$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa File: d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa (raw, json) Hash identifier: 65+AG5gnX6RAq3qWAaX7gDj+xsUgD1hmpmHVOkk9rKs= Subject key identifier: A0:CC:E0:5C:D9:5B:3E:50:14:0B:8D:F2:BB:90:8C:85:15:E5:EF:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112ECAA361CB9A14276580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 27172 IP address blocks: 67.217.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2e:ca:a3:61:cb:9a:14:27:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=23c3fa6a-ea7d-42c3-8682-f5c61e9aee8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:24:e0:c5:7a:0e:7d:ff:38:6e:64:1b:d6: f8:6d:fb:38:ef:c3:13:71:bf:cd:cb:83:20:08:f0: 8b:78:a8:e0:d7:57:08:2c:f2:18:d1:9c:31:8d:98: 6a:50:c9:06:d4:48:2c:5f:db:0f:dd:01:6f:6d:84: 79:40:4e:3b:24:2e:cf:35:c3:a2:09:c5:8c:d5:f9: aa:63:86:8c:7b:03:c3:31:83:40:15:99:e6:f5:86: f6:2b:0d:89:67:b8:5a:1b:d0:d1:19:1f:ca:fd:6e: fe:42:e8:b3:0e:92:74:48:35:5f:77:67:f2:b8:c7: 0e:9a:4f:d1:6c:85:28:56:e4:8e:ef:a5:94:60:53: e5:06:76:72:0c:1b:52:8a:1a:bd:c9:25:0c:4d:1d: c0:29:6f:50:b7:8b:39:57:1e:cc:0f:c8:5f:85:c2: c9:20:5c:19:d7:02:4c:ed:03:ca:87:d5:e0:c9:12: 13:67:3c:3e:ec:5d:61:b2:a8:20:f5:26:9b:fc:93: fb:64:de:06:b2:5e:49:f7:7b:f4:47:ae:6d:3b:20: 01:06:c5:88:89:88:b8:16:55:86:9c:4a:d4:d7:d0: 2e:18:c0:c0:3f:79:4e:01:69:89:df:64:bc:24:e1: f4:c8:6c:31:d0:25:01:82:04:9b:e7:83:5a:ae:ee: b5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CC:E0:5C:D9:5B:3E:50:14:0B:8D:F2:BB:90:8C:85:15:E5:EF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0a:86:32:6d:f5:3a:94:83:56:9c:59:45:45:f6:a1:bf:b2: 04:d8:b2:e8:7b:d9:b5:7e:e8:80:57:45:ea:5c:64:ca:34:ee: 1b:be:00:ee:39:ed:53:e8:8d:a1:79:cc:6c:a5:6b:f5:01:e7: db:ba:ba:65:29:8e:3e:58:19:cd:09:f4:10:4d:74:5f:1b:98: 21:dd:14:a0:0d:fe:f7:0d:93:81:6d:f1:8d:93:4e:ec:01:44: f1:ee:6f:85:7b:46:4e:0a:c4:56:98:2e:62:aa:53:a3:37:ef: a7:48:ca:4d:cc:fe:40:ca:b9:8c:9f:09:61:6c:d4:a8:a6:20: f2:d9:15:0a:39:b8:5e:20:3b:e5:1f:2f:d9:79:c8:5f:fe:10: 65:8a:53:e8:67:60:ca:1f:78:6a:8d:88:1a:a9:e1:b4:6c:60: 55:b6:58:91:2c:c1:6d:33:c7:93:a3:e1:76:24:f0:e0:e4:28: e9:68:ba:07:e0:a9:a5:24:3d:5c:c1:5b:9e:9c:88:7e:64:56: a9:9d:d2:f5:78:72:9d:95:a3:32:38:16:4f:7c:d4:88:1d:54: 9e:48:0b:fb:f3:cb:82:c9:71:ef:f0:86:a1:04:f0:39:09:b7: 4e:e1:4b:24:8a:c5:11:6c:6e:32:52:aa:dc:ba:f1:e3:a1:d7: 83:81:e9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES7Ko2HLmhQnZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjNjM2ZhNmEtZWE3ZC00MmMzLTg2ODItZjVjNjFlOWFlZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilIk4MV6Dn3/OG5kG9b4bfs478MTcb/Ny4Mg CPCLeKjg11cILPIY0ZwxjZhqUMkG1EgsX9sP3QFvbYR5QE47JC7PNcOiCcWM1fmq Y4aMewPDMYNAFZnm9Yb2Kw2JZ7haG9DRGR/K/W7+QuizDpJ0SDVfd2fyuMcOmk/R bIUoVuSO76WUYFPlBnZyDBtSihq9ySUMTR3AKW9Qt4s5Vx7MD8hfhcLJIFwZ1wJM 7QPKh9XgyRITZzw+7F1hsqgg9Sab/JP7ZN4Gsl5J93v0R65tOyABBsWIiYi4FlWG nErU19AuGMDAP3lOAWmJ32S8JOH0yGwx0CUBggSb54Naru61mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDM4FzZWz5QFAuN8ruQjIUV5e9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDU3YWRiMWUtN2IxZC0z Yzg3LTgxZWUtODMzYWMzMDM5ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUKhjJt9TqUg1acWUVF9qG/sgTYsuh72bV+6IBXRepcZMo07hu+AO45 7VPojaF5zGyla/UB59u6umUpjj5YGc0J9BBNdF8bmCHdFKAN/vcNk4Ft8Y2TTuwB RPHub4V7Rk4KxFaYLmKqU6M376dIyk3M/kDKuYyfCWFs1KimIPLZFQo5uF4gO+Uf L9l5yF/+EGWKU+hnYMofeGqNiBqp4bRsYFW2WJEswW0zx5Oj4XYk8ODkKOlougfg qaUkPVzBW56ciH5kVqmd0vV4cp2VozI4Fk981IgdVJ5IC/vzy4LJce/whqEE8DkJ t07hSySKxRFsbjJSqty68eOh14OB6S8= -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:07 2025 by rpki-client