$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa File: 6e646695-998a-3951-a3ca-a84efeb22b5b.roa (raw, json) Hash identifier: lm1agqTbQBjntBVeXaApGzPiWR/qh51CS4NCTLHyHCE= Subject key identifier: 9F:0D:C6:96:42:28:EF:A3:8A:B0:98:46:BC:B2:1B:0D:26:F6:CF:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE12031DC0655F4B4401500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 162.40.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:20:31:dc:06:55:f4:b4:40:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=a46a5975-ffca-4aab-afa5-f0709bd3cc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:70:d2:71:26:39:84:6b:2b:0a:a0:94:01: 71:1c:9a:49:54:b8:67:06:7c:84:f8:a9:dc:a0:44: 2f:4f:82:a3:14:dc:7c:10:02:b1:e3:1a:66:9d:8b: f9:61:48:d4:e5:ee:1c:15:6c:13:86:74:ac:54:89: 00:38:b2:f9:62:c6:f1:ed:f1:3c:fd:6f:b0:32:d7: 0a:89:0f:3e:e9:0b:a3:72:1d:44:00:37:6d:f9:66: 28:36:8a:e7:59:7e:3d:08:08:b1:dc:f3:59:68:55: 7b:6c:51:de:6c:22:57:a9:34:78:9f:8b:8c:7a:f6: 7b:fa:6a:5f:9b:bf:08:b1:90:2c:22:21:ee:d5:e0: 6e:7f:6a:b9:97:92:48:ae:42:7a:82:57:99:ea:af: 4b:f1:91:3b:66:f2:eb:76:df:a0:83:4b:ad:1f:8f: 03:5a:53:19:f8:1c:1a:6d:a6:aa:88:ba:1b:88:d2: de:75:27:b4:7d:0a:80:ae:63:d5:6a:2a:b3:cd:17: fe:35:3e:d3:d3:c1:3c:46:75:e9:0b:87:60:e6:31: eb:c7:5c:6b:6c:ed:04:75:8b:45:62:a7:b8:f4:5a: 46:be:b3:bb:cb:6c:47:c4:cb:b4:93:b4:eb:6f:db: 48:02:ea:e4:23:03:c3:8c:9b:92:ca:40:8d:a5:d3: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0D:C6:96:42:28:EF:A3:8A:B0:98:46:BC:B2:1B:0D:26:F6:CF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e646695-998a-3951-a3ca-a84efeb22b5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:42:94:49:0b:2c:fc:8e:07:b7:e5:e0:86:55:8b:6f:84:68: 53:d1:b3:a1:02:1a:bd:23:99:d3:d5:c2:e5:46:83:8d:a4:32: ec:c0:de:ac:cf:74:17:5a:24:ff:d3:51:d9:d3:de:c7:71:8b: 4e:0c:57:19:3b:18:54:e1:d7:b6:b1:26:19:a0:0f:6f:b2:04: fd:f1:70:56:5e:7e:65:53:14:71:b2:c6:27:b6:17:48:71:1a: e3:0e:39:78:fa:a9:ee:79:ac:6a:be:09:89:73:d3:d2:cd:cd: 83:a4:f6:76:65:f3:1e:c7:c5:22:29:e1:95:2d:83:4a:4d:f2: 1f:14:0b:3b:c4:5b:9c:54:e5:f8:de:2e:34:b8:aa:54:fe:16: f8:c7:cb:84:3f:ce:e7:97:20:b9:75:e3:6c:2c:8f:a9:5f:25: 16:2b:eb:6a:f9:8f:5e:a9:2c:1e:53:bc:eb:49:9b:c7:65:a0: 3c:b7:a7:64:94:4c:10:93:95:d1:51:34:4b:5a:6f:9b:b9:19: 62:80:8e:1a:c0:a8:bb:4b:20:f3:76:aa:88:a6:40:d6:7e:26: 08:0f:c2:81:dd:94:f9:8e:a5:a2:c5:35:de:be:73:83:15:1e: 20:58:09:cb:e6:67:73:23:75:a3:ab:82:92:6d:9c:b9:d2:32: fa:ad:c2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4SAx3AZV9LRAFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YTQ2YTU5NzUtZmZjYS00YWFiLWFmYTUtZjA3MDliZDNjYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5w0nEmOYRrKwqglAFxHJpJVLhnBnyE+Knc oEQvT4KjFNx8EAKx4xpmnYv5YUjU5e4cFWwThnSsVIkAOLL5Ysbx7fE8/W+wMtcK iQ8+6Qujch1EADdt+WYoNornWX49CAix3PNZaFV7bFHebCJXqTR4n4uMevZ7+mpf m78IsZAsIiHu1eBuf2q5l5JIrkJ6gleZ6q9L8ZE7ZvLrdt+gg0utH48DWlMZ+Bwa baaqiLobiNLedSe0fQqArmPVaiqzzRf+NT7T08E8RnXpC4dg5jHrx1xrbO0EdYtF Yqe49FpGvrO7y2xHxMu0k7Trb9tIAurkIwPDjJuSykCNpdNNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8NxpZCKO+jirCYRryyGw0m9s/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmU2NDY2OTUtOTk4YS0z OTUxLWEzY2EtYTg0ZWZlYjIyYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxClEkLLPyOB7fl4IZVi2+EaFPRs6ECGr0jmdPVwuVGg42kMuzA3qzP dBdaJP/TUdnT3sdxi04MVxk7GFTh17axJhmgD2+yBP3xcFZefmVTFHGyxie2F0hx GuMOOXj6qe55rGq+CYlz09LNzYOk9nZl8x7HxSIp4ZUtg0pN8h8UCzvEW5xU5fje LjS4qlT+FvjHy4Q/zueXILl142wsj6lfJRYr62r5j16pLB5TvOtJm8dloDy3p2SU TBCTldFRNEtab5u5GWKAjhrAqLtLIPN2qoimQNZ+JggPwoHdlPmOpaLFNd6+c4MV HiBYCcvmZ3MjdaOrgpJtnLnSMvqtwq8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:30:26 2025 by rpki-client