$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/190de7c5-ebf6-386d-a835-9fd229738883.roa File: 190de7c5-ebf6-386d-a835-9fd229738883.roa (raw, json) Hash identifier: qyfSfQ7wqq2z7kRVHQc37BwIFCLJMGtEQLlOiBTR2yw= Subject key identifier: 06:A5:96:F0:FA:2D:E2:29:0C:DC:03:F1:04:3C:37:B5:CD:61:FA:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EC80286A77C218A89D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/190de7c5-ebf6-386d-a835-9fd229738883.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.251.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ec:80:28:6a:77:c2:18:a8:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0db175da-93d0-4727-ab2e-9048baec8559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:5c:99:e7:9d:7c:74:43:bb:cd:44:6a:b4: 57:bb:c7:a2:7c:ca:50:31:3d:61:59:76:74:12:72: 23:db:9e:af:e0:38:74:64:61:3d:76:4e:bb:d9:6c: 5a:55:2e:91:fe:8c:65:8e:ef:a1:d2:ca:e5:46:9d: b0:26:3b:3f:83:fc:e7:47:0a:36:22:f2:d2:7e:4c: 70:0e:77:91:cd:91:10:a0:07:e9:a7:94:90:d0:b4: 27:c4:37:c4:85:29:0c:bd:3b:69:c9:ba:1e:0f:6f: 91:d6:62:ea:31:90:b7:6f:03:33:3b:2e:38:46:1c: 10:89:f6:3c:ab:20:22:90:47:14:14:86:50:26:b7: 7e:2c:ae:28:2b:db:5b:96:ab:1d:6b:d1:47:5c:5b: 6d:60:6f:43:6c:8f:b0:ca:b7:fa:e0:af:86:18:4d: 62:63:01:4b:9c:8f:b3:49:92:6c:73:cf:4e:ae:12: cc:f8:72:c4:d3:b9:98:5b:8a:0e:45:9e:ca:13:97: f4:f2:79:a4:a1:d0:ad:42:79:37:f9:67:78:86:fe: a7:b1:32:3e:e2:59:0a:6a:40:b5:fd:c2:fc:32:6b: 11:6c:5d:a6:9c:66:63:30:a1:c8:9f:37:c4:16:4b: b0:d8:e4:ed:8d:8b:60:56:a2:27:26:77:40:a9:34: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A5:96:F0:FA:2D:E2:29:0C:DC:03:F1:04:3C:37:B5:CD:61:FA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/190de7c5-ebf6-386d-a835-9fd229738883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.251.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:77:68:90:cd:7e:0b:d0:7b:6c:c0:18:12:40:c8:61:1a:2d: 72:2b:a6:bb:52:38:1b:fd:8a:39:62:e5:17:b4:7e:b1:1b:92: 05:6f:c2:90:72:2d:67:04:e9:7a:02:01:ed:17:b0:ae:c1:26: 53:69:5b:20:61:27:62:35:d0:fb:3c:54:d9:35:a6:a9:98:3c: 55:53:38:fd:92:2b:c0:cc:ba:5b:e3:b1:34:b0:58:aa:a7:17: df:15:dd:af:2e:6a:60:5d:12:20:e5:7a:ca:2b:78:6e:fb:c3: 19:22:4a:09:a5:7c:bb:df:dd:2f:b1:73:85:62:28:ab:ed:1c: 32:c0:a3:e8:dd:ab:27:dc:18:09:30:19:d6:55:b1:bc:8d:00: cf:62:44:c3:67:d4:cf:6a:ab:c2:d4:8c:de:da:8d:56:cf:68: d0:0f:07:93:43:bd:72:d8:3c:a1:7c:37:e2:f6:f1:62:da:a0: 88:b3:09:ee:7b:16:b3:e0:39:53:59:0a:b3:06:c6:95:17:75: 9e:b8:42:bb:60:2a:8b:06:94:65:7c:44:05:cd:8f:00:40:be: 79:d5:9e:93:e2:b5:6c:ea:f0:7c:12:b0:41:35:1b:0f:65:db: 4e:48:f5:d2:c1:3b:43:a2:cd:f8:b1:6f:90:ef:ea:90:ca:7e: bb:95:b8:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOyAKGp3whionQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGRiMTc1ZGEtOTNkMC00NzI3LWFiMmUtOTA0OGJhZWM4NTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pcmeedfHRDu81EarRXu8eifMpQMT1hWXZ0 EnIj256v4Dh0ZGE9dk672WxaVS6R/oxlju+h0srlRp2wJjs/g/znRwo2IvLSfkxw DneRzZEQoAfpp5SQ0LQnxDfEhSkMvTtpyboeD2+R1mLqMZC3bwMzOy44RhwQifY8 qyAikEcUFIZQJrd+LK4oK9tblqsda9FHXFttYG9DbI+wyrf64K+GGE1iYwFLnI+z SZJsc89OrhLM+HLE07mYW4oORZ7KE5f08nmkodCtQnk3+Wd4hv6nsTI+4lkKakC1 /cL8MmsRbF2mnGZjMKHInzfEFkuw2OTtjYtgVqInJndAqTS3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAallvD6LeIpDNwD8QQ8N7XNYfqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTkwZGU3YzUtZWJmNi0z ODZkLWE4MzUtOWZkMjI5NzM4ODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh3aJDNfgvQe2zAGBJAyGEaLXIrprtSOBv9ijli5Re0frEbkgVvwpBy LWcE6XoCAe0XsK7BJlNpWyBhJ2I10Ps8VNk1pqmYPFVTOP2SK8DMulvjsTSwWKqn F98V3a8uamBdEiDlesoreG77wxkiSgmlfLvf3S+xc4ViKKvtHDLAo+jdqyfcGAkw GdZVsbyNAM9iRMNn1M9qq8LUjN7ajVbPaNAPB5NDvXLYPKF8N+L28WLaoIizCe57 FrPgOVNZCrMGxpUXdZ64QrtgKosGlGV8RAXNjwBAvnnVnpPitWzq8HwSsEE1Gw9l 205I9dLBO0Oizfixb5Dv6pDKfruVuBQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:07 2025 by rpki-client