$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/265bebe5-36c2-3d22-856f-6121efa12a51.roa File: 265bebe5-36c2-3d22-856f-6121efa12a51.roa (raw, json) Hash identifier: jgcfbl4lesi+ieHo8dSeLye5x+0c8TZ0wiO6weNYXyo= Subject key identifier: 36:E9:81:07:B1:E6:9A:F8:3A:37:EE:DE:AF:78:44:9C:D4:41:4B:12 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111B024D0CE8C2F2DCE660 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/265bebe5-36c2-3d22-856f-6121efa12a51.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1b:02:4d:0c:e8:c2:f2:dc:e6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0e829728-dae1-4809-a81b-aae69c9bd19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:08:f6:5a:66:96:3d:18:55:93:ea:d0:eb: 19:15:ba:52:81:e8:d0:2a:93:76:66:c1:9a:a0:9e: 6d:0f:85:58:3a:52:69:8e:55:36:e4:fc:53:be:ca: a1:70:21:44:de:01:99:60:bc:4a:cb:ec:57:49:d6: 0f:cb:06:3e:28:4e:d0:fd:93:82:db:22:41:d3:27: c6:bd:83:2f:1c:26:17:3d:41:83:dd:12:f2:7d:7b: fa:a1:4d:6c:7d:ae:66:f1:19:9d:23:fc:a0:9d:69: 6e:db:b4:3e:8a:be:69:4b:af:cd:2c:b5:18:2d:00: a1:fc:51:b7:36:47:10:50:99:55:76:e6:8e:cc:10: 89:88:47:25:04:d6:19:95:19:8b:2d:d8:a1:f9:5f: 2f:7b:d1:6a:8f:5d:78:ca:33:c5:c8:ab:5d:e0:9c: f3:bc:63:b5:c3:f3:92:d1:bf:b9:c8:b0:cf:99:1c: 22:99:a4:70:91:90:fc:86:04:4c:d9:23:92:1f:e9: f5:ad:92:40:03:83:95:9e:aa:41:11:43:8c:ea:43: 5b:c4:56:b7:d1:48:0b:05:0c:27:8f:5a:01:ea:a6: 9e:8d:20:68:28:31:f5:c7:7f:40:cd:d8:2b:e1:5b: 7f:b2:a0:77:23:1c:d6:0b:7b:a2:d4:cb:90:20:bf: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E9:81:07:B1:E6:9A:F8:3A:37:EE:DE:AF:78:44:9C:D4:41:4B:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/265bebe5-36c2-3d22-856f-6121efa12a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:20:98:3a:87:1a:4e:c3:b0:d6:c6:fe:e7:1d:43:46:fb:0d: e4:01:8b:30:17:31:ec:b8:4e:a0:48:6c:31:e0:4c:9e:b7:98: ea:15:89:6a:c8:0d:3b:47:88:1b:24:27:c6:44:bb:ce:49:ae: d7:da:1a:ce:91:1c:30:b1:ca:23:12:39:d6:b2:d3:a5:3d:3e: a1:62:1f:5f:fb:00:2e:e0:f8:42:fa:7e:94:21:8d:7f:df:90: fc:ef:b2:73:9a:52:d2:90:4c:99:34:80:da:08:3b:12:52:3e: 4c:26:2c:b6:65:e3:67:95:23:fb:61:99:c5:fb:30:22:ac:b0: 70:63:1d:70:d3:b7:74:fb:ee:91:a1:70:9c:26:d1:dd:ea:c0: 09:32:67:d3:0f:48:3d:1f:d4:a9:e9:3d:ec:39:d9:c3:31:15: 43:2d:ef:d4:14:12:6a:83:ae:1c:f1:0a:49:b3:ae:95:14:71: 8f:09:94:d8:c3:a4:e6:93:24:70:58:3f:15:c6:e8:a4:c9:8b: 18:71:69:88:85:fd:fc:6a:65:2e:57:b0:3f:1c:e2:33:4e:68: 76:fb:6e:8a:90:1f:81:85:4d:18:68:f9:cd:5c:47:53:95:b1: c5:bc:25:7a:da:2b:2e:5d:ae:45:b8:db:bd:5f:e7:29:bc:87: 0f:39:28:3a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERsCTQzowvLc5mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGU4Mjk3MjgtZGFlMS00ODA5LWE4MWItYWFlNjljOWJkMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgI9lpmlj0YVZPq0OsZFbpSgejQKpN2ZsGa oJ5tD4VYOlJpjlU25PxTvsqhcCFE3gGZYLxKy+xXSdYPywY+KE7Q/ZOC2yJB0yfG vYMvHCYXPUGD3RLyfXv6oU1sfa5m8RmdI/ygnWlu27Q+ir5pS6/NLLUYLQCh/FG3 NkcQUJlVduaOzBCJiEclBNYZlRmLLdih+V8ve9Fqj114yjPFyKtd4JzzvGO1w/OS 0b+5yLDPmRwimaRwkZD8hgRM2SOSH+n1rZJAA4OVnqpBEUOM6kNbxFa30UgLBQwn j1oB6qaejSBoKDH1x39Azdgr4Vt/sqB3IxzWC3ui1MuQIL/pJwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDbpgQex5pr4Ojfu3q94RJzUQUsSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjY1YmViZTUtMzZjMi0z ZDIyLTg1NmYtNjEyMWVmYTEyYTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXSCYOocaTsOw1sb+5x1DRvsN5AGLMBcx7LhOoEhsMeBMnreY6hWJasgN O0eIGyQnxkS7zkmu19oazpEcMLHKIxI51rLTpT0+oWIfX/sALuD4Qvp+lCGNf9+Q /O+yc5pS0pBMmTSA2gg7ElI+TCYstmXjZ5Uj+2GZxfswIqywcGMdcNO3dPvukaFw nCbR3erACTJn0w9IPR/Uqek97DnZwzEVQy3v1BQSaoOuHPEKSbOulRRxjwmU2MOk 5pMkcFg/FcbopMmLGHFpiIX9/GplLlewPxziM05odvtuipAfgYVNGGj5zVxHU5Wx xbwletorLl2uRbjbvV/nKbyHDzkoOg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:29 2025 by rpki-client