$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa File: 46e898e8-09ea-3a9b-a977-d135334936f2.roa (raw, json) Hash identifier: v3cyMQbPTorduMdjDpL7ISrcASMAT8vX3qs74Wxx8z0= Subject key identifier: F1:27:42:4E:A7:86:52:5B:D0:B6:B7:80:2C:33:92:87:F0:67:8E:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D61647F45A972036C53D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 67.140.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:16:47:f4:5a:97:20:36:c5:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=f3978980-22a7-42cd-b9e2-514d4e05e933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:93:21:e8:4b:3b:4c:9a:92:9f:97:78:49: b5:2b:97:95:ad:00:85:2d:45:44:d2:ef:8a:68:db: eb:49:69:ec:58:4c:38:43:fa:1e:71:4f:57:c0:5b: fa:61:25:5b:32:eb:e1:f8:0c:45:7f:dd:6c:54:87: 92:0f:0d:9d:1d:b4:4a:5d:dc:d0:6c:ad:e9:ff:f2: d4:06:9e:31:28:79:f8:52:c6:34:9a:74:56:0e:bf: 8e:d5:20:a2:50:92:45:89:b7:99:63:2d:91:15:e0: ac:76:84:01:25:8e:7f:b3:d1:57:e2:44:33:c7:8e: 18:1a:c7:ba:6b:b2:82:6b:d6:25:f2:64:f7:d0:37: 18:27:b4:ec:f1:7b:85:3f:72:3f:e0:71:8d:15:ea: c3:b1:ec:96:be:bf:4f:8a:d7:83:95:1e:33:98:a9: e3:7b:01:eb:fc:91:f3:32:23:7f:ff:52:60:dd:76: 13:65:af:bc:9d:5e:ab:2a:a8:b5:de:81:61:98:51: 07:ae:84:1a:89:b1:7b:0d:46:3a:67:57:db:97:c1: 6a:d1:9d:46:59:a7:b7:ca:5c:68:81:2a:c9:dd:1d: 99:1c:aa:e6:4e:12:13:5c:be:c1:02:42:46:62:b1: 67:37:27:04:9f:eb:b9:43:d4:f0:b6:94:bd:d2:8f: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:27:42:4E:A7:86:52:5B:D0:B6:B7:80:2C:33:92:87:F0:67:8E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46e898e8-09ea-3a9b-a977-d135334936f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b8:9e:9a:83:74:62:4f:bb:be:44:c6:d6:3f:be:e6:3c:b6: 5d:7a:c1:ef:1c:76:a2:f6:ee:e1:4f:e5:fc:08:f8:a9:d1:c6: 29:28:09:3f:7f:ec:31:93:7f:24:2d:c4:ce:61:4c:d0:05:19: 04:10:22:44:5a:32:f1:d9:ee:cc:17:9f:af:94:65:a6:6d:52: a0:86:68:15:d9:66:83:8c:74:bc:1e:e7:c2:5e:42:24:65:25: 7c:7a:4f:db:43:fa:d2:05:55:70:b6:37:fc:9c:70:4d:54:28: b9:5f:da:c5:20:19:24:25:85:64:d1:e8:8d:07:f4:59:7f:1a: 28:42:2d:18:c4:54:06:f7:d8:91:a2:46:5e:97:de:c3:9d:d1: 09:95:c8:82:c3:f6:17:46:2c:2c:74:64:51:d5:5c:0c:06:7f: 27:0d:39:2b:30:d0:ab:4b:e9:81:b0:c4:e4:3b:00:4b:5c:d3: 34:fe:53:26:08:09:8a:5b:d3:0a:00:e8:e1:1e:7e:ee:a7:b0: 38:8e:99:cb:72:c5:78:16:bb:8d:0f:f6:b7:8c:7a:78:85:6e: f5:9e:af:d1:e1:66:f6:bd:ad:37:3a:59:f2:0c:2d:44:56:b1: 1e:fc:7f:2e:4b:23:bd:31:f5:48:f8:6c:d6:f1:4f:c9:d3:c7: ec:2c:35:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hZH9FqXIDbFPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjM5Nzg5ODAtMjJhNy00MmNkLWI5ZTItNTE0ZDRlMDVlOTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDWTIehLO0yakp+XeEm1K5eVrQCFLUVE0u+K aNvrSWnsWEw4Q/oecU9XwFv6YSVbMuvh+AxFf91sVIeSDw2dHbRKXdzQbK3p//LU Bp4xKHn4UsY0mnRWDr+O1SCiUJJFibeZYy2RFeCsdoQBJY5/s9FX4kQzx44YGse6 a7KCa9Yl8mT30DcYJ7Ts8XuFP3I/4HGNFerDseyWvr9PiteDlR4zmKnjewHr/JHz MiN//1Jg3XYTZa+8nV6rKqi13oFhmFEHroQaibF7DUY6Z1fbl8Fq0Z1GWae3ylxo gSrJ3R2ZHKrmThITXL7BAkJGYrFnNycEn+u5Q9TwtpS90o+0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEnQk6nhlJb0La3gCwzkofwZ445MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZlODk4ZTgtMDllYS0z YTliLWE5NzctZDEzNTMzNDkzNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG4npqDdGJPu75ExtY/vuY8tl16we8cdqL27uFP5fwI+KnRxikoCT9/ 7DGTfyQtxM5hTNAFGQQQIkRaMvHZ7swXn6+UZaZtUqCGaBXZZoOMdLwe58JeQiRl JXx6T9tD+tIFVXC2N/yccE1UKLlf2sUgGSQlhWTR6I0H9Fl/GihCLRjEVAb32JGi Rl6X3sOd0QmVyILD9hdGLCx0ZFHVXAwGfycNOSsw0KtL6YGwxOQ7AEtc0zT+UyYI CYpb0woA6OEefu6nsDiOmctyxXgWu40P9reMeniFbvWer9HhZva9rTc6WfIMLURW sR78fy5LI70x9Uj4bNbxT8nTx+wsNa4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:57 2025 by rpki-client