$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa File: 52df3669-1cbf-34e9-bcc5-f42dc059a383.roa (raw, json) Hash identifier: 89rWnu2DiRA0NLQweTVhJkVFRhwLu2yEkAeT6WQCL6U= Subject key identifier: B0:D0:A5:9D:20:82:90:12:DD:D1:FA:CD:59:16:ED:2A:79:4A:B2:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EC1ACC234148923D9200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.153.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ec:1a:cc:23:41:48:92:3d:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=69a00215-9c3c-4d4e-a23d-938c9eb616d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:da:f8:16:b4:eb:14:72:89:97:24:b3:43: 1b:d9:fd:53:d4:e1:fc:52:60:cf:c1:b0:66:01:0c: d8:af:fb:13:ec:66:49:2d:0e:ba:ab:11:1b:f2:7c: 38:ab:61:c1:e3:3e:84:52:3d:e7:dd:44:33:10:4e: 72:09:88:4a:ad:f5:f1:e9:60:33:9b:78:9f:e1:23: ee:98:58:59:1e:e7:23:73:46:3b:78:cd:a3:9a:75: ee:5a:7b:75:cc:24:96:5a:d7:c3:36:f4:a5:d0:03: 88:3c:8c:cb:0d:ad:23:6b:e8:26:11:86:26:85:11: 46:a4:c7:3a:11:bf:30:79:8e:30:58:fe:22:d0:b6: 94:f6:fd:c2:84:97:0d:87:9b:29:07:07:83:bb:48: 67:b9:c3:1f:14:68:e2:18:d9:81:21:c0:a2:db:78: 32:f7:ce:df:d6:80:01:e1:09:22:5f:98:05:e1:bd: 9c:33:21:68:4c:e7:b4:c1:21:75:0d:fa:ac:dd:f8: d0:73:c7:c3:e2:be:2c:5e:b8:61:1a:6f:52:cc:8e: 29:02:29:6e:7e:f3:95:cc:12:59:fb:e1:c0:3b:f4: fb:5f:51:ec:f9:3f:2d:66:71:2f:df:64:92:02:61: dc:91:3e:d6:f7:eb:94:64:07:40:18:c6:9d:2f:83: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:A5:9D:20:82:90:12:DD:D1:FA:CD:59:16:ED:2A:79:4A:B2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/52df3669-1cbf-34e9-bcc5-f42dc059a383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.153.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:94:82:05:8e:90:a9:30:1f:db:f8:bb:09:16:d7:0a:aa:4f: 49:8f:2a:da:cd:11:d8:09:95:2a:69:e3:70:2f:ff:23:ba:3a: 97:63:0e:e5:19:93:c5:c6:16:da:33:fb:c8:6d:6f:7d:35:df: f2:c8:75:bc:84:7e:4d:09:d6:9e:39:0e:8d:12:0f:e3:0b:96: bf:d1:fa:2c:64:fc:44:bc:2f:55:a3:31:47:99:16:91:98:9d: 28:f4:c1:d9:d8:76:a6:9b:d8:be:4c:aa:fc:18:73:da:1c:8b: 17:60:54:c2:3c:02:73:c6:e3:d5:a8:5a:ef:06:ce:d3:4d:6a: 1a:c8:f1:6d:38:75:2a:76:b6:14:d7:4f:fb:77:29:90:00:75: f8:e1:c2:77:39:a4:42:36:b0:41:28:3f:d1:de:5b:a6:6a:e6: f8:57:2d:22:8a:11:84:73:0c:1a:4a:2d:76:05:0e:03:86:0a: 24:5c:1f:1b:39:ae:18:e4:18:e1:d2:59:e7:8f:1a:87:07:08: 3f:00:49:13:d8:8e:8e:74:a7:e9:c5:d1:62:6d:67:28:66:eb: e4:ff:47:bb:29:3a:26:e3:16:20:d5:fe:47:fe:40:f5:25:a0: 62:a1:5e:af:3e:55:cc:65:ac:29:e7:1e:76:e6:76:9d:82:e8: 07:8e:4a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOwazCNBSJI9kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjlhMDAyMTUtOWMzYy00ZDRlLWEyM2QtOTM4YzllYjYxNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjDa+Ba06xRyiZcks0Mb2f1T1OH8UmDPwbBm AQzYr/sT7GZJLQ66qxEb8nw4q2HB4z6EUj3n3UQzEE5yCYhKrfXx6WAzm3if4SPu mFhZHucjc0Y7eM2jmnXuWnt1zCSWWtfDNvSl0AOIPIzLDa0ja+gmEYYmhRFGpMc6 Eb8weY4wWP4i0LaU9v3ChJcNh5spBweDu0hnucMfFGjiGNmBIcCi23gy987f1oAB 4QkiX5gF4b2cMyFoTOe0wSF1Dfqs3fjQc8fD4r4sXrhhGm9SzI4pAilufvOVzBJZ ++HAO/T7X1Hs+T8tZnEv32SSAmHckT7W9+uUZAdAGMadL4OiUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDQpZ0ggpAS3dH6zVkW7Sp5SrLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTJkZjM2NjktMWNiZi0z NGU5LWJjYzUtZjQyZGMwNTlhMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6UggWOkKkwH9v4uwkW1wqqT0mPKtrNEdgJlSpp43Av/yO6OpdjDuUZ k8XGFtoz+8htb3013/LIdbyEfk0J1p45Do0SD+MLlr/R+ixk/ES8L1WjMUeZFpGY nSj0wdnYdqab2L5MqvwYc9ocixdgVMI8AnPG49WoWu8GztNNahrI8W04dSp2thTX T/t3KZAAdfjhwnc5pEI2sEEoP9HeW6Zq5vhXLSKKEYRzDBpKLXYFDgOGCiRcHxs5 rhjkGOHSWeePGocHCD8ASRPYjo50p+nF0WJtZyhm6+T/R7spOibjFiDV/kf+QPUl oGKhXq8+VcxlrCnnHnbmdp2C6AeOSvM= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:30 2025 by rpki-client