$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01e66329-2211-3e0e-aefd-4f14328c8d54.roa File: 01e66329-2211-3e0e-aefd-4f14328c8d54.roa (raw, json) Hash identifier: 7EOMq4Tsqz4OUo8bWAWCEcsY1fFlpd6WpjSfYszfwgU= Subject key identifier: AE:1A:94:7F:E4:3A:D7:63:3D:A3:DF:7E:FD:BC:16:00:BD:CF:36:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB95CD910A5A880A4DC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01e66329-2211-3e0e-aefd-4f14328c8d54.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:5c:d9:10:a5:a8:80:a4:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=065ce8c9-36c4-4ced-ae74-fc0ac7713c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:ba:ec:ec:19:c6:92:d5:1e:b8:61:e5:44: b9:ab:1a:c8:4c:4e:12:4d:b2:43:83:94:08:d3:9e: e6:d1:5d:d1:c6:93:a3:a6:60:00:ef:48:45:54:86: d5:ad:59:77:c0:4d:ac:76:55:e4:99:19:29:db:a7: e5:71:25:8c:bb:49:81:dc:4a:c5:03:f6:41:52:ac: 3e:ce:50:79:9b:ef:5b:1b:bf:c6:3f:d4:83:8d:fe: 9c:b7:7c:27:ca:1b:6a:5d:a2:7e:3d:72:0c:16:0d: e3:3c:83:a3:60:7e:38:46:ff:7d:42:2d:98:e6:e7: 96:25:7e:de:31:8b:b5:ef:d4:9d:67:2e:90:2f:c0: 8d:03:94:c1:19:2a:98:05:12:14:63:b9:7c:c4:0e: 02:94:3b:6d:fd:f4:a8:2e:ab:59:1e:12:63:47:88: 07:ed:c6:d3:92:1d:46:e3:b3:79:c1:72:26:ac:7b: ba:d2:4b:75:67:00:fa:1d:8b:c4:87:74:60:63:62: 4c:f5:3f:05:df:6c:ce:6e:2f:e0:8f:3f:f5:d7:92: 8c:f5:d4:2e:71:1b:ea:ba:2b:cc:fa:eb:57:64:26: 05:62:62:0e:85:9d:d4:49:fa:2b:82:0e:d6:32:a7: cb:d7:17:03:a9:c2:70:8d:65:d7:92:de:0d:64:7f: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:94:7F:E4:3A:D7:63:3D:A3:DF:7E:FD:BC:16:00:BD:CF:36:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01e66329-2211-3e0e-aefd-4f14328c8d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e2:60:30:73:db:7a:8a:95:f7:6e:3e:fa:4f:fa:0b:09:26: e2:7f:39:2f:1f:24:ea:cf:7c:b0:65:93:76:6f:7c:4b:c4:d6: dd:6e:e3:67:ee:2b:d4:7a:df:1f:6f:f2:7e:3c:b9:95:65:a5: 4e:98:9c:a9:b2:00:b7:85:77:b6:0a:50:b6:17:30:cf:cd:52: 6c:7d:29:a9:df:1c:95:3e:bd:8c:03:1e:43:bd:17:9f:81:3a: f1:01:d1:53:95:7e:fe:a8:ae:b8:ac:a6:a4:98:24:a9:ae:52: 6e:2b:72:f3:1b:db:3a:48:3b:21:6d:38:cd:71:b5:21:a0:6c: 01:c0:af:8e:b4:f8:45:b9:be:c7:af:6c:d5:96:0f:76:53:32: e6:9a:b8:1a:1e:92:e6:d4:da:91:57:4e:bd:88:80:be:54:7f: dc:43:bd:6f:33:e0:7f:be:8d:d9:7f:2d:85:7f:0e:96:a4:dc: e2:e4:f3:ad:10:99:af:65:52:ed:66:b0:98:99:41:b3:1b:46: 20:38:28:6a:f7:08:47:3e:02:54:73:68:eb:cb:2c:9d:29:a6: 76:f1:94:3f:8b:75:07:7a:95:71:b0:e7:f1:95:19:18:6d:45: db:a7:2c:c1:4e:39:45:b7:61:a5:16:a8:98:1d:15:53:6c:da: 57:78:ec:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7lc2RClqICk3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MDY1Y2U4YzktMzZjNC00Y2VkLWFlNzQtZmMwYWM3NzEzYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXK67OwZxpLVHrhh5US5qxrITE4STbJDg5QI 057m0V3RxpOjpmAA70hFVIbVrVl3wE2sdlXkmRkp26flcSWMu0mB3ErFA/ZBUqw+ zlB5m+9bG7/GP9SDjf6ct3wnyhtqXaJ+PXIMFg3jPIOjYH44Rv99Qi2Y5ueWJX7e MYu179SdZy6QL8CNA5TBGSqYBRIUY7l8xA4ClDtt/fSoLqtZHhJjR4gH7cbTkh1G 47N5wXImrHu60kt1ZwD6HYvEh3RgY2JM9T8F32zObi/gjz/115KM9dQucRvquivM +utXZCYFYmIOhZ3USforgg7WMqfL1xcDqcJwjWXXkt4NZH+2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4alH/kOtdjPaPffv28FgC9zzbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFlNjYzMjktMjIxMS0z ZTBlLWFlZmQtNGYxNDMyOGM4ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLiYDBz23qKlfduPvpP+gsJJuJ/OS8fJOrPfLBlk3ZvfEvE1t1u42fu K9R63x9v8n48uZVlpU6YnKmyALeFd7YKULYXMM/NUmx9KanfHJU+vYwDHkO9F5+B OvEB0VOVfv6orrispqSYJKmuUm4rcvMb2zpIOyFtOM1xtSGgbAHAr460+EW5vsev bNWWD3ZTMuaauBoekubU2pFXTr2IgL5Uf9xDvW8z4H++jdl/LYV/Dpak3OLk860Q ma9lUu1msJiZQbMbRiA4KGr3CEc+AlRzaOvLLJ0ppnbxlD+LdQd6lXGw5/GVGRht RdunLMFOOUW3YaUWqJgdFVNs2ld47Fc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:58 2025 by rpki-client