$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa File: 4c0a3825-9f11-31bb-9289-dde54bd64525.roa (raw, json) Hash identifier: jjyRGvWkB+OeOc6AbNoHxBaNs1cafKeBrIuWT/+Uv8U= Subject key identifier: AB:9D:2D:5D:6E:35:ED:B5:2E:C7:9D:7C:A2:95:F9:DE:4E:F3:16:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858486D905EB56F3C0A6161E62640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.19.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:5e:b5:6f:3c:0a:61:61:e6:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=9e877ec2-8dea-4013-8335-c7d72c1b88f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:28:14:f4:35:56:6f:9f:52:6f:3d:b2:5b: a8:1b:9b:3b:d7:e9:b9:a1:b2:a8:f0:12:4d:b7:f2: aa:b9:5a:a8:26:46:6f:98:4e:ff:13:ce:94:5f:84: fd:04:79:3b:4d:e4:d5:ab:60:82:d2:a3:94:97:d4: b0:c1:d1:d0:65:d0:41:11:c0:57:ac:10:96:16:0b: 9e:f4:94:7c:eb:8a:90:93:1d:40:ae:a4:ed:ec:3c: 7b:a1:17:b0:23:88:c5:65:42:4f:5d:a1:5e:3c:31: f8:49:2b:8a:ce:4f:55:6e:eb:84:69:26:ef:f9:10: 7f:e6:ce:25:4b:b8:03:ae:20:d2:bb:1d:05:d1:c3: 67:45:90:ee:b3:70:16:92:59:71:9f:c6:89:07:89: 99:63:5d:b9:ba:67:d7:41:ec:b7:cf:51:37:de:45: 1f:ec:1e:cd:c8:fc:8e:be:22:eb:23:b5:c1:73:33: ba:78:21:b0:92:61:9c:0e:c8:a3:fa:fa:de:15:02: 9d:3e:b4:5f:aa:c3:86:ed:66:5e:ed:a7:6f:fd:e2: f8:3c:b3:20:a0:9d:22:6f:1f:30:ff:41:15:08:54: 47:06:d7:a9:5e:b3:e9:25:8c:98:4e:b4:75:a2:45: cc:e5:42:a6:a8:6a:b2:54:b5:f3:5d:fb:cc:27:d5: e1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9D:2D:5D:6E:35:ED:B5:2E:C7:9D:7C:A2:95:F9:DE:4E:F3:16:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c0a3825-9f11-31bb-9289-dde54bd64525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:93:c3:25:6e:94:31:35:be:f3:91:d1:b3:ef:90:a2:c0:6f: b9:d9:93:9b:af:46:c7:24:6f:de:98:c7:86:67:ac:08:d7:92: 2e:f1:78:3b:69:d3:1b:af:4b:6d:5f:a1:3e:a1:45:a6:3d:de: 09:16:2f:a3:97:ad:4f:4c:ef:bc:95:13:32:b1:30:38:d7:f6: fb:68:35:50:a5:bf:df:9f:88:1d:f4:89:9a:80:37:72:ca:86: 25:d0:dc:bb:76:5c:96:cd:d4:8d:73:91:4e:55:3c:10:30:3f: c9:8f:a3:fe:e6:51:db:dd:60:a2:29:3f:61:12:43:f9:59:f9: c1:aa:ac:5f:a6:a5:58:4f:02:44:58:5c:1f:7d:72:aa:84:d2: f0:31:8b:aa:fc:f1:fd:d2:2d:ba:7f:07:e7:d4:eb:4e:25:b6: b0:29:b3:5b:88:74:a1:27:7e:8a:c2:1a:90:86:f3:46:b2:82: ba:ea:a3:3d:6e:e1:e4:d0:11:09:8a:bf:4d:c2:e3:7b:3b:a2: d2:26:7a:ff:1a:9c:0b:f9:e7:90:14:91:0d:51:d4:fe:cb:e6: 89:88:7d:6a:01:fe:6e:a2:cd:1b:2d:dc:33:33:e2:49:35:5c: 6f:5e:8c:e4:bc:82:b4:1b:f4:84:2f:3b:c8:9a:7c:3c:f0:72: f6:48:f4:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhtkF61bzwKYWHmJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWU4NzdlYzItOGRlYS00MDEzLTgzMzUtYzdkNzJjMWI4OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIoFPQ1Vm+fUm89sluoG5s71+m5obKo8BJN t/KquVqoJkZvmE7/E86UX4T9BHk7TeTVq2CC0qOUl9SwwdHQZdBBEcBXrBCWFgue 9JR864qQkx1ArqTt7Dx7oRewI4jFZUJPXaFePDH4SSuKzk9VbuuEaSbv+RB/5s4l S7gDriDSux0F0cNnRZDus3AWkllxn8aJB4mZY125umfXQey3z1E33kUf7B7NyPyO viLrI7XBczO6eCGwkmGcDsij+vreFQKdPrRfqsOG7WZe7adv/eL4PLMgoJ0ibx8w /0EVCFRHBtepXrPpJYyYTrR1okXM5UKmqGqyVLXzXfvMJ9XhiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKudLV1uNe21LsedfKKV+d5O8xYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMwYTM4MjUtOWYxMS0z MWJiLTkyODktZGRlNTRiZDY0NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQhPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWTwyVulDE1vvOR0bPvkKLAb7nZk5uvRsckb96Yx4ZnrAjXki7xeDtp 0xuvS21foT6hRaY93gkWL6OXrU9M77yVEzKxMDjX9vtoNVClv9+fiB30iZqAN3LK hiXQ3Lt2XJbN1I1zkU5VPBAwP8mPo/7mUdvdYKIpP2ESQ/lZ+cGqrF+mpVhPAkRY XB99cqqE0vAxi6r88f3SLbp/B+fU604ltrAps1uIdKEnforCGpCG80aygrrqoz1u 4eTQEQmKv03C43s7otImev8anAv555AUkQ1R1P7L5omIfWoB/m6izRst3DMz4kk1 XG9ejOS8grQb9IQvO8iafDzwcvZI9L0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:22 2025 by rpki-client