$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e0d4968e-c0a9-3040-b8f8-ca9091f746f4.roa File: e0d4968e-c0a9-3040-b8f8-ca9091f746f4.roa (raw, json) Hash identifier: /JqQ4ruam/VtLk1yexhGp00PysUmJHxjscSQe+Wg8RQ= Subject key identifier: 5F:BB:5C:38:59:5C:C2:3C:D0:E1:1F:6B:85:97:F8:1A:B0:D9:A4:C8 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F43285848A400BF1BF1C41628FD77F580 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e0d4968e-c0a9-3040-b8f8-ca9091f746f4.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 66.33.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:bf:1b:f1:c4:16:28:fd:77:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=9691c50d-bdc3-437a-a29c-5b744ad3197f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:70:84:04:eb:55:83:37:2b:dd:7a:64:7e: 0d:ab:50:16:15:c3:17:2c:25:42:98:a3:1c:84:0f: 82:a7:ae:e7:43:89:0e:19:b4:b1:c1:09:36:6e:e1: 62:ac:19:9f:da:82:8e:dc:e5:ae:3d:14:8f:ed:33: c7:58:f3:2d:fe:5c:ca:ea:c3:1c:cb:7d:e1:14:7a: 50:97:56:05:1c:64:04:fc:ed:5b:5d:99:11:46:0c: 5d:cf:89:f8:9f:29:8e:1c:4c:fb:6c:dd:11:c6:bc: cd:24:62:3e:59:3f:70:31:93:a0:4b:98:e0:7a:73: 53:1b:c7:e0:f3:d0:90:b1:fd:5f:f2:03:db:95:ff: 04:b1:08:48:99:7f:c4:72:af:bc:6a:d5:02:eb:b8: 97:61:af:07:53:d4:41:65:8f:08:22:b3:7b:39:c6: 0d:83:21:08:64:66:bd:9b:42:3e:68:c3:df:c3:bb: c4:47:9d:09:88:85:d2:0c:12:b5:f7:90:e5:c5:7e: 36:00:bf:08:f1:8d:de:74:9b:2b:54:06:66:84:37: 16:2b:11:0d:a8:99:3d:e5:f6:23:95:37:44:12:40: c9:22:ea:e6:5a:d0:df:3f:ec:92:3c:5c:f5:55:c3: 43:11:8d:cf:4f:30:2e:d1:90:ac:14:15:48:b6:eb: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BB:5C:38:59:5C:C2:3C:D0:E1:1F:6B:85:97:F8:1A:B0:D9:A4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e0d4968e-c0a9-3040-b8f8-ca9091f746f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:77:8d:15:2d:15:66:2c:38:9d:a8:e6:8a:33:42:1a:cd:19: 4a:6b:da:30:63:a1:f4:a3:c9:53:36:b5:12:a4:ef:52:96:f9: fb:8e:4c:51:10:6a:9a:af:9e:4e:ee:ec:cd:eb:0f:48:26:f9: b1:5a:2f:0d:5e:a0:e6:44:ea:ef:17:9a:17:f9:a1:0f:b9:20: 63:e9:8a:19:17:5f:00:4a:bf:52:93:6c:4a:31:73:44:f1:1d: 7d:39:65:b8:2b:e4:a8:65:6c:6b:a9:ff:2a:0b:68:14:55:ff: 17:94:ca:a5:a2:99:24:da:2f:65:d2:70:7c:8a:ba:83:4a:45: 86:45:00:78:2c:01:d6:ad:cb:59:a7:3e:91:0f:08:25:71:86: 37:60:6a:58:26:6c:34:52:76:66:aa:8d:b3:16:db:fd:f5:c4: 31:1b:29:4e:43:52:80:04:cd:51:5f:4a:70:f4:c0:d9:68:77: f3:5d:af:5e:a8:89:3c:e5:c3:d4:d5:bf:f0:72:b7:93:ab:ec: a1:ea:1d:85:10:df:c1:56:82:d8:c7:fc:1f:c8:bd:cc:fc:1e: 3d:8d:84:80:14:fc:09:05:0c:4d:e1:64:ee:f2:ff:9a:bf:f7: 8c:00:6c:20:b5:9a:e9:73:49:a7:94:4a:09:89:4d:fe:7b:93: 71:6a:43:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEikAL8b8cQWKP139YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk OTY5MWM1MGQtYmRjMy00MzdhLWEyOWMtNWI3NDRhZDMxOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySNwhATrVYM3K916ZH4Nq1AWFcMXLCVCmKMc hA+Cp67nQ4kOGbSxwQk2buFirBmf2oKO3OWuPRSP7TPHWPMt/lzK6sMcy33hFHpQ l1YFHGQE/O1bXZkRRgxdz4n4nymOHEz7bN0RxrzNJGI+WT9wMZOgS5jgenNTG8fg 89CQsf1f8gPblf8EsQhImX/Ecq+8atUC67iXYa8HU9RBZY8IIrN7OcYNgyEIZGa9 m0I+aMPfw7vER50JiIXSDBK195DlxX42AL8I8Y3edJsrVAZmhDcWKxENqJk95fYj lTdEEkDJIurmWtDfP+ySPFz1VcNDEY3PTzAu0ZCsFBVItuvktwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+7XDhZXMI80OEfa4WX+Bqw2aTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTBkNDk2OGUtYzBhOS0z MDQwLWI4ZjgtY2E5MDkxZjc0NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG53jRUtFWYsOJ2o5oozQhrNGUpr2jBjofSjyVM2tRKk71KW+fuOTFEQ apqvnk7u7M3rD0gm+bFaLw1eoOZE6u8Xmhf5oQ+5IGPpihkXXwBKv1KTbEoxc0Tx HX05Zbgr5KhlbGup/yoLaBRV/xeUyqWimSTaL2XScHyKuoNKRYZFAHgsAdaty1mn PpEPCCVxhjdgalgmbDRSdmaqjbMW2/31xDEbKU5DUoAEzVFfSnD0wNlod/Ndr16o iTzlw9TVv/Byt5Or7KHqHYUQ38FWgtjH/B/Ivcz8Hj2NhIAU/AkFDE3hZO7y/5q/ 94wAbCC1mulzSaeUSgmJTf57k3FqQzk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:43:14 2025 by rpki-client