$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa File: 3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa (raw, json) Hash identifier: cwieA2etkRVyb/DNCXdUfFe7Ans7GvlvIpwOYoRJ/CU= Subject key identifier: 96:17:25:1D:99:69:5F:68:05:4A:FD:C4:0D:58:3C:D7:7D:93:86:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21130883D3D2C01143D2880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 40399 IP address blocks: 66.251.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:30:88:3d:3d:2c:01:14:3d:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8d3b6d67-10de-4b34-b719-9bce78c90b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:98:94:8b:1b:41:fe:83:ac:3f:8b:e4:d6: 53:91:d8:4f:a7:4a:43:52:88:a1:ab:ee:6d:05:f1: c0:1c:99:6a:c7:69:cd:08:d4:1c:af:0c:76:d5:64: d8:e5:93:6e:ef:6f:f5:95:23:e6:fa:0d:c0:50:e7: 40:81:63:da:48:6e:7b:d4:fb:2f:89:55:04:06:77: ea:e6:67:dd:7d:3b:37:cd:a0:39:95:7b:42:99:a7: ff:15:98:66:7a:bd:cb:b6:00:37:a9:05:96:df:63: e3:02:7b:1b:ba:ed:13:41:dd:49:7e:c2:21:0e:80: 95:61:72:cd:ad:fa:98:f3:c9:e8:22:11:7a:e2:b6: e6:d5:a6:f3:71:f2:d3:42:30:e4:2c:c3:62:be:e3: 54:81:36:65:16:f8:5c:d2:b4:29:15:4f:8c:86:10: 80:93:ba:03:0f:15:44:a5:d4:bb:3c:88:ec:fb:54: f7:25:11:c2:eb:cb:b2:7c:61:cb:87:a4:6c:59:61: 96:1a:e9:2b:68:f8:67:1a:8b:a1:9f:ab:cc:bb:7b: 58:b7:f0:88:93:b3:2b:55:a4:cf:9a:e7:02:b7:35: 46:e1:66:97:44:d8:1e:dd:6e:71:ea:80:95:75:11: 67:5e:e4:0c:10:01:50:45:4b:c8:5e:8a:3b:32:5d: 2a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:17:25:1D:99:69:5F:68:05:4A:FD:C4:0D:58:3C:D7:7D:93:86:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.251.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:a7:a8:27:5b:ba:c6:49:da:85:35:a9:02:da:3e:7f:1e:28: 57:74:50:cf:4b:f2:1d:8a:c8:96:55:30:d5:b2:e1:c0:b0:39: 7c:f6:0a:8d:63:a5:62:b7:63:a3:ba:30:df:58:ca:83:b7:17: 5f:00:46:dd:95:52:cb:37:eb:52:9f:11:69:ff:79:f7:5e:65: 0a:17:bc:05:c1:39:fb:6e:d0:88:90:74:fa:33:c2:28:8f:f5: 89:3d:39:ce:d6:aa:24:ad:fd:95:e0:1b:44:ff:da:ac:a9:13: e1:42:fd:9b:bf:d2:b3:db:8d:bc:a3:74:54:ba:b3:29:f6:8e: f0:66:1f:eb:56:57:e4:0d:96:69:8c:5c:84:ed:18:1c:7c:59: 9b:1a:1e:3b:32:19:c2:93:e7:03:a4:4e:46:dd:0c:39:95:29: fe:79:da:22:7e:af:22:07:8e:3c:07:57:b4:3d:f4:c7:c1:e9: b9:ec:69:8b:d5:0c:60:74:7f:c7:2d:f7:ad:c1:19:0c:e9:3c: 15:75:0a:7f:0e:4c:85:f0:ce:b7:77:51:7d:bb:3a:44:d0:f8: 1b:92:1b:e5:15:f5:90:03:fa:3e:35:fb:79:56:fe:16:c7:65: 38:ff:f4:e5:25:5d:dd:d6:1f:54:1c:10:d4:75:de:0b:5f:d3: 3c:bf:16:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETCIPT0sARQ9KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OGQzYjZkNjctMTBkZS00YjM0LWI3MTktOWJjZTc4YzkwYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxiYlIsbQf6DrD+L5NZTkdhPp0pDUoihq+5t BfHAHJlqx2nNCNQcrwx21WTY5ZNu72/1lSPm+g3AUOdAgWPaSG571PsviVUEBnfq 5mfdfTs3zaA5lXtCmaf/FZhmer3LtgA3qQWW32PjAnsbuu0TQd1JfsIhDoCVYXLN rfqY88noIhF64rbm1abzcfLTQjDkLMNivuNUgTZlFvhc0rQpFU+MhhCAk7oDDxVE pdS7PIjs+1T3JRHC68uyfGHLh6RsWWGWGukraPhnGouhn6vMu3tYt/CIk7MrVaTP mucCtzVG4WaXRNge3W5x6oCVdRFnXuQMEAFQRUvIXoo7Ml0qYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYXJR2ZaV9oBUr9xA1YPNd9k4ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2QwMDBiZWYtYjlkOC0z M2NmLWEwN2MtMGJmODUxOTc3MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2nqCdbusZJ2oU1qQLaPn8eKFd0UM9L8h2KyJZVMNWy4cCwOXz2Co1j pWK3Y6O6MN9YyoO3F18ARt2VUss361KfEWn/efdeZQoXvAXBOftu0IiQdPozwiiP 9Yk9Oc7WqiSt/ZXgG0T/2qypE+FC/Zu/0rPbjbyjdFS6syn2jvBmH+tWV+QNlmmM XITtGBx8WZsaHjsyGcKT5wOkTkbdDDmVKf552iJ+ryIHjjwHV7Q99MfB6bnsaYvV DGB0f8ct963BGQzpPBV1Cn8OTIXwzrd3UX27OkTQ+BuSG+UV9ZAD+j41+3lW/hbH ZTj/9OUlXd3WH1QcENR13gtf0zy/FvI= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:12 2025 by rpki-client