$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e112b9f-67ba-39b1-9dab-73392722dfa6.roa File: 4e112b9f-67ba-39b1-9dab-73392722dfa6.roa (raw, json) Hash identifier: /WnvtxNNh5+tZ/o9L65YGBVHNUdq65BXN9ziBSa/svg= Subject key identifier: 66:EA:0D:95:A4:09:0B:8E:4E:2C:DC:14:41:A7:6B:78:9C:EC:4F:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB56E6FC293E8D50CFE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e112b9f-67ba-39b1-9dab-73392722dfa6.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 67.141.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b5:6e:6f:c2:93:e8:d5:0c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=1f876ec7-5f5e-4037-8fe8-00aa4835480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:68:81:2b:b6:d2:d3:11:4f:55:43:8a:96: 0b:ab:c3:3a:39:12:f6:ce:6b:d6:ab:64:35:9e:a6: 27:da:a7:45:df:2c:cc:2a:1b:b6:64:21:5b:58:3b: f2:7c:63:92:5c:f7:f5:87:54:11:7c:0e:4a:74:5e: 72:1d:88:25:77:59:31:70:b7:a4:86:13:e5:11:d8: d8:1d:4d:3a:8f:e7:ef:b9:ab:30:11:4f:f7:07:87: 9c:c6:ee:e2:30:4f:b9:af:f5:48:39:9c:4f:84:4a: 24:24:6f:27:aa:bc:a0:04:5e:af:44:02:55:87:08: 36:0d:bb:a1:1a:82:a2:7e:dd:a9:eb:5e:f1:29:c7: 02:94:16:17:61:ca:5c:4b:ac:cc:2f:9f:6a:c2:b7: 3f:56:e7:f5:fc:d4:2b:a4:62:cb:fc:89:65:95:fc: d0:4d:33:c0:2d:5d:59:48:42:0c:81:11:2f:71:ab: 23:aa:10:aa:6b:f3:98:02:ab:42:12:6f:9d:7f:dd: 99:d3:4e:f9:91:dd:90:26:b3:67:ef:87:32:57:48: 04:89:63:17:39:fe:e4:d3:57:30:bf:00:ec:89:d1: 66:0a:0e:f2:63:44:09:51:38:94:18:51:73:80:ff: 5a:9d:8f:c5:2f:37:be:0a:5d:6f:83:f1:87:b8:ae: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EA:0D:95:A4:09:0B:8E:4E:2C:DC:14:41:A7:6B:78:9C:EC:4F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e112b9f-67ba-39b1-9dab-73392722dfa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a2:90:53:fa:5f:e1:c7:ff:d0:9e:13:2a:82:3e:5b:95:30: e4:35:33:8b:ef:ff:4b:86:79:42:0c:97:d7:0b:e9:e1:3b:51: 62:f7:28:f8:3a:83:29:17:25:a3:97:79:f4:d2:14:e5:80:c7: f8:e0:36:de:31:f4:72:40:a2:6d:66:80:0f:a3:90:f1:9a:ef: ea:f2:69:24:b2:4f:26:9d:bb:b6:57:46:e9:6d:c7:72:5b:49: 93:2c:ed:e7:8f:ef:c8:eb:7a:56:82:f8:9f:ba:a8:31:e0:e2: fb:8c:51:a6:35:a6:d2:23:24:5b:c8:64:f6:9c:f1:9a:b6:4e: c6:eb:a7:99:ff:40:ca:ce:04:a5:d3:86:1a:94:a8:cf:0f:fd: c5:4f:f5:12:8f:56:35:4e:5c:8b:c0:0a:8b:90:12:24:b8:bc: cd:81:41:76:39:e3:12:47:18:4b:c9:63:f2:e2:52:00:02:5b: 42:3a:35:45:84:7c:81:9a:a6:21:c4:4f:0f:12:a8:18:fd:0e: a7:c6:ff:2d:5d:01:71:f0:1b:b3:1f:94:6e:10:b1:96:25:fd: 94:e3:8d:59:17:54:11:63:20:63:eb:32:d2:c4:54:bf:17:9b: 69:7e:85:b8:5d:28:61:67:e6:bc:8c:0c:ca:0b:b9:11:d2:8a: 0f:dd:a7:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7Vub8KT6NUM/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk MWY4NzZlYzctNWY1ZS00MDM3LThmZTgtMDBhYTQ4MzU0ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksxogSu20tMRT1VDipYLq8M6ORL2zmvWq2Q1 nqYn2qdF3yzMKhu2ZCFbWDvyfGOSXPf1h1QRfA5KdF5yHYgld1kxcLekhhPlEdjY HU06j+fvuaswEU/3B4ecxu7iME+5r/VIOZxPhEokJG8nqrygBF6vRAJVhwg2Dbuh GoKift2p617xKccClBYXYcpcS6zML59qwrc/Vuf1/NQrpGLL/IlllfzQTTPALV1Z SEIMgREvcasjqhCqa/OYAqtCEm+df92Z0075kd2QJrNn74cyV0gEiWMXOf7k01cw vwDsidFmCg7yY0QJUTiUGFFzgP9anY/FLze+Cl1vg/GHuK40CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbqDZWkCQuOTizcFEGna3ic7E93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGUxMTJiOWYtNjdiYS0z OWIxLTlkYWItNzMzOTI3MjJkZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ42+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6ikFP6X+HH/9CeEyqCPluVMOQ1M4vv/0uGeUIMl9cL6eE7UWL3KPg6 gykXJaOXefTSFOWAx/jgNt4x9HJAom1mgA+jkPGa7+ryaSSyTyadu7ZXRultx3Jb SZMs7eeP78jrelaC+J+6qDHg4vuMUaY1ptIjJFvIZPac8Zq2Tsbrp5n/QMrOBKXT hhqUqM8P/cVP9RKPVjVOXIvACouQEiS4vM2BQXY54xJHGEvJY/LiUgACW0I6NUWE fIGapiHETw8SqBj9DqfG/y1dAXHwG7MflG4QsZYl/ZTjjVkXVBFjIGPrMtLEVL8X m2l+hbhdKGFn5ryMDMoLuRHSig/dp/g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:28 2025 by rpki-client