$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa File: e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa (raw, json) Hash identifier: 0qqIaZ1JcGY75Te4ByorUk3dNBbXCEGv040nzWMBAGg= Subject key identifier: 24:94:82:4D:CD:86:F5:A6:4A:1E:6E:3E:83:33:42:30:56:35:FA:B4 Certificate issuer: /CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Certificate serial: 010D0C9F43285848FD56C8303D08A98A65574300 Authority key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 66.33.34.0/24 maxlen: 24 66.33.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c8:30:3d:08:a9:8a:65:57:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=823a7edb-cb4e-4f64-bc44-0e8981b62e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a4:9a:39:8c:94:72:bb:f0:84:5b:73:12:89: 33:c0:12:6d:b5:65:a9:45:12:7e:87:27:96:d4:df: de:b9:66:96:d9:a2:fa:8d:4d:39:c7:97:50:88:07: 35:c9:86:1e:78:75:4e:8d:d2:34:85:fc:7e:05:a3: a8:ae:5d:5e:54:ac:43:0d:c4:28:c9:ad:ff:ed:43: 80:80:38:32:ae:33:7d:6c:59:f9:f9:0e:59:80:0e: 79:7f:1c:c1:77:b0:ff:4e:ab:f1:e0:5e:c5:af:56: 42:e5:f9:9f:58:1b:f6:67:5d:89:7e:0c:a3:bf:2e: 72:3b:57:2b:c9:42:31:c1:41:97:88:b1:c1:fa:05: 16:1e:92:0e:c5:82:3b:6d:ca:59:89:85:e5:51:d3: 14:f4:bd:2b:1c:d9:46:ef:96:94:92:04:6f:99:3a: 6e:fd:81:c9:8d:db:aa:f5:f9:55:28:8e:22:9a:e8: 72:04:5d:09:cb:b8:65:43:1d:5f:7a:7d:16:91:62: 6b:42:cf:11:86:87:19:87:d8:2f:01:da:ff:14:12: 65:97:b8:50:89:10:c7:79:12:2e:6c:29:f0:2e:e1: 0a:0d:92:84:1f:7b:a9:85:93:f5:d4:ab:7f:42:76: 54:21:6e:fc:f2:e2:53:d2:10:9b:59:a7:60:55:f0: c2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:94:82:4D:CD:86:F5:A6:4A:1E:6E:3E:83:33:42:30:56:35:FA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/e97b3eea-0c80-31fe-821e-5a51b1051cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.crl X509v3 Authority Key Identifier: keyid:F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:09:7c:c4:95:34:e6:7f:ce:70:8c:9b:33:58:49:6b:9e:03: d8:16:88:4f:94:69:1a:cc:10:38:2c:3c:97:2c:68:bb:e0:91: 9a:71:42:fe:12:84:6d:3c:83:af:84:d9:eb:30:79:ed:45:c3: a2:a0:27:31:f4:fe:1e:f7:2d:50:b1:87:e5:78:b2:da:eb:7a: bd:1e:68:9d:e1:51:b9:a6:14:6c:4a:42:f9:10:81:da:7b:10: b0:49:9f:bc:b8:12:0a:51:56:2e:ec:17:ab:dd:0f:f8:88:53: 01:4b:3b:4b:83:6b:be:71:bf:37:a2:0d:cd:91:65:df:91:ed: a4:c5:a0:34:c6:25:fb:f2:38:03:a6:6e:a0:68:64:55:78:06: f8:9a:43:f6:5e:98:b7:9a:f0:97:ed:c7:9c:5d:af:3f:d8:ba: 9d:f0:59:7b:3e:be:43:db:5d:b9:5a:0d:cd:50:62:a8:42:0b: 62:b5:d5:24:8b:32:b8:49:58:8d:93:8b:c5:79:87:76:62:e3: 1a:db:b1:cf:d9:6a:1e:74:da:fa:c1:cf:e3:95:88:63:aa:fc: ef:06:57:08:67:cf:64:a7:01:2e:35:f7:55:c6:1a:8a:d0:0f: b3:e8:6f:bf:40:7d:a1:32:25:99:61:c3:4a:f9:6a:a1:2c:77: 25:5f:d2:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsgwPQipimVXQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYy NmE0MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ODIzYTdlZGItY2I0ZS00ZjY0LWJjNDQtMGU4OTgxYjYyZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6SaOYyUcrvwhFtzEokzwBJttWWpRRJ+hyeW 1N/euWaW2aL6jU05x5dQiAc1yYYeeHVOjdI0hfx+BaOorl1eVKxDDcQoya3/7UOA gDgyrjN9bFn5+Q5ZgA55fxzBd7D/Tqvx4F7Fr1ZC5fmfWBv2Z12Jfgyjvy5yO1cr yUIxwUGXiLHB+gUWHpIOxYI7bcpZiYXlUdMU9L0rHNlG75aUkgRvmTpu/YHJjduq 9flVKI4imuhyBF0Jy7hlQx1fen0WkWJrQs8RhocZh9gvAdr/FBJll7hQiRDHeRIu bCnwLuEKDZKEH3uphZP11Kt/QnZUIW788uJT0hCbWadgVfDCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSUgk3NhvWmSh5uPoMzQjBWNfq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2 ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvZTk3YjNlZWEtMGM4MC0z MWZlLTgyMWUtNWE1MWIxMDUxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDdhNmZiYzQtNTllMi00OWI0LWEz NDUtM2VkZGU4MWYyNmE0LzQ3YTZmYmM0LTU5ZTItNDliNC1hMzQ1LTNlZGRlODFm MjZhNC5jcmwwHwYDVR0jBBgwFoAU8A3+W3wnOkCARHzodZuLMa3LV1wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRk ZTgxZjI2YTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQiEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIJfMSVNOZ/znCMmzNYSWueA9gWiE+UaRrMEDgsPJcsaLvgkZpxQv4S hG08g6+E2eswee1Fw6KgJzH0/h73LVCxh+V4strrer0eaJ3hUbmmFGxKQvkQgdp7 ELBJn7y4EgpRVi7sF6vdD/iIUwFLO0uDa75xvzeiDc2RZd+R7aTFoDTGJfvyOAOm bqBoZFV4BviaQ/ZemLea8Jftx5xdrz/Yup3wWXs+vkPbXblaDc1QYqhCC2K11SSL MrhJWI2Ti8V5h3Zi4xrbsc/Zah502vrBz+OViGOq/O8GVwhnz2SnAS4191XGGorQ D7Pob79AfaEyJZlhw0r5aqEsdyVf0lI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:25 2025 by rpki-client