$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fac8add7-c349-319f-b7e7-ed11c6355cdf.roa File: fac8add7-c349-319f-b7e7-ed11c6355cdf.roa (raw, json) Hash identifier: 9tdXQM9Kv6JqHugKJVwvHfyZWlpvgOtoXfkatlCBtJY= Subject key identifier: 13:0A:9E:BB:2A:EE:5D:AC:46:10:C9:61:48:DA:2C:6E:B3:72:74:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EC9D6E1AEAC0057F8B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fac8add7-c349-319f-b7e7-ed11c6355cdf.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 67.140.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ec:9d:6e:1a:ea:c0:05:7f:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=63d8245a-2d05-43c5-b169-11a69d50007d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4e:5b:77:50:7b:fc:cc:b7:72:3a:06:f1:c1: fe:e8:3d:71:5d:be:dd:8a:ea:3e:af:e9:81:d2:08: a5:79:4c:2c:2d:68:59:ac:91:46:85:ec:0c:5f:00: 80:2f:9e:38:e6:a0:4c:50:a1:2a:f3:de:11:e4:fa: 4d:c9:78:a7:e0:f0:fb:8b:c2:07:ff:06:17:82:82: 42:d2:e8:e9:2d:8b:e7:06:40:85:6a:a6:5b:3f:ce: 36:02:2e:d0:3f:05:15:77:39:05:94:aa:7d:3b:af: 4f:2b:fe:e6:a1:2a:df:c1:12:08:f2:34:64:fd:73: 7e:ec:a7:b5:85:17:c1:4c:d9:23:f9:da:1f:6a:e9: 66:81:5a:e8:30:79:86:b6:ef:76:f4:bf:5a:e0:6c: 4c:52:4e:fd:00:f4:2e:cd:b8:3c:85:41:33:28:9d: e4:d5:f2:58:8c:3b:6c:4a:0f:e1:24:82:f0:bb:fd: 0c:d7:60:8e:9d:f0:05:6a:ed:b5:d1:ad:2e:03:67: e9:a4:2f:1d:f8:97:7f:0f:cb:6f:24:38:50:a1:92: 91:81:0b:00:af:53:a8:47:ab:30:c1:79:d6:7e:f0: a5:f1:ec:a5:e3:22:22:fc:89:38:55:6b:4d:2e:b7: 11:8c:e7:08:d8:c0:13:56:01:81:37:0f:2b:61:57: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0A:9E:BB:2A:EE:5D:AC:46:10:C9:61:48:DA:2C:6E:B3:72:74:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fac8add7-c349-319f-b7e7-ed11c6355cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:bf:d2:03:37:3a:17:45:86:3a:6e:8e:ab:70:4b:65:75:73: 35:b6:5d:c4:74:28:d9:9f:e6:00:5b:f1:ff:b2:2a:b9:9a:eb: a5:b5:3d:dd:18:35:a5:cc:c1:93:86:88:22:82:44:de:e9:d3: 1b:bc:5d:34:79:d9:a5:d6:61:b7:dc:e8:29:89:6b:41:c5:28: d2:4b:0e:33:b0:1c:d1:86:65:9e:8e:6e:b9:ec:e5:be:33:cc: de:59:b4:73:ba:85:fa:d4:ae:b6:39:a2:ee:0b:c5:b8:db:86: 40:bf:2b:59:97:61:7d:f0:6a:0e:29:28:61:a0:72:7b:19:12: 38:a5:e7:71:2d:b6:3a:7b:ea:27:3a:73:78:d8:3c:f2:93:d3: 67:90:6c:f4:3d:64:7d:8c:bf:6a:4a:17:4f:75:fe:2c:00:4d: 33:d7:32:ea:e1:1e:a1:0d:d8:2c:be:c8:cb:43:47:4b:9c:8a: bf:07:f1:c0:6a:d2:b9:53:a1:b2:ba:eb:63:2b:5f:60:b2:bf: ad:af:77:02:2d:46:ae:2f:0d:e4:1a:37:88:36:39:3a:33:ee: c9:fe:e0:b3:43:aa:df:1e:d4:36:55:9e:05:c3:4d:2e:76:e5: bf:ef:8d:84:f0:89:c9:3e:5e:30:10:dc:96:c3:49:bc:52:63: e6:3b:6b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOydbhrqwAV/iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjNkODI0NWEtMmQwNS00M2M1LWIxNjktMTFhNjlkNTAwMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk5bd1B7/My3cjoG8cH+6D1xXb7diuo+r+mB 0gileUwsLWhZrJFGhewMXwCAL5445qBMUKEq894R5PpNyXin4PD7i8IH/wYXgoJC 0ujpLYvnBkCFaqZbP842Ai7QPwUVdzkFlKp9O69PK/7moSrfwRII8jRk/XN+7Ke1 hRfBTNkj+dofaulmgVroMHmGtu929L9a4GxMUk79APQuzbg8hUEzKJ3k1fJYjDts Sg/hJILwu/0M12COnfAFau210a0uA2fppC8d+Jd/D8tvJDhQoZKRgQsAr1OoR6sw wXnWfvCl8eyl4yIi/Ik4VWtNLrcRjOcI2MATVgGBNw8rYVehEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMKnrsq7l2sRhDJYUjaLG6zcnTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFjOGFkZDctYzM0OS0z MTlmLWI3ZTctZWQxMWM2MzU1Y2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEW/0gM3OhdFhjpujqtwS2V1czW2XcR0KNmf5gBb8f+yKrma66W1Pd0Y NaXMwZOGiCKCRN7p0xu8XTR52aXWYbfc6CmJa0HFKNJLDjOwHNGGZZ6Obrns5b4z zN5ZtHO6hfrUrrY5ou4LxbjbhkC/K1mXYX3wag4pKGGgcnsZEjil53Ettjp76ic6 c3jYPPKT02eQbPQ9ZH2Mv2pKF091/iwATTPXMurhHqEN2Cy+yMtDR0ucir8H8cBq 0rlTobK662MrX2Cyv62vdwItRq4vDeQaN4g2OToz7sn+4LNDqt8e1DZVngXDTS52 5b/vjYTwick+XjAQ3JbDSbxSY+Y7a94= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:20 2025 by rpki-client