$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa File: 1107219f-7c6b-3cf1-88c1-4e68939eb125.roa (raw, json) Hash identifier: uZ9IPXPNKxGcyC7mG6ZuOiKVr52KL7/HqDKYuSunRwc= Subject key identifier: DE:E9:50:D1:47:71:09:91:1C:F4:67:A4:97:C3:DC:53:77:C5:AE:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EE2222D1F09AACB30D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:22:22:d1:f0:9a:ac:b3:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7123957c-798e-4947-9dc8-f13156a84e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:df:6b:c4:0f:dc:bf:49:f6:98:70:7c:54: a0:ac:ee:75:99:23:4c:40:f2:72:6f:2e:d7:7d:4f: 31:fc:d9:8b:9d:44:64:5e:fe:4e:02:28:28:7f:12: db:57:f3:d9:61:a9:78:3b:f0:37:40:a2:55:d0:fc: d1:21:fa:a4:2d:3a:17:be:1a:d6:23:6e:96:aa:c3: 67:5f:b2:18:34:89:fc:83:87:64:68:ce:db:2e:ff: d6:e5:48:e4:5c:1b:94:39:47:e4:f7:d4:0a:54:27: c7:9a:65:79:46:ae:17:c4:bd:60:bb:3d:b6:36:92: cb:5e:fb:98:e5:35:12:eb:14:4b:7a:a4:da:b8:68: 5b:31:c7:8d:29:4c:41:b5:e5:87:3a:e3:b2:65:4a: f4:57:5f:16:bf:1d:55:e6:10:11:36:ba:ef:7a:36: 04:29:16:0e:a0:81:91:5f:0f:ca:31:03:21:5c:dd: 4b:93:5d:00:6a:d1:d2:6b:bb:00:1f:9e:48:98:c7: 92:09:b2:53:b9:fc:32:df:cf:00:45:42:58:4c:ed: af:ab:e0:a9:c6:16:a7:0f:c6:e0:f3:a7:d6:e8:88: ee:ca:2f:9a:d4:40:0b:16:8a:f9:f9:fe:41:b3:91: 35:05:15:d2:94:ca:65:0f:fa:38:2e:07:a0:16:9f: 80:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:50:D1:47:71:09:91:1C:F4:67:A4:97:C3:DC:53:77:C5:AE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1107219f-7c6b-3cf1-88c1-4e68939eb125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6b:37:69:8c:cd:78:f2:b4:a8:d1:50:0b:26:82:8a:31:21: d0:16:68:4d:76:d9:42:0a:ce:04:4c:84:10:06:2d:b1:79:a9: 39:25:17:f1:bf:cf:7a:fe:55:b6:cf:ef:b0:aa:26:a4:89:9b: d8:eb:55:8a:73:11:7d:10:34:a9:be:ca:3c:e2:3d:8c:5e:75: 4d:9c:f2:9b:e7:89:c5:b4:fe:1a:7b:6d:82:77:45:b0:b6:2c: ad:b8:2b:28:a1:73:f6:40:32:cd:eb:bf:05:e2:8f:44:6b:a4: c9:52:6b:95:5d:c3:e9:7f:7e:77:46:71:76:32:6b:9e:24:84: ff:9e:10:91:e4:82:26:69:51:6a:e2:63:81:7f:1d:bc:5a:41: 08:b3:3d:dd:44:63:d0:17:a1:6d:fa:d0:dd:09:c0:a2:75:be: bc:07:a6:fe:23:fd:b6:8e:b4:49:22:4d:2f:73:12:c4:54:22: 38:d2:1d:20:aa:d4:77:ed:fb:44:5d:6c:91:49:f6:b7:69:d5: f9:bd:17:e7:13:c1:01:fe:6e:04:6a:f0:99:38:c9:cb:05:de: 32:79:6a:13:6e:19:d3:60:1a:75:73:4f:02:3b:28:5d:75:0e: ea:b0:c9:b5:92:e6:f5:4f:e3:6a:df:9b:a6:d0:6c:16:6d:f8: 62:39:24:7e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEO4iItHwmqyzDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzEyMzk1N2MtNzk4ZS00OTQ3LTlkYzgtZjEzMTU2YTg0ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ALfa8QP3L9J9phwfFSgrO51mSNMQPJyby7X fU8x/NmLnURkXv5OAigofxLbV/PZYal4O/A3QKJV0PzRIfqkLToXvhrWI26WqsNn X7IYNIn8g4dkaM7bLv/W5UjkXBuUOUfk99QKVCfHmmV5Rq4XxL1guz22NpLLXvuY 5TUS6xRLeqTauGhbMceNKUxBteWHOuOyZUr0V18Wvx1V5hARNrrvejYEKRYOoIGR Xw/KMQMhXN1Lk10AatHSa7sAH55ImMeSCbJTufwy388ARUJYTO2vq+CpxhanD8bg 86fW6Ijuyi+a1EALFor5+f5Bs5E1BRXSlMplD/o4LgegFp+AKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN7pUNFHcQmRHPRnpJfD3FN3xa6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTEwNzIxOWYtN2M2Yi0z Y2YxLTg4YzEtNGU2ODkzOWViMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJ2s3aYzNePK0qNFQCyaCijEh0BZoTXbZQgrOBEyEEAYtsXmpOSUX8b/P ev5Vts/vsKompImb2OtVinMRfRA0qb7KPOI9jF51TZzym+eJxbT+GnttgndFsLYs rbgrKKFz9kAyzeu/BeKPRGukyVJrlV3D6X9+d0ZxdjJrniSE/54QkeSCJmlRauJj gX8dvFpBCLM93URj0BehbfrQ3QnAonW+vAem/iP9to60SSJNL3MSxFQiONIdIKrU d+37RF1skUn2t2nV+b0X5xPBAf5uBGrwmTjJywXeMnlqE24Z02AadXNPAjsoXXUO 6rDJtZLm9U/jat+bptBsFm34Yjkkfg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:34 2025 by rpki-client