$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa File: 56436058-a377-3960-bd3d-4f3831bf1cf1.roa (raw, json) Hash identifier: sWQvRSq2cpxbv3xThEruCFWzBOjjp+9OsFFI66l044s= Subject key identifier: FF:DF:8D:D7:2D:6A:39:8A:75:E0:D2:05:22:02:0E:1F:FE:B1:75:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21131C2ABBCE3C59AF7E880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 63307 IP address blocks: 66.152.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:31:c2:ab:bc:e3:c5:9a:f7:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c7cf9536-ea03-4d3a-be12-373810b25e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:09:d5:db:9f:6f:3a:df:e8:5a:ba:68:93: 0e:d8:ef:e2:ee:73:65:dd:61:20:57:65:8a:9e:e4: a0:bd:94:65:51:d2:8b:1f:ac:1a:9f:25:1f:18:7d: 5a:18:66:30:c2:52:48:90:25:63:1e:f8:eb:9e:8f: 63:b0:e1:bf:e3:30:52:54:4f:0d:7c:88:3f:25:e9: 4b:c9:44:78:82:20:d9:e4:72:0b:e9:3d:e6:0b:b9: 20:d8:19:29:c6:41:cb:f8:e7:a8:a8:d4:81:bc:98: 09:70:a4:ed:c4:89:2a:2f:9f:a9:4c:d9:82:02:c0: 79:43:ee:c4:a3:ab:e8:ca:01:bb:0b:5a:42:86:2f: 6a:1c:37:e2:f6:37:78:8f:45:b7:e9:d8:c0:a0:ec: 5a:93:6f:eb:7c:72:ce:70:04:a7:1c:42:18:de:8a: 6e:d6:9f:a1:ad:1f:3c:51:98:a3:a1:62:75:7a:d9: b4:c3:de:d3:7a:2d:19:07:dc:60:3a:e7:b8:5b:eb: 17:d0:24:7c:07:29:46:b4:ad:17:18:cf:a9:56:d9: 6f:07:fe:ef:31:f4:8a:d9:e6:78:b5:24:94:d1:e1: 35:52:9d:13:1a:d6:b6:b7:be:6d:0c:69:36:7d:61: 4d:b0:14:89:27:b6:1c:7c:7e:7c:3d:a3:da:d1:6f: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DF:8D:D7:2D:6A:39:8A:75:E0:D2:05:22:02:0E:1F:FE:B1:75:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56436058-a377-3960-bd3d-4f3831bf1cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.152.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:2c:0a:ab:14:d6:7a:69:fc:d9:e5:8f:e2:86:ec:7c:98:53: ab:d2:4d:06:05:95:3e:3c:33:4c:13:94:cb:4f:62:02:d8:76: e7:de:e3:52:19:e3:ab:1a:1c:33:55:09:f2:7d:0c:cc:c8:05: a3:71:64:97:61:37:ad:63:4d:6d:ac:25:9b:54:ca:eb:5e:c7: 27:09:ec:f8:73:4b:5f:be:9a:1e:d5:07:b0:2d:a1:8a:e3:12: fe:57:c0:74:9a:3f:38:93:18:50:e2:cf:de:e1:6e:c5:03:79: fe:f2:28:34:42:68:0b:75:07:f3:30:c7:e6:de:0c:01:d6:a2: 6c:17:f7:56:09:49:f8:bb:2f:13:f4:b1:24:18:3f:d5:b1:98: 22:9c:ef:cc:af:e1:a2:8b:4d:c5:67:3a:1f:ab:6b:c3:d2:d0: 5d:2e:fc:4c:6a:32:40:dc:b1:a0:45:fe:8c:cf:b0:4f:73:85: f2:02:9e:d4:f5:43:8a:95:9f:9b:d1:b0:fd:03:94:e0:4d:ac: 1a:48:5c:1a:10:37:29:9f:ea:05:b3:de:6d:fb:eb:85:47:16: ca:48:f4:48:e2:f8:2e:61:3b:34:3d:25:8f:af:29:8e:f7:07: c2:55:6a:17:24:1c:31:80:af:5b:eb:1f:32:0e:f7:16:d9:36: 0c:6f:4e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETHCq7zjxZr36IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzdjZjk1MzYtZWEwMy00ZDNhLWJlMTItMzczODEwYjI1ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcsJ1dufbzrf6Fq6aJMO2O/i7nNl3WEgV2WK nuSgvZRlUdKLH6wanyUfGH1aGGYwwlJIkCVjHvjrno9jsOG/4zBSVE8NfIg/JelL yUR4giDZ5HIL6T3mC7kg2BkpxkHL+OeoqNSBvJgJcKTtxIkqL5+pTNmCAsB5Q+7E o6voygG7C1pChi9qHDfi9jd4j0W36djAoOxak2/rfHLOcASnHEIY3opu1p+hrR88 UZijoWJ1etm0w97Tei0ZB9xgOue4W+sX0CR8BylGtK0XGM+pVtlvB/7vMfSK2eZ4 tSSU0eE1Up0TGta2t75tDGk2fWFNsBSJJ7YcfH58PaPa0W+VXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/fjdctajmKdeDSBSICDh/+sXXxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY0MzYwNTgtYTM3Ny0z OTYwLWJkM2QtNGYzODMxYmYxY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQpjLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEsCqsU1npp/Nnlj+KG7HyYU6vSTQYFlT48M0wTlMtPYgLYdufe41IZ 46saHDNVCfJ9DMzIBaNxZJdhN61jTW2sJZtUyutexycJ7PhzS1++mh7VB7AtoYrj Ev5XwHSaPziTGFDiz97hbsUDef7yKDRCaAt1B/Mwx+beDAHWomwX91YJSfi7LxP0 sSQYP9WxmCKc78yv4aKLTcVnOh+ra8PS0F0u/ExqMkDcsaBF/ozPsE9zhfICntT1 Q4qVn5vRsP0DlOBNrBpIXBoQNymf6gWz3m3764VHFspI9Eji+C5hOzQ9JY+vKY73 B8JVahckHDGAr1vrHzIO9xbZNgxvTng= -----END CERTIFICATE-----Generated at Mon Apr 7 12:14:04 2025 by rpki-client