$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa File: 5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa (raw, json) Hash identifier: cKqT+vOUQRxBdzOoUzyWRFmSm0UIvEOIiCtdAoXB980= Subject key identifier: 52:62:D0:06:D3:5B:82:46:52:E1:F8:25:B8:62:B3:F2:72:11:69:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112058F8776B1D1610EF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 97.66.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:20:58:f8:77:6b:1d:16:10:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=08edc6d5-5d78-448c-95d0-a958f92faf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9a:f5:14:13:38:10:74:9d:9e:ec:fb:92:0e: aa:18:6e:b0:1c:69:74:14:68:17:84:bc:cf:8d:ab: 74:16:5f:06:4f:f6:38:31:fb:6f:f9:47:14:38:42: 5c:58:a5:2e:fa:a2:17:ec:7a:fd:ca:e6:23:28:be: 5f:50:af:5a:0f:28:b5:16:a9:82:89:91:c4:81:6c: 37:d2:e9:7b:1e:bc:92:23:74:e0:40:58:b5:ae:b4: 9e:aa:70:e9:62:32:ce:38:71:ee:38:43:d9:97:d7: 12:28:89:65:6a:d5:19:84:81:ee:90:ed:fc:85:c4: 6e:0c:57:09:fd:5e:7d:fb:1c:f2:79:1d:19:c3:5e: 80:e1:9d:c0:2a:18:63:8f:18:c5:9b:c8:8e:66:67: 20:c4:a1:4d:75:f1:15:85:37:30:54:82:48:3d:2d: ad:65:85:5e:14:1d:18:c4:95:54:b3:87:2a:43:1f: 1c:43:4a:39:d9:72:98:f4:73:f8:56:3e:a1:8c:f9: 7d:4d:d2:e9:0f:5d:97:3c:4b:a3:05:dc:4a:6d:55: e1:c2:a2:58:b6:b0:9f:0d:0e:e2:59:bb:10:b5:0b: fb:fa:b7:ef:55:78:69:de:37:c8:02:e2:3f:bf:77: 27:97:48:ed:92:4a:a1:9d:62:f6:47:63:b7:e9:2e: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:D0:06:D3:5B:82:46:52:E1:F8:25:B8:62:B3:F2:72:11:69:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5686d275-7655-3c09-9ac1-b87e7f1c2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ea:db:3d:b7:06:42:a3:e2:19:47:60:86:5d:f1:ce:2c:89: aa:ad:7f:71:49:c0:c1:0a:fc:8f:71:bb:3e:21:2a:4e:33:d0: 66:40:79:05:c7:46:92:4e:c9:3d:43:14:22:cd:c7:71:86:56: 79:ca:a0:b5:5e:19:96:81:60:33:04:1f:38:40:ec:b4:3d:d7: a3:98:78:8b:5c:61:ce:a7:5f:ec:b8:6f:58:c1:4b:7f:6e:e4: ae:1d:bd:6b:99:5e:a8:04:4b:3f:5b:24:a1:8b:dd:d8:78:13: 38:66:aa:e4:08:c3:85:74:79:9f:c5:c9:24:17:f4:1d:21:93: d4:8c:9f:a4:bc:23:8d:b0:f1:91:86:5e:53:3b:a1:d9:60:72: fd:61:c0:b0:62:bb:57:09:28:ed:b9:df:cf:ad:07:55:6b:2a: c4:9c:10:03:35:e2:a3:04:6d:5d:1e:75:9f:79:90:45:b2:b6: 69:48:a7:0c:7f:47:89:36:f2:79:b5:0a:55:5d:c8:fe:40:56: 3e:b4:e9:68:cf:cc:76:99:57:6d:b0:77:ed:c9:7c:dc:31:e9: c9:8e:43:86:24:65:0e:e9:ae:f5:e4:dd:ad:b8:62:5e:55:b0: 08:1a:cd:b3:aa:68:9c:db:e0:60:fc:b8:17:a7:e7:18:82:db: 37:3b:00:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESBY+HdrHRYQ74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDhlZGM2ZDUtNWQ3OC00NDhjLTk1ZDAtYTk1OGY5MmZhZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJr1FBM4EHSdnuz7kg6qGG6wHGl0FGgXhLzP jat0Fl8GT/Y4Mftv+UcUOEJcWKUu+qIX7Hr9yuYjKL5fUK9aDyi1FqmCiZHEgWw3 0ul7HrySI3TgQFi1rrSeqnDpYjLOOHHuOEPZl9cSKIllatUZhIHukO38hcRuDFcJ /V59+xzyeR0Zw16A4Z3AKhhjjxjFm8iOZmcgxKFNdfEVhTcwVIJIPS2tZYVeFB0Y xJVUs4cqQx8cQ0o52XKY9HP4Vj6hjPl9TdLpD12XPEujBdxKbVXhwqJYtrCfDQ7i WbsQtQv7+rfvVXhp3jfIAuI/v3cnl0jtkkqhnWL2R2O36S6HxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJi0AbTW4JGUuH4Jbhis/JyEWlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4NmQyNzUtNzY1NS0z YzA5LTlhYzEtYjg3ZTdmMWMyYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3q2z23BkKj4hlHYIZd8c4siaqtf3FJwMEK/I9xuz4hKk4z0GZAeQXH RpJOyT1DFCLNx3GGVnnKoLVeGZaBYDMEHzhA7LQ916OYeItcYc6nX+y4b1jBS39u 5K4dvWuZXqgESz9bJKGL3dh4EzhmquQIw4V0eZ/FySQX9B0hk9SMn6S8I42w8ZGG XlM7odlgcv1hwLBiu1cJKO2538+tB1VrKsScEAM14qMEbV0edZ95kEWytmlIpwx/ R4k28nm1ClVdyP5AVj606WjPzHaZV22wd+3JfNwx6cmOQ4YkZQ7prvXk3a24Yl5V sAgazbOqaJzb4GD8uBen5xiC2zc7APg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:08 2025 by rpki-client