$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa File: 26200898-e5dd-3b01-9c4d-596463f56496.roa (raw, json) Hash identifier: z2X4TOqhKelIuNjE58mJjIv0eyH6T3Y3EO4P1RaH2Uc= Subject key identifier: F6:B6:3D:52:50:7D:BB:02:70:47:61:84:AE:B0:B5:FF:F4:DB:8B:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F783999F2DC01F3E70F4D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 69.66.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:83:99:9f:2d:c0:1f:3e:70:f4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d8da6872-cc5a-4f6f-8587-62ecb99ae240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:47:50:d8:09:93:2b:8d:95:90:79:29:3d: e6:13:7f:1f:6d:8a:1c:f7:36:36:f0:a5:f2:52:51: 1c:62:b6:14:74:9f:f2:3b:18:fd:58:cc:4f:f4:71: 1f:e9:7b:bd:3d:a8:d3:97:8a:24:7e:02:5d:ea:c7: 96:7f:09:66:e0:fe:09:2c:08:a6:da:34:d0:3b:96: 2b:7d:87:c0:83:37:a0:4b:87:aa:86:31:5b:1a:51: e6:ad:90:49:42:b9:2f:60:56:1a:3e:b9:e3:41:f2: 11:0e:19:01:37:ce:73:5d:52:c9:17:43:ec:47:ba: 98:41:bb:f3:ea:17:62:4c:9b:99:d5:56:81:24:14: 6e:86:34:dd:6c:c6:87:97:ea:52:8a:ca:42:45:86: 32:7c:9a:12:e4:9c:77:b0:69:ae:ac:3e:23:b7:d8: 13:77:28:03:26:ef:fd:74:5c:b1:cf:d1:9f:f4:55: 95:f5:6e:1c:bc:9b:9b:a3:59:3c:ab:10:9f:01:2a: ea:63:16:10:ea:94:9b:c2:6e:5b:4e:f0:6b:ea:5e: cb:a0:5e:0e:f2:d4:e0:95:95:af:be:e3:f4:14:ca: bc:ba:ae:eb:a3:ef:40:6c:19:f3:f2:df:c1:f1:f7: 13:81:c2:22:41:d9:5c:80:2d:83:72:92:64:38:32: 2f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B6:3D:52:50:7D:BB:02:70:47:61:84:AE:B0:B5:FF:F4:DB:8B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26200898-e5dd-3b01-9c4d-596463f56496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:84:7c:6d:a0:f4:69:d8:92:e5:2f:cb:b7:3f:a9:ce:b3:dd: 80:22:1c:06:3f:94:b5:9f:64:81:50:4c:17:23:00:be:3a:88: e5:7a:8a:0d:23:4f:fb:a7:6c:cb:6e:00:2c:69:4b:1d:aa:9c: 3e:09:0d:d3:10:7b:1d:d6:d6:18:f2:46:c7:aa:5b:6e:72:5f: b7:11:c4:3a:8b:cc:95:d7:fe:ae:3a:71:6f:4e:5a:a4:1c:99: bc:60:75:ea:88:70:93:40:2e:74:a5:60:6d:21:4c:4b:a4:e2: 60:3d:a8:6d:a2:06:fd:b4:b3:b7:f4:30:54:95:15:05:58:64: fe:8b:08:50:e2:d9:93:e2:15:5e:77:7a:47:27:6c:c5:34:b2: a6:b1:83:a9:a1:7d:bc:72:89:c8:52:60:d0:88:1a:8b:3c:f8: 60:67:62:69:cc:9b:00:75:ca:7f:f2:10:3b:c1:d0:35:79:93: e7:5e:98:eb:f9:22:f2:91:83:05:2a:7c:88:99:e7:e4:b1:36: 13:e2:18:54:df:a0:2f:2a:97:0c:10:3e:0c:d2:6a:87:7b:e5: 22:db:e0:d3:02:55:89:3f:1e:e5:b5:de:a8:86:c6:bf:bc:db: 84:fc:9a:2b:1b:91:67:5a:b4:4d:dd:f2:f0:17:89:3c:c1:51: c7:f4:48:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094OZny3AHz5w9NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDhkYTY4NzItY2M1YS00ZjZmLTg1ODctNjJlY2I5OWFlMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvclHUNgJkyuNlZB5KT3mE38fbYoc9zY28KXy UlEcYrYUdJ/yOxj9WMxP9HEf6Xu9PajTl4okfgJd6seWfwlm4P4JLAim2jTQO5Yr fYfAgzegS4eqhjFbGlHmrZBJQrkvYFYaPrnjQfIRDhkBN85zXVLJF0PsR7qYQbvz 6hdiTJuZ1VaBJBRuhjTdbMaHl+pSispCRYYyfJoS5Jx3sGmurD4jt9gTdygDJu/9 dFyxz9Gf9FWV9W4cvJubo1k8qxCfASrqYxYQ6pSbwm5bTvBr6l7LoF4O8tTglZWv vuP0FMq8uq7ro+9AbBnz8t/B8fcTgcIiQdlcgC2DcpJkODIv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa2PVJQfbsCcEdhhK6wtf/024uUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjYyMDA4OTgtZTVkZC0z YjAxLTljNGQtNTk2NDYzZjU2NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2EfG2g9GnYkuUvy7c/qc6z3YAiHAY/lLWfZIFQTBcjAL46iOV6ig0j T/unbMtuACxpSx2qnD4JDdMQex3W1hjyRseqW25yX7cRxDqLzJXX/q46cW9OWqQc mbxgdeqIcJNALnSlYG0hTEuk4mA9qG2iBv20s7f0MFSVFQVYZP6LCFDi2ZPiFV53 ekcnbMU0sqaxg6mhfbxyichSYNCIGos8+GBnYmnMmwB1yn/yEDvB0DV5k+demOv5 IvKRgwUqfIiZ5+SxNhPiGFTfoC8qlwwQPgzSaod75SLb4NMCVYk/HuW13qiGxr+8 24T8misbkWdatE3d8vAXiTzBUcf0SP0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:27:23 2025 by rpki-client