acffed-8947-3ff6-8460-1445d1a67576.roa (raw, json) Hash identifier: OiWloCiNEH1IO6ntpdiB9BDpfwMC9OKph3u1j9VcAmQ= Subject key identifier: 64:D5:7D:D8:9D:C5:CE:F8:15:1C:8B:FB:E9:68:2C:B2:64:FF:D8:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB4906042C72B9A94E22390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2acffed-8947-3ff6-8460-1445d1a67576.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 67.140.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:60:42:c7:2b:9a:94:e2:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4121bd0a-815a-4587-b8a1-3b4df48085ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:11:72:d8:78:f7:ef:21:1d:fb:34:a4:8a: ef:2b:94:b0:3e:df:73:fd:97:89:ef:69:bc:83:f2: 0d:e8:53:9d:95:6a:4f:98:b2:20:11:f8:41:d4:76: f9:28:dc:e9:77:7a:52:df:f2:d4:92:34:b8:00:df: c4:7f:e4:00:ce:1e:94:56:d3:6c:ae:c0:ff:34:0a: ba:8f:4a:e3:ee:eb:6f:99:b4:57:15:b1:7b:e5:af: b5:9f:f6:5a:f0:a2:38:d5:ab:42:ea:85:11:2f:d9: b2:d1:0c:b4:81:0b:75:2f:77:5d:ad:9c:bb:87:6f: f2:ac:0f:b8:05:2e:e5:96:c9:e7:1c:3b:f7:78:8c: 74:f3:58:7c:db:1d:fa:2f:87:60:b7:8e:12:13:1b: 5e:97:b8:12:c3:16:98:c9:7b:72:8b:d7:53:21:aa: fc:58:a7:ab:2d:2a:ce:ae:80:0d:06:ee:f8:9c:18: f5:b5:90:e8:70:7a:a6:78:83:7c:55:bb:bd:19:c8: d9:ae:a5:ed:e6:9b:14:f2:eb:6a:c7:d8:ab:f2:9a: b6:8a:48:23:ec:b2:c3:a4:4a:0d:48:01:a9:f9:e5: d2:2c:63:69:70:54:57:83:26:2d:d1:da:ec:50:5d: db:df:89:54:b0:96:71:ea:b3:27:27:9b:53:35:12: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D5:7D:D8:9D:C5:CE:F8:15:1C:8B:FB:E9:68:2C:B2:64:FF:D8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2acffed-8947-3ff6-8460-1445d1a67576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b9:78:ec:6f:a3:4f:95:06:52:73:0c:72:4d:15:b4:93:44: c9:96:e5:86:4e:09:e3:2e:4d:32:5f:b6:2b:ac:39:db:c4:d8: b0:4d:1f:3d:96:e6:9f:af:cf:5d:36:ff:01:44:0e:73:be:22: a5:e8:b2:75:a9:8f:00:a6:08:5c:5d:93:2d:47:35:0b:e6:f6: 1a:3e:fe:b8:c0:d7:3e:44:32:6c:9e:41:b8:6a:16:36:1f:d6: 4f:05:ac:61:aa:84:dd:71:38:66:aa:f5:08:7c:d0:e1:bc:24: 2f:67:b0:55:fa:58:00:f3:13:52:db:bf:fb:1e:2e:8d:dd:d3: d1:6f:a5:71:88:d1:df:72:ad:49:40:d1:43:43:a1:ee:43:9e: b7:c9:a9:30:c2:27:13:e5:fa:d5:1e:c3:8a:c8:22:a6:36:39: d8:ca:1f:5a:61:31:2e:6f:36:29:11:4f:04:ae:de:1c:8a:ca: 23:6e:71:05:37:ab:ec:3c:07:e8:de:00:d8:66:01:c8:87:39: 61:78:54:f7:7d:31:fe:ca:a7:ba:8a:9f:3c:af:9a:6b:f4:a6: 43:37:9a:1b:d7:7e:0e:09:e7:33:9b:95:c9:bf:f8:1d:d3:27: d8:60:c1:e2:81:5c:f8:17:e4:66:c1:d6:89:bc:74:1f:a8:23: be:a1:95:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJBgQscrmpTiI5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDEyMWJkMGEtODE1YS00NTg3LWI4YTEtM2I0ZGY0ODA4NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocRcth49+8hHfs0pIrvK5SwPt9z/ZeJ72m8 g/IN6FOdlWpPmLIgEfhB1Hb5KNzpd3pS3/LUkjS4AN/Ef+QAzh6UVtNsrsD/NAq6 j0rj7utvmbRXFbF75a+1n/Za8KI41atC6oURL9my0Qy0gQt1L3ddrZy7h2/yrA+4 BS7llsnnHDv3eIx081h82x36L4dgt44SExtel7gSwxaYyXtyi9dTIar8WKerLSrO roANBu74nBj1tZDocHqmeIN8Vbu9GcjZrqXt5psU8utqx9ir8pq2ikgj7LLDpEoN SAGp+eXSLGNpcFRXgyYt0drsUF3b34lUsJZx6rMnJ5tTNRJKjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTVfdidxc74FRyL++loLLJk/9hmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjJhY2ZmZWQtODk0Ny0z ZmY2LTg0NjAtMTQ0NWQxYTY3NTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW5eOxvo0+VBlJzDHJNFbSTRMmW5YZOCeMuTTJftiusOdvE2LBNHz2W 5p+vz102/wFEDnO+IqXosnWpjwCmCFxdky1HNQvm9ho+/rjA1z5EMmyeQbhqFjYf 1k8FrGGqhN1xOGaq9Qh80OG8JC9nsFX6WADzE1Lbv/seLo3d09FvpXGI0d9yrUlA 0UNDoe5DnrfJqTDCJxPl+tUew4rIIqY2OdjKH1phMS5vNikRTwSu3hyKyiNucQU3 q+w8B+jeANhmAciHOWF4VPd9Mf7Kp7qKnzyvmmv0pkM3mhvXfg4J5zOblcm/+B3T J9hgweKBXPgX5GbB1om8dB+oI76hlVk= -----END CERTIFICATE-----Generated at Sun May 11 16:23:43 2025 by rpki-client