$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa File: a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa (raw, json) Hash identifier: fSkdhlDh21mgakrfmEVUEZ5t1fomb34ddxP8XmxMeZE= Subject key identifier: 85:41:13:AE:2F:BA:BE:2B:35:44:27:1E:48:24:C6:CC:92:B1:59:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11CF0144387F2D9C35FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 67.140.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1c:f0:14:43:87:f2:d9:c3:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=2a1c5de5-a08e-402f-897d-78f8f50526a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:34:88:8a:1b:e0:a1:27:1a:f3:ee:fa:5c: 64:bd:00:d2:af:31:c3:9c:7a:b0:c5:42:89:33:60: 75:23:da:07:ca:0c:c5:8c:9e:d8:7f:c9:c9:0c:2b: 20:ba:9e:0b:67:ac:d0:c9:55:47:4b:e9:5f:9d:89: 93:a4:e3:d7:b8:b1:a7:52:c5:37:dd:8f:64:fc:e1: 91:92:ed:62:e9:c0:af:fa:ea:d4:23:10:9e:0b:22: b6:e6:d0:3d:86:1f:72:a4:51:3e:f5:fb:6f:9e:31: a6:90:f3:e3:ca:34:22:21:8c:8b:bd:04:1d:b0:ca: c2:d6:6d:e5:a9:69:1e:d8:ae:6b:76:1f:43:20:0d: eb:05:29:5a:49:79:46:c6:75:08:09:bb:8c:03:65: 10:5a:66:a8:95:1e:75:3b:18:98:ad:36:e3:ee:82: ba:66:8f:56:03:f6:eb:7b:87:b0:cf:12:58:ee:1a: b5:88:d8:c2:35:19:64:55:fe:51:e8:ca:dc:21:e2: be:dd:31:c2:06:f1:97:de:2e:cf:50:72:fc:1f:0b: e1:80:9d:4b:15:01:f2:d9:57:0a:82:7a:87:95:6d: 0b:4e:e6:bd:a5:d7:f2:9a:67:5a:4c:de:70:89:29: 8f:d9:40:2d:94:c2:90:c8:10:c8:3c:1e:6c:26:b9: a1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:41:13:AE:2F:BA:BE:2B:35:44:27:1E:48:24:C6:CC:92:B1:59:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a19b8d1c-fd09-3ef6-ae5f-e6cf0a46e5d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a8:b8:40:23:a6:43:1c:b2:12:1f:a1:4a:02:34:a6:2f:37: 53:2a:65:a6:37:82:fb:e2:50:94:e5:58:b3:c0:15:96:ad:a3: f7:71:93:10:64:d2:4b:f9:4c:04:10:a8:07:68:cb:1b:51:7e: d7:37:56:8d:c2:18:8b:87:66:79:71:7e:95:fa:00:ea:a3:23: e3:1c:90:f3:1e:48:ec:7c:99:6a:44:2f:94:07:a1:6c:81:4b: db:97:30:bc:82:c2:2d:a5:2b:97:89:12:26:3c:78:42:69:72: a1:f8:5b:10:c9:cb:b0:d5:a2:2a:6a:ac:f6:dd:5b:66:5e:1d: 45:47:5e:63:48:4b:c0:f6:b8:6a:01:20:b5:2d:ea:85:ab:1c: 91:66:73:77:e4:d1:cb:16:b5:b7:f8:d0:91:e2:f8:a4:94:b8: 30:cd:c2:0d:16:15:11:25:37:27:17:ab:1f:8f:44:70:be:fe: 08:4d:28:d4:76:e5:16:fc:a5:e9:d9:ca:7a:19:8b:b8:45:5c: 5c:a6:a3:2d:dd:96:a3:e6:b5:b4:4e:83:7a:75:a6:7f:24:cd: b4:af:d8:80:cb:e0:8d:fd:c4:1f:e7:65:fb:4f:7a:89:cd:54: 77:44:f8:d7:b1:79:a3:5d:e4:4d:6d:58:48:54:57:78:20:d9: bc:10:42:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RzwFEOH8tnDX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MmExYzVkZTUtYTA4ZS00MDJmLTg5N2QtNzhmOGY1MDUyNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiY0iIob4KEnGvPu+lxkvQDSrzHDnHqwxUKJ M2B1I9oHygzFjJ7Yf8nJDCsgup4LZ6zQyVVHS+lfnYmTpOPXuLGnUsU33Y9k/OGR ku1i6cCv+urUIxCeCyK25tA9hh9ypFE+9ftvnjGmkPPjyjQiIYyLvQQdsMrC1m3l qWke2K5rdh9DIA3rBSlaSXlGxnUICbuMA2UQWmaolR51OxiYrTbj7oK6Zo9WA/br e4ewzxJY7hq1iNjCNRlkVf5R6MrcIeK+3THCBvGX3i7PUHL8HwvhgJ1LFQHy2VcK gnqHlW0LTua9pdfymmdaTN5wiSmP2UAtlMKQyBDIPB5sJrmhVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVBE64vur4rNUQnHkgkxsySsVmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE5YjhkMWMtZmQwOS0z ZWY2LWFlNWYtZTZjZjBhNDZlNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOouEAjpkMcshIfoUoCNKYvN1MqZaY3gvviUJTlWLPAFZato/dxkxBk 0kv5TAQQqAdoyxtRftc3Vo3CGIuHZnlxfpX6AOqjI+MckPMeSOx8mWpEL5QHoWyB S9uXMLyCwi2lK5eJEiY8eEJpcqH4WxDJy7DVoipqrPbdW2ZeHUVHXmNIS8D2uGoB ILUt6oWrHJFmc3fk0csWtbf40JHi+KSUuDDNwg0WFRElNycXqx+PRHC+/ghNKNR2 5Rb8penZynoZi7hFXFymoy3dlqPmtbROg3p1pn8kzbSv2IDL4I39xB/nZftPeonN VHdE+NexeaNd5E1tWEhUV3gg2bwQQow= -----END CERTIFICATE-----Generated at Sun Apr 6 04:35:10 2025 by rpki-client