$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa File: c4395e21-464a-33ee-8d38-8516ea44d618.roa (raw, json) Hash identifier: aSwAvy50fIVgrD/7X5jaHn5SE8Gg2AWByWnsvWsocfs= Subject key identifier: 63:2D:9D:40:95:41:93:BD:C0:6E:9A:C9:C8:98:F4:48:5A:FE:17:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210ED0F48E8E94F9EB2A800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ed:0f:48:e8:e9:4f:9e:b2:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b0936140-f2c5-44bb-8a20-16d3ac184599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:0e:ca:90:69:2e:32:97:24:72:01:22:eb: ac:b7:84:20:4c:42:2d:fc:7c:78:19:cb:34:b7:ac: 21:70:6e:65:d3:d0:07:d8:68:46:74:83:82:f0:4b: 2d:a3:9f:f2:3b:03:1f:cc:2d:33:7a:47:90:8f:2d: 16:1c:f1:91:2b:9f:6b:7c:8e:ae:21:c6:87:35:71: 21:4e:a3:3e:a6:96:26:e3:2a:21:08:43:02:ed:c6: fd:aa:7b:47:55:84:c1:d7:33:4b:35:0b:05:27:d3: d9:bc:a5:f9:c0:fa:a2:30:44:21:75:6b:53:ba:c7: 18:e2:55:54:16:cd:8a:e1:e7:eb:14:23:e4:34:ac: 80:83:ea:3e:15:55:a0:af:e8:5e:60:1d:bf:29:39: 05:9f:41:04:2b:03:dd:01:95:60:93:e8:39:c6:95: 94:ec:4c:94:93:00:16:55:8d:f8:7c:59:9f:63:58: 8b:ea:31:54:02:64:e8:8a:52:a5:12:73:bb:85:f8: 63:b7:6a:09:ff:d2:3f:fc:29:bf:ae:ca:a3:4b:11: 53:7c:e6:9e:82:1d:74:a5:7f:21:ef:49:82:6a:6c: f3:4f:11:e4:10:38:a4:2e:f6:92:a8:2c:65:48:9e: 4a:e2:95:98:69:8b:cf:5a:2c:ab:6e:e8:7e:9a:3d: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2D:9D:40:95:41:93:BD:C0:6E:9A:C9:C8:98:F4:48:5A:FE:17:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6c:d9:88:ba:43:1e:a1:b8:7b:42:d8:1c:52:13:82:68:70: 5c:91:34:d8:47:2e:1a:65:31:dc:fa:74:2c:73:ef:8c:91:38: 46:b8:b1:84:5f:b5:16:a3:3e:94:2a:1f:ac:30:28:28:e8:a1: a8:93:3c:4a:3a:0d:df:b1:7f:67:c8:7c:a9:96:8a:16:82:30: c3:d1:75:5d:7c:9a:95:62:ad:d8:a4:ce:21:bb:5f:94:31:ee: 34:88:2b:ac:ab:21:37:41:a1:29:85:b9:dd:71:22:b2:ca:6f: 79:d8:9e:9e:a8:18:2c:16:28:06:3f:46:16:f5:c0:7f:66:d9: 50:45:cb:a7:7b:8b:e6:ca:b9:8d:46:0a:51:cd:74:90:26:99: 36:45:2b:f6:d6:9b:09:65:9b:8a:a1:1d:da:b5:5f:00:0d:c4: 6d:26:67:ef:22:45:f3:0a:cf:eb:49:8e:fc:ba:e3:90:b6:5d: b8:fb:36:fe:44:3c:e8:c4:70:e5:65:d2:06:8b:56:0e:be:5b: 90:b9:6b:d6:d2:95:b7:75:df:4e:50:0a:c0:6e:0c:e4:8d:d6: 8e:df:4e:0d:ca:59:56:e4:26:88:e4:fe:f7:8f:65:40:99:d6: 5e:9e:aa:99:88:4f:a3:f2:09:ca:8d:29:75:ab:d2:87:70:d7: f4:c0:33:6f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEO0PSOjpT56yqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjA5MzYxNDAtZjJjNS00NGJiLThhMjAtMTZkM2FjMTg0NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpIOypBpLjKXJHIBIuust4QgTEIt/Hx4Gcs0 t6whcG5l09AH2GhGdIOC8Esto5/yOwMfzC0zekeQjy0WHPGRK59rfI6uIcaHNXEh TqM+ppYm4yohCEMC7cb9qntHVYTB1zNLNQsFJ9PZvKX5wPqiMEQhdWtTuscY4lVU Fs2K4efrFCPkNKyAg+o+FVWgr+heYB2/KTkFn0EEKwPdAZVgk+g5xpWU7EyUkwAW VY34fFmfY1iL6jFUAmToilKlEnO7hfhjt2oJ/9I//Cm/rsqjSxFTfOaegh10pX8h 70mCamzzTxHkEDikLvaSqCxlSJ5K4pWYaYvPWiyrbuh+mj0nnwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGMtnUCVQZO9wG6ayciY9Eha/hecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQzOTVlMjEtNDY0YS0z M2VlLThkMzgtODUxNmVhNDRkNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ5cwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFGzZiLpDHqG4e0LYHFITgmhwXJE02EcuGmUx3Pp0LHPvjJE4RrixhF+1 FqM+lCofrDAoKOihqJM8SjoN37F/Z8h8qZaKFoIww9F1XXyalWKt2KTOIbtflDHu NIgrrKshN0GhKYW53XEisspvedienqgYLBYoBj9GFvXAf2bZUEXLp3uL5sq5jUYK Uc10kCaZNkUr9tabCWWbiqEd2rVfAA3EbSZn7yJF8wrP60mO/LrjkLZduPs2/kQ8 6MRw5WXSBotWDr5bkLlr1tKVt3XfTlAKwG4M5I3Wjt9ODcpZVuQmiOT+949lQJnW Xp6qmYhPo/IJyo0pdavSh3DX9MAzbw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:35 2025 by rpki-client