$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/082781c8-b3cc-347f-8739-75139b07f0e8.roa File: 082781c8-b3cc-347f-8739-75139b07f0e8.roa (raw, json) Hash identifier: inmpJYPFlVgs25MDO4usywJvhohHBkXTzAJ0JVSY340= Subject key identifier: 76:09:F4:39:DE:C9:17:DE:A0:63:AC:59:55:15:C1:9E:4C:F4:B7:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E969C273B1D5FE85C140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/082781c8-b3cc-347f-8739-75139b07f0e8.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.140.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e9:69:c2:73:b1:d5:fe:85:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7b07c927-1b80-40ff-a07c-bb90476132f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:75:e3:a3:86:af:50:6a:34:3c:b6:f5:da:ef: 1c:68:01:46:83:5c:6d:a1:97:41:d4:04:23:05:24: b8:1b:1f:c3:21:a7:de:85:d6:7e:dc:45:31:24:68: fa:c7:98:ed:2d:44:e5:4a:35:8a:68:48:7a:c2:ce: 7f:d2:14:16:b5:4f:b5:ea:8e:3e:1f:64:27:96:6d: fa:17:3f:59:5b:20:54:d8:0a:87:1d:1f:1c:88:d5: 28:1b:18:6c:76:dd:4f:8f:c9:ec:37:f8:b5:f8:9a: b6:85:89:c7:a1:bd:8c:2a:a4:03:a0:92:f7:d7:c1: c8:e2:4e:16:1b:d8:52:42:13:c4:8a:d8:cf:07:d7: cc:3d:12:c5:75:1d:d4:9f:20:e7:81:10:7b:b2:9c: b7:f7:70:b3:d1:03:3a:3c:a8:8c:4d:9d:e5:f4:b8: 5e:1a:15:fd:b9:56:47:dc:fc:da:68:94:3c:dc:67: 99:c2:cd:db:6c:e8:88:1e:7e:de:86:d8:3d:74:72: d2:94:23:71:23:d9:15:c4:43:f1:23:8a:2b:17:e9: 04:e1:5f:b3:b2:a0:df:27:4e:44:58:d8:af:5d:27: e4:46:fb:b2:c7:a4:19:9d:8c:e9:bd:db:6d:28:c7: cb:61:08:8c:fd:9e:9a:b6:27:24:47:c1:9c:db:78: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:09:F4:39:DE:C9:17:DE:A0:63:AC:59:55:15:C1:9E:4C:F4:B7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/082781c8-b3cc-347f-8739-75139b07f0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.140.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9b:df:a5:5d:8e:d2:be:de:6a:e0:7d:a2:1e:46:1f:bb:7f: ad:18:fc:5b:39:28:6d:67:93:34:7c:50:c4:82:e6:e7:cd:22: ff:ce:3a:07:7e:aa:f2:1e:0a:2d:dd:6d:9a:41:26:8b:22:43: 47:44:f3:2d:7f:20:ef:f8:a4:fb:28:94:7e:2b:ff:44:d8:e3: e2:6d:aa:01:64:de:76:c6:37:c9:90:f9:f7:b9:37:38:b4:a1: fb:82:0c:0b:0b:dd:67:56:68:6c:d6:0c:d6:1f:74:f5:a6:de: 8a:df:f9:9a:63:63:cd:c6:3a:f8:ff:44:17:ca:3e:bb:24:7d: 14:f6:d0:ca:7d:89:c0:ba:31:ef:04:56:0b:b1:df:de:0d:e5: 84:cf:70:66:e0:07:60:b2:75:6d:8c:1a:52:be:f3:2a:3d:63: 1c:36:53:6b:46:26:bd:95:9b:0f:c6:0f:b8:1d:f9:ce:19:b7: b7:e7:3b:e4:b2:8c:56:5d:46:4b:a8:59:6d:52:f1:5a:7e:ef: 86:6d:ef:e2:6c:1d:86:15:7f:be:8f:ba:5d:89:aa:d4:62:2f: 18:28:aa:27:a3:b8:00:36:e2:aa:18:fa:8b:7e:bb:2f:83:2f: 3f:b0:bf:68:97:e3:cc:92:20:f4:f7:d4:de:6f:9c:51:58:37: 64:8c:8b:75 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEOlpwnOx1f6FwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2IwN2M5MjctMWI4MC00MGZmLWEwN2MtYmI5MDQ3NjEzMmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Xjo4avUGo0PLb12u8caAFGg1xtoZdB1AQj BSS4Gx/DIafehdZ+3EUxJGj6x5jtLUTlSjWKaEh6ws5/0hQWtU+16o4+H2Qnlm36 Fz9ZWyBU2AqHHR8ciNUoGxhsdt1Pj8nsN/i1+Jq2hYnHob2MKqQDoJL318HI4k4W G9hSQhPEitjPB9fMPRLFdR3UnyDngRB7spy393Cz0QM6PKiMTZ3l9LheGhX9uVZH 3PzaaJQ83GeZws3bbOiIHn7ehtg9dHLSlCNxI9kVxEPxI4orF+kE4V+zsqDfJ05E WNivXSfkRvuyx6QZnYzpvdttKMfLYQiM/Z6atickR8Gc23hOgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHYJ9DneyRfeoGOsWVUVwZ5M9LeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgyNzgxYzgtYjNjYy0z NDdmLTg3MzktNzUxMzliMDdmMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBKIwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAM5vfpV2O0r7eauB9oh5GH7t/rRj8WzkobWeTNHxQxILm580i/846B36q 8h4KLd1tmkEmiyJDR0TzLX8g7/ik+yiUfiv/RNjj4m2qAWTedsY3yZD597k3OLSh +4IMCwvdZ1ZobNYM1h909abeit/5mmNjzcY6+P9EF8o+uyR9FPbQyn2JwLox7wRW C7Hf3g3lhM9wZuAHYLJ1bYwaUr7zKj1jHDZTa0YmvZWbD8YPuB35zhm3t+c75LKM Vl1GS6hZbVLxWn7vhm3v4mwdhhV/vo+6XYmq1GIvGCiqJ6O4ADbiqhj6i367L4Mv P7C/aJfjzJIg9PfU3m+cUVg3ZIyLdQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:09 2025 by rpki-client