$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ba62c98-8e72-337f-8ee0-9b98adba4bdf.roa File: 2ba62c98-8e72-337f-8ee0-9b98adba4bdf.roa (raw, json) Hash identifier: o4XLwKI7PsSP/UvLF9nI+5NIFqe7TDcUkyJcHMfhvF0= Subject key identifier: 39:41:37:83:4E:CC:81:B5:4A:BA:A4:64:FB:74:54:35:A2:73:16:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB93CD146A80AA83D9EB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ba62c98-8e72-337f-8ee0-9b98adba4bdf.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:3c:d1:46:a8:0a:a8:3d:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=8d01242d-f1ac-4040-b773-0fef61c3be6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c2:db:68:45:b3:e3:88:f9:a5:13:ae:10:25: 74:16:4a:0a:97:68:68:a2:cc:84:96:19:4a:75:1e: ab:bd:0f:af:f9:91:75:72:f4:b3:e2:d6:c2:0b:42: e8:04:d9:2c:33:91:39:1c:00:fc:0f:10:ac:79:00: ec:72:4c:45:92:f7:6a:28:9d:8d:f2:7f:10:f8:79: ad:10:f7:f8:6f:0b:35:48:bd:3f:29:2c:51:3d:0d: 90:1a:f6:af:21:fc:14:a2:76:85:cb:7e:99:3b:eb: bc:cd:1c:74:39:01:a2:09:c9:ec:a3:ad:1d:6d:6e: 2a:5c:6f:32:b8:59:71:15:6a:62:8f:d7:8f:6c:3b: 78:1e:21:96:49:b3:06:99:31:14:8a:99:39:56:13: dd:02:a5:2b:4b:5b:24:3e:ab:8b:d0:5b:dd:b0:fa: 3c:81:11:51:5c:df:21:6a:cd:fb:63:1b:47:46:60: f3:eb:77:cd:8a:91:dd:6a:12:72:08:40:77:03:8b: 81:11:fd:49:08:98:29:c3:d7:e1:e3:a7:13:8d:20: 2f:ca:20:21:2b:bd:03:e1:3d:a2:96:bf:19:a9:95: 3d:13:46:b7:f8:66:45:be:fd:25:8e:3e:88:09:e4: ae:30:5c:d7:79:f4:b9:16:53:4a:4f:f8:10:4e:c1: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:37:83:4E:CC:81:B5:4A:BA:A4:64:FB:74:54:35:A2:73:16:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ba62c98-8e72-337f-8ee0-9b98adba4bdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:75:e9:d7:37:d4:cb:98:0b:ba:8a:0b:af:00:c7:94:55:f8: dd:e1:bc:f2:a8:6c:20:17:8b:86:45:8e:ed:2d:0a:40:41:1c: e4:be:4c:02:94:2c:3d:0d:98:8e:82:71:e0:7e:a5:3d:94:28: f3:bf:b1:df:bc:74:92:21:f0:7c:01:1b:7d:e3:51:49:52:af: f6:f2:54:ad:f0:f5:49:15:50:a0:5d:94:b8:a3:e2:96:17:8c: 44:15:ab:91:58:89:f0:90:57:55:0c:9c:9f:85:35:a4:af:e3: 1d:83:56:65:dd:f4:df:ae:e1:a1:c9:24:f7:f0:66:00:c8:17: fe:08:05:dd:eb:ac:51:2e:7c:57:28:fb:91:7b:d3:13:00:96: 49:3c:b0:05:0a:c3:0b:dd:47:ca:27:db:41:16:fd:2c:dc:2b: f8:26:5a:45:21:89:36:7b:93:f0:ef:d2:2e:5f:a3:43:e0:fb: c4:3b:a1:1c:a8:b2:5f:b3:cd:e6:ab:20:f8:9a:15:2e:35:17: 70:b4:46:7a:81:6e:7a:21:be:ad:da:be:74:54:90:f3:52:f4: f9:c7:b9:5b:0d:df:77:ba:3f:20:92:d3:12:67:5a:79:0d:8c: 31:31:cb:33:4f:fc:5d:08:09:71:b1:3e:ee:51:2f:97:2b:6c: 2f:cc:a2:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7k80UaoCqg9nrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk OGQwMTI0MmQtZjFhYy00MDQwLWI3NzMtMGZlZjYxYzNiZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8LbaEWz44j5pROuECV0FkoKl2hoosyElhlK dR6rvQ+v+ZF1cvSz4tbCC0LoBNksM5E5HAD8DxCseQDsckxFkvdqKJ2N8n8Q+Hmt EPf4bws1SL0/KSxRPQ2QGvavIfwUonaFy36ZO+u8zRx0OQGiCcnso60dbW4qXG8y uFlxFWpij9ePbDt4HiGWSbMGmTEUipk5VhPdAqUrS1skPquL0FvdsPo8gRFRXN8h as37YxtHRmDz63fNipHdahJyCEB3A4uBEf1JCJgpw9fh46cTjSAvyiAhK70D4T2i lr8ZqZU9E0a3+GZFvv0ljj6ICeSuMFzXefS5FlNKT/gQTsEl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlBN4NOzIG1SrqkZPt0VDWicxZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJhNjJjOTgtOGU3Mi0z MzdmLThlZTAtOWI5OGFkYmE0YmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR16dc31MuYC7qKC68Ax5RV+N3hvPKobCAXi4ZFju0tCkBBHOS+TAKU LD0NmI6CceB+pT2UKPO/sd+8dJIh8HwBG33jUUlSr/byVK3w9UkVUKBdlLij4pYX jEQVq5FYifCQV1UMnJ+FNaSv4x2DVmXd9N+u4aHJJPfwZgDIF/4IBd3rrFEufFco +5F70xMAlkk8sAUKwwvdR8on20EW/SzcK/gmWkUhiTZ7k/Dv0i5fo0Pg+8Q7oRyo sl+zzearIPiaFS41F3C0RnqBbnohvq3avnRUkPNS9PnHuVsN33e6PyCS0xJnWnkN jDExyzNP/F0ICXGxPu5RL5crbC/Mop0= -----END CERTIFICATE-----Generated at Sun Apr 6 00:58:54 2025 by rpki-client