$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa File: 08b96706-4779-3270-97dc-166c077e0b2e.roa (raw, json) Hash identifier: oU/uVq3uOIkSmR5hXX2jp8XlfDKOna/rQ+egXRl2Wbg= Subject key identifier: 90:28:7F:4A:7D:BC:3D:27:A8:F6:82:75:C7:C0:DD:3B:C6:8D:CF:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210ED4AE88DBB2328CB6480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.214.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ed:4a:e8:8d:bb:23:28:cb:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=291359b8-6457-4f3a-8ba2-9f3d155b9aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:1d:7e:c8:83:44:08:cc:f9:19:2c:bd:ca: 15:bb:94:e4:65:7c:cd:1a:04:0a:89:78:58:65:1d: 60:fa:2e:d2:92:8e:c5:ca:d6:08:b8:2e:28:6d:48: c1:6f:4c:ca:da:fa:3c:31:96:57:e2:59:8c:ed:f5: c2:f0:47:c4:2a:2e:f0:54:c3:a1:c4:be:64:b5:fe: 2b:cc:44:20:62:77:56:31:42:ab:b1:ea:04:a7:99: 0d:d2:88:67:0c:4d:e2:34:b2:9c:7c:89:27:66:18: 07:e2:f4:13:dc:ae:67:85:58:5c:aa:94:b4:7b:17: aa:4b:69:cd:5f:5f:d1:d0:f7:05:24:fb:b2:ed:fc: 66:f4:c7:ad:cb:cc:5e:ae:cd:51:fb:e8:f3:92:07: 26:55:c5:19:c7:df:6a:41:c6:79:62:de:07:c8:08: 97:bc:9b:6d:5a:5b:a3:eb:fa:fd:b4:7f:51:2c:8d: 05:48:46:b7:3e:e7:31:6d:e9:9e:2a:c1:16:f7:24: 60:81:89:c0:ba:7d:40:86:32:9f:8e:7f:34:9e:eb: 66:8e:76:09:d6:7c:29:21:9a:c8:16:22:06:6f:ea: 65:59:32:26:f0:59:e2:de:c2:91:f4:77:42:a0:36: f0:2f:74:72:54:05:d2:d9:76:0a:cb:e4:8d:82:99: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:28:7F:4A:7D:BC:3D:27:A8:F6:82:75:C7:C0:DD:3B:C6:8D:CF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08b96706-4779-3270-97dc-166c077e0b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:27:89:50:cc:d3:f5:78:13:3f:c1:54:a7:f5:3b:59:a3:29: dc:95:83:1c:97:a4:51:6b:29:79:19:3b:5c:26:b4:4c:ef:da: 89:aa:2c:04:71:3a:f2:9f:90:d7:be:ea:de:4a:cf:28:c6:d6: 1c:61:7a:e3:ba:69:4b:ed:88:88:b8:46:27:fb:45:f4:26:b7: 76:7b:a4:e9:f6:54:1e:0e:68:6a:64:77:1c:76:51:01:e9:cc: 34:c5:18:a3:35:b9:c9:bc:f1:2b:60:e2:ff:2a:8f:f0:58:e5: b8:93:d3:c5:34:0b:7f:8f:bc:1c:a7:17:e3:0b:98:68:46:0c: 6c:cc:09:54:58:82:64:a9:cc:b7:fe:0a:d5:d2:22:ad:9e:f2: f9:67:ba:8d:5f:13:96:dc:4f:09:26:3c:32:f9:55:c5:15:37: 88:c3:df:d1:f6:04:15:24:fc:8b:76:a1:67:19:5a:c3:c4:2b: a2:70:e7:fb:11:cd:ba:e3:96:97:f6:0a:aa:74:54:d9:0b:9b: 13:db:f3:62:84:40:17:29:ab:b8:44:a6:75:ce:cc:c2:14:db: ce:41:a7:45:a4:1f:7e:40:6f:50:2a:36:5a:f2:3c:7b:87:bf: b4:c4:50:61:83:24:11:9f:b0:13:ba:1a:ad:41:8f:e6:44:a0: e6:96:a9:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO1K6I27IyjLZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjkxMzU5YjgtNjQ1Ny00ZjNhLThiYTItOWYzZDE1NWI5YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMsdfsiDRAjM+RksvcoVu5TkZXzNGgQKiXhY ZR1g+i7Sko7FytYIuC4obUjBb0zK2vo8MZZX4lmM7fXC8EfEKi7wVMOhxL5ktf4r zEQgYndWMUKrseoEp5kN0ohnDE3iNLKcfIknZhgH4vQT3K5nhVhcqpS0exeqS2nN X1/R0PcFJPuy7fxm9Mety8xers1R++jzkgcmVcUZx99qQcZ5Yt4HyAiXvJttWluj 6/r9tH9RLI0FSEa3PucxbemeKsEW9yRggYnAun1AhjKfjn80nutmjnYJ1nwpIZrI FiIGb+plWTIm8Fni3sKR9HdCoDbwL3RyVAXS2XYKy+SNgplqnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAof0p9vD0nqPaCdcfA3TvGjc+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhiOTY3MDYtNDc3OS0z MjcwLTk3ZGMtMTY2YzA3N2UwYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgniVDM0/V4Ez/BVKf1O1mjKdyVgxyXpFFrKXkZO1wmtEzv2omqLARx OvKfkNe+6t5KzyjG1hxheuO6aUvtiIi4Rif7RfQmt3Z7pOn2VB4OaGpkdxx2UQHp zDTFGKM1ucm88Stg4v8qj/BY5biT08U0C3+PvBynF+MLmGhGDGzMCVRYgmSpzLf+ CtXSIq2e8vlnuo1fE5bcTwkmPDL5VcUVN4jD39H2BBUk/It2oWcZWsPEK6Jw5/sR zbrjlpf2Cqp0VNkLmxPb82KEQBcpq7hEpnXOzMIU285Bp0WkH35Ab1AqNlryPHuH v7TEUGGDJBGfsBO6Gq1Bj+ZEoOaWqbg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:39 2025 by rpki-client