$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa File: 021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa (raw, json) Hash identifier: Q/8yyYK9MCWn26zJm9J2J75ZAyDMpGhzJgb6ssuTGFU= Subject key identifier: 7B:BE:95:CD:84:DA:A0:14:4D:49:59:5C:21:3F:65:98:5D:41:27:EF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211058FEBBAEC99548289C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 40114 IP address blocks: 67.151.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:05:8f:eb:ba:ec:99:54:82:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4d7eede6-ee78-4648-9212-1e75361e1550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:fc:75:f0:4e:94:8b:56:e2:c2:19:26:eb: 8a:48:2a:46:34:b8:2c:4d:ab:6e:e3:4d:e3:e3:3b: ae:17:8e:74:18:f1:19:01:97:de:c8:ec:99:ea:a9: 99:ec:95:11:08:16:e7:9f:f6:15:7b:bb:8d:14:d6: 8a:3b:e9:bd:cf:73:09:09:0f:44:56:e6:18:e7:a2: 57:08:8b:6d:b0:a7:65:a4:ce:70:ce:72:57:5a:88: 8c:f2:cc:6a:f0:b9:0f:db:bf:88:0b:3f:28:b9:2b: b6:70:5a:f3:84:70:ff:33:ed:d3:5a:ff:e0:e8:bf: e8:d2:df:9a:90:98:68:68:67:dd:4d:6b:72:e3:4d: d3:85:fc:a6:a7:f9:88:49:01:03:ac:03:52:7a:d0: 01:b2:ac:6b:3a:c9:c1:f9:35:11:d7:3c:fb:86:90: 4d:23:ef:d1:2a:4f:ef:b2:f0:60:2c:bd:ee:03:76: f1:cd:01:4e:39:6c:78:da:ae:1e:22:40:4e:8d:46: 93:91:c7:b7:0b:66:4c:9a:30:bf:5b:3b:c5:82:53: 31:85:60:ec:47:61:fe:a3:57:3c:69:d0:aa:d5:57: 40:17:9f:7f:ab:49:8e:83:a3:d2:53:7c:2c:38:f6: 2c:8e:b0:b3:3a:f7:77:d0:e0:87:d6:ba:26:fb:40: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BE:95:CD:84:DA:A0:14:4D:49:59:5C:21:3F:65:98:5D:41:27:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:79:33:24:9d:fa:d9:60:93:b0:c5:27:3c:0b:54:7e:fd:e9: 0d:97:51:28:ee:34:88:0a:b0:aa:56:ee:b1:1e:aa:df:3c:08: 23:8c:70:57:a9:5f:87:cc:5c:2f:be:71:c8:4f:5a:fa:c4:b6: a6:6f:7b:fa:67:b8:20:1c:ff:a2:25:b4:85:60:12:f5:d8:51: 2a:cc:3e:ae:5a:5e:9e:48:35:58:df:77:81:a6:0b:96:b6:51: 84:a5:aa:92:e2:9e:15:4f:81:cd:2e:e5:ea:13:f2:44:74:2f: 00:dc:b9:d2:0f:8e:a1:15:79:cd:b1:ff:47:90:cf:08:02:32: 83:aa:75:e6:fe:05:18:8e:18:d2:00:6e:a3:51:d8:30:0f:2b: 43:d6:b0:be:f8:cf:2b:b2:b9:a5:6d:ca:d3:44:49:2e:c0:b5: 4c:37:2d:7d:24:b4:39:39:fc:72:9e:5e:a4:5c:93:fb:f8:3c: cc:6b:74:c6:81:d3:c9:38:90:0d:c3:0e:8c:bb:47:39:38:92: 0a:4c:8b:ae:1e:26:f2:a6:ae:93:0f:cc:e2:c1:9e:5c:b7:3c: bc:de:79:2b:a8:16:5c:b6:75:66:7d:28:90:f0:e7:cc:92:f4: 0f:68:c8:32:f5:2e:c1:3b:7b:3e:99:34:fd:61:24:5a:76:5b: a6:85:2c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQWP67rsmVSCicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGQ3ZWVkZTYtZWU3OC00NjQ4LTkyMTItMWU3NTM2MWUxNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnT8dfBOlItW4sIZJuuKSCpGNLgsTatu403j 4zuuF450GPEZAZfeyOyZ6qmZ7JURCBbnn/YVe7uNFNaKO+m9z3MJCQ9EVuYY56JX CIttsKdlpM5wznJXWoiM8sxq8LkP27+ICz8ouSu2cFrzhHD/M+3TWv/g6L/o0t+a kJhoaGfdTWty403Thfymp/mISQEDrANSetABsqxrOsnB+TUR1zz7hpBNI+/RKk/v svBgLL3uA3bxzQFOOWx42q4eIkBOjUaTkce3C2ZMmjC/WzvFglMxhWDsR2H+o1c8 adCq1VdAF59/q0mOg6PSU3wsOPYsjrCzOvd30OCH1rom+0CzGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu+lc2E2qAUTUlZXCE/ZZhdQSfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIxZGQ3YTctZjIzMS0z ZDYzLTk0MjUtMDNkMmI1ZjYwZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5daMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ5MySd+tlgk7DFJzwLVH796Q2XUSjuNIgKsKpW7rEeqt88CCOMcFep X4fMXC++cchPWvrEtqZve/pnuCAc/6IltIVgEvXYUSrMPq5aXp5INVjfd4GmC5a2 UYSlqpLinhVPgc0u5eoT8kR0LwDcudIPjqEVec2x/0eQzwgCMoOqdeb+BRiOGNIA bqNR2DAPK0PWsL74zyuyuaVtytNESS7AtUw3LX0ktDk5/HKeXqRck/v4PMxrdMaB 08k4kA3DDoy7Rzk4kgpMi64eJvKmrpMPzOLBnly3PLzeeSuoFly2dWZ9KJDw58yS 9A9oyDL1LsE7ez6ZNP1hJFp2W6aFLFs= -----END CERTIFICATE-----Generated at Sun Feb 16 20:24:24 2025 by rpki-client