$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa File: 304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa (raw, json) Hash identifier: 3SpkJaYLetLXCOiTs/R0HwigZimYjtPVRoCwKdKrSas= Subject key identifier: BC:39:36:86:FE:34:8F:F5:90:F7:6E:BB:62:42:84:71:38:99:67:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F78C9BB989F2267B6A3000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 69.66.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:8c:9b:b9:89:f2:26:7b:6a:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6d5f37b4-4fb2-4b53-bfd8-9165b6b6e0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:d4:78:c3:e3:d2:bd:8a:36:02:f1:90:39: 17:79:20:15:f3:07:0d:0a:57:5b:80:a7:e1:ba:b6: a6:b7:f4:7e:51:98:f5:f7:c4:f6:f0:77:19:19:d0: 98:38:0d:03:a1:05:ec:89:97:28:39:29:93:b4:bc: 59:54:91:98:f9:32:30:90:1c:88:d5:9c:0b:ad:fc: 5c:9e:39:5c:a9:31:df:10:2a:8b:81:0f:1c:68:75: da:d7:62:9a:5a:84:28:83:84:a8:75:8c:fe:f7:2a: 6d:d3:e7:0b:e7:01:c8:e6:8c:0e:7d:59:9f:8d:a2: d1:98:fb:51:c2:58:bb:3d:01:81:9f:a8:0f:bf:ec: af:4e:d6:39:9f:8f:a8:c8:39:01:16:73:e2:d7:b5: 31:f1:1a:66:10:e5:09:4b:fc:f9:94:d8:76:8a:2d: 93:8f:f7:10:a5:6f:0f:24:d1:88:1e:3c:78:e1:53: b3:68:83:b6:ea:07:58:57:68:c2:d4:6d:69:91:38: 96:fd:2a:b0:bb:fa:ba:9f:bf:31:1e:93:5f:97:67: 48:96:3e:6b:24:52:71:1c:b2:0c:de:34:f9:00:19: 76:91:ca:28:ce:42:0e:4d:4c:73:d7:08:39:aa:cd: 49:88:af:05:24:f4:bc:d7:0a:91:9a:f7:66:17:bb: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:39:36:86:FE:34:8F:F5:90:F7:6E:BB:62:42:84:71:38:99:67:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/304cd21a-1b5e-3dbf-b5a5-e1f18578bc5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5f:82:ba:08:6c:e7:42:93:d5:10:f7:0e:03:19:e5:20:da: a2:c9:54:d0:d7:62:71:da:34:5e:1c:89:35:e3:56:f2:76:bb: 1f:5f:26:1f:0d:ae:ac:02:3d:39:b3:b2:a9:86:c9:95:ca:e3: da:fc:ea:5c:45:1d:7f:d2:6c:a3:c7:e5:f4:ac:73:11:6a:72: b4:af:2c:47:a6:f7:f5:bd:7b:27:51:d6:cd:98:d5:69:1c:d6: 96:50:d1:c7:db:af:df:3b:f6:48:2a:8c:21:27:f1:2a:61:83: 00:b2:d4:4d:66:1d:ec:30:a0:19:62:07:6c:fd:e6:06:01:61: 11:15:fb:13:f1:42:9c:78:aa:d7:fb:35:7c:f0:a6:ad:7f:aa: 90:78:a5:d2:2e:db:10:5b:3d:68:7e:f6:06:14:96:cf:ed:bb: 8e:f7:b1:18:1b:60:57:9c:20:34:6b:7f:8d:51:94:d8:ad:97: 81:bf:6e:b8:71:a2:8c:17:fc:09:d3:65:5c:3d:e1:7d:5f:00: c8:f6:6b:4f:13:89:35:d2:cf:ae:8d:e2:8d:98:4a:f2:87:53: f3:f2:3c:67:62:99:05:56:ed:88:a8:08:33:b0:a1:ce:6d:52: 1f:5d:65:b7:dc:e9:b0:91:bc:ba:43:8d:d7:a0:30:32:f1:7e: a2:27:02:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj094ybuYnyJntqMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NmQ1ZjM3YjQtNGZiMi00YjUzLWJmZDgtOTE2NWI2YjZlMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskbUeMPj0r2KNgLxkDkXeSAV8wcNCldbgKfh uramt/R+UZj198T28HcZGdCYOA0DoQXsiZcoOSmTtLxZVJGY+TIwkByI1ZwLrfxc njlcqTHfECqLgQ8caHXa12KaWoQog4SodYz+9ypt0+cL5wHI5owOfVmfjaLRmPtR wli7PQGBn6gPv+yvTtY5n4+oyDkBFnPi17Ux8RpmEOUJS/z5lNh2ii2Tj/cQpW8P JNGIHjx44VOzaIO26gdYV2jC1G1pkTiW/Sqwu/q6n78xHpNfl2dIlj5rJFJxHLIM 3jT5ABl2kcoozkIOTUxz1wg5qs1JiK8FJPS81wqRmvdmF7vcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw5Nob+NI/1kPduu2JChHE4mWebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzA0Y2QyMWEtMWI1ZS0z ZGJmLWI1YTUtZTFmMTg1NzhiYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxfgroIbOdCk9UQ9w4DGeUg2qLJVNDXYnHaNF4ciTXjVvJ2ux9fJh8N rqwCPTmzsqmGyZXK49r86lxFHX/SbKPH5fSscxFqcrSvLEem9/W9eydR1s2Y1Wkc 1pZQ0cfbr9879kgqjCEn8SphgwCy1E1mHewwoBliB2z95gYBYREV+xPxQpx4qtf7 NXzwpq1/qpB4pdIu2xBbPWh+9gYUls/tu473sRgbYFecIDRrf41RlNitl4G/brhx oowX/AnTZVw94X1fAMj2a08TiTXSz66N4o2YSvKHU/PyPGdimQVW7YioCDOwoc5t Uh9dZbfc6bCRvLpDjdegMDLxfqInApE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:37:59 2025 by rpki-client