$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea32dc99-a4ff-3de3-9506-6e72e0a39088.roa File: ea32dc99-a4ff-3de3-9506-6e72e0a39088.roa (raw, json) Hash identifier: pSK3g7KCAvqbyrpksscNXBGhj2efFGK0b3POhYwLrEk= Subject key identifier: C4:0D:31:86:09:15:BD:D5:99:16:A0:1F:63:CE:80:63:A6:05:A9:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210ECD3135B61646481E3A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea32dc99-a4ff-3de3-9506-6e72e0a39088.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.141.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ec:d3:13:5b:61:64:64:81:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4f0e9b23-b438-4cd6-9d19-0ed3dd1a51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:ac:29:1d:c9:46:3d:75:bc:58:66:ec:81: a4:ec:a9:9d:aa:6b:6c:ef:03:4f:05:89:08:50:ce: ba:6d:2a:45:54:52:c0:be:e5:a3:9d:25:13:b7:7d: 39:e0:2c:61:0a:ec:b8:f8:2b:2f:ba:2d:32:ef:78: b0:30:9d:85:79:82:90:de:dc:3e:3a:80:de:70:e9: 68:e0:06:d1:2a:29:15:8b:0d:c2:38:45:d4:3f:ed: fe:80:d0:4a:a0:93:9a:46:90:4e:9a:fc:23:3a:52: 69:98:7f:b9:86:91:00:2c:7d:61:36:d2:6e:9a:6f: 84:70:38:5a:9e:2c:20:80:8a:6c:cc:fc:51:d6:9d: cc:54:59:26:e6:20:e4:7e:71:e0:ea:a1:cf:48:8c: 75:47:f7:17:02:bc:0b:08:f5:d7:83:81:70:f9:55: 1e:63:42:53:23:16:cb:80:af:08:86:25:95:bc:44: 1b:ef:c0:2a:fa:a5:40:81:63:db:d8:81:27:4e:75: 5f:60:ab:32:0e:78:c1:c9:c0:d7:77:d9:31:26:42: 3c:6d:c4:51:ff:4a:4b:42:ce:43:a8:71:7e:a8:3e: 58:7f:ff:93:51:77:9d:0b:70:58:ff:59:68:03:09: d0:38:8a:72:d9:a7:ec:67:bd:21:1e:38:51:d1:16: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0D:31:86:09:15:BD:D5:99:16:A0:1F:63:CE:80:63:A6:05:A9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea32dc99-a4ff-3de3-9506-6e72e0a39088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:bd:ad:3e:8f:c7:bb:a2:53:16:e0:5c:f3:95:2e:07:f4:21: aa:31:22:08:ae:0a:f8:a6:37:2a:c6:d2:69:54:05:74:2d:c6: 32:a5:11:62:62:53:7b:a1:98:79:bf:d4:53:5b:b6:79:b3:e4: ac:49:5a:4e:08:51:41:45:33:bb:98:00:f9:cb:7f:98:3d:c5: cb:e3:91:18:c3:08:1d:a6:9d:59:1d:c7:59:d3:1b:6f:a8:9a: 65:5f:2f:0d:e3:d4:9d:f3:0c:d1:a8:90:a2:a5:76:90:d2:05: 0b:00:c0:ac:ec:a8:4f:0d:30:37:21:b7:56:18:f5:87:d4:62: 36:48:99:bf:a8:2e:98:05:5e:83:73:29:fb:7e:a8:67:98:dd: e0:f5:8e:43:7c:2b:24:83:65:4b:1e:e3:66:5c:95:33:c9:f8: 88:74:89:93:c8:7f:03:9d:d4:d9:4a:8c:8b:36:c7:84:0c:f1: 7c:14:45:a7:08:d9:60:fa:5d:a4:a2:e1:20:1c:04:73:3a:38: e8:9a:7a:ec:dc:23:c2:4a:6c:bd:6b:05:96:44:17:6e:de:96: f7:0c:bb:b9:a4:eb:95:fb:47:75:72:6b:6e:fb:44:d7:a4:c1: 90:10:6c:43:7f:12:7b:d4:bb:7b:73:ad:b3:36:db:a2:c6:f5: 5b:5c:24:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOzTE1thZGSB46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGYwZTliMjMtYjQzOC00Y2Q2LTlkMTktMGVkM2RkMWE1MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn2sKR3JRj11vFhm7IGk7Kmdqmts7wNPBYkI UM66bSpFVFLAvuWjnSUTt3054CxhCuy4+Csvui0y73iwMJ2FeYKQ3tw+OoDecOlo 4AbRKikViw3COEXUP+3+gNBKoJOaRpBOmvwjOlJpmH+5hpEALH1hNtJumm+EcDha niwggIpszPxR1p3MVFkm5iDkfnHg6qHPSIx1R/cXArwLCPXXg4Fw+VUeY0JTIxbL gK8IhiWVvEQb78Aq+qVAgWPb2IEnTnVfYKsyDnjBycDXd9kxJkI8bcRR/0pLQs5D qHF+qD5Yf/+TUXedC3BY/1loAwnQOIpy2afsZ70hHjhR0Rb8fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQNMYYJFb3VmRagH2POgGOmBalCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWEzMmRjOTktYTRmZi0z ZGUzLTk1MDYtNmU3MmUwYTM5MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ40gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa9rT6Px7uiUxbgXPOVLgf0IaoxIgiuCvimNyrG0mlUBXQtxjKlEWJi U3uhmHm/1FNbtnmz5KxJWk4IUUFFM7uYAPnLf5g9xcvjkRjDCB2mnVkdx1nTG2+o mmVfLw3j1J3zDNGokKKldpDSBQsAwKzsqE8NMDcht1YY9YfUYjZImb+oLpgFXoNz Kft+qGeY3eD1jkN8KySDZUse42ZclTPJ+Ih0iZPIfwOd1NlKjIs2x4QM8XwURacI 2WD6XaSi4SAcBHM6OOiaeuzcI8JKbL1rBZZEF27elvcMu7mk65X7R3Vya277RNek wZAQbEN/EnvUu3tzrbM226LG9VtcJF4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:22 2025 by rpki-client