$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa File: 607e03b3-c1cd-33a7-9a62-9057775306ab.roa (raw, json) Hash identifier: ZawphYXP7MxcYjbEH5VYAZhsuNS08C2XX9JtuJe+uAg= Subject key identifier: F1:75:60:1F:B7:0A:CD:25:B2:EC:85:50:BD:A4:8C:53:75:F7:D0:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111BC3DFB8CC4513BD8000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1b:c3:df:b8:cc:45:13:bd:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5a165436-fc53-4c53-8cdd-b9a0319e71dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e6:e9:0e:0d:6a:89:76:e0:05:41:a5:78:50: fb:41:46:72:ad:c1:97:60:2e:d2:c3:b4:ca:12:62: a1:f6:bf:52:02:7f:c9:b0:60:14:34:cb:01:b5:64: 4a:0b:1d:10:7e:66:a2:0c:82:95:d9:4a:07:54:7d: 2b:03:be:b3:5c:a7:f4:b7:d9:09:3c:48:dc:ca:ae: 6e:b5:1f:0b:68:d0:16:a2:36:56:15:b3:30:31:b1: 05:6e:fe:60:11:8f:60:b2:3b:f1:10:3c:e5:80:7e: b5:0b:25:90:7d:d5:b8:69:98:5e:55:2c:b5:06:d0: c2:b9:d0:98:7e:41:d6:a5:db:fc:9e:47:c2:1a:a7: 21:06:88:31:f8:9b:aa:6c:8f:f4:3b:f7:c5:51:5e: b6:24:fc:57:17:01:fb:34:31:e3:17:c6:07:9e:2e: fd:5f:7e:76:7d:66:29:39:30:84:a1:b2:39:7b:b5: ee:98:dd:92:b0:87:56:ee:46:96:66:46:99:33:e0: 4d:f4:b0:40:2b:17:ca:b3:42:4e:35:74:70:ec:58: ad:ba:6b:08:c1:93:85:c0:3b:fc:bb:14:8f:b8:b7: 84:f0:da:b9:6f:1f:20:69:e7:5d:bc:9c:29:dc:05: aa:ad:cd:a8:9d:d8:38:14:5a:74:54:15:a1:63:c8: c8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:60:1F:B7:0A:CD:25:B2:EC:85:50:BD:A4:8C:53:75:F7:D0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/607e03b3-c1cd-33a7-9a62-9057775306ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:39:ad:9e:c7:b7:f7:bd:c7:6b:eb:0f:21:22:fd:7b:98:a8: 0c:a9:fa:e4:8c:93:cc:39:5f:ab:9e:b4:3d:a1:cc:d8:3e:9a: 71:fe:b1:12:f1:fc:3c:e2:15:09:e6:e1:3e:17:42:38:6f:56: 20:7b:c5:24:4d:73:f9:7f:52:79:fc:81:cf:0e:4b:df:fa:27: 42:1c:f8:b9:28:22:0e:1d:50:48:9f:ab:33:d1:69:e2:33:1d: da:0c:47:36:80:70:16:5d:47:c5:40:4a:75:c7:32:73:f6:01: 0d:d4:05:0a:95:3a:91:ba:06:96:14:2d:21:73:9f:e1:7a:e9: 74:44:1f:6e:8f:0a:34:f5:05:e6:77:74:4c:cf:fa:82:df:ca: 7d:7b:d6:ba:2c:ba:06:f4:de:c1:3a:b4:f1:cd:06:6c:3f:51: 1d:26:10:01:24:87:8b:99:cc:41:eb:a4:db:2f:55:b2:fc:f5: 50:9b:05:19:71:42:48:72:3e:e2:03:f6:37:cd:bf:2c:39:db: 88:67:72:07:53:55:ac:36:14:91:20:74:69:52:52:57:3f:4b: 78:aa:85:3c:f6:9b:0b:77:e5:56:6f:63:98:a4:49:a1:dc:ab: d8:7b:1b:9f:46:a6:1d:15:af:49:19:c2:b3:10:52:e3:50:72: 4e:ea:ad:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERvD37jMRRO9gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NWExNjU0MzYtZmM1My00YzUzLThjZGQtYjlhMDMxOWU3MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxubpDg1qiXbgBUGleFD7QUZyrcGXYC7Sw7TK EmKh9r9SAn/JsGAUNMsBtWRKCx0QfmaiDIKV2UoHVH0rA76zXKf0t9kJPEjcyq5u tR8LaNAWojZWFbMwMbEFbv5gEY9gsjvxEDzlgH61CyWQfdW4aZheVSy1BtDCudCY fkHWpdv8nkfCGqchBogx+JuqbI/0O/fFUV62JPxXFwH7NDHjF8YHni79X352fWYp OTCEobI5e7XumN2SsIdW7kaWZkaZM+BN9LBAKxfKs0JONXRw7FitumsIwZOFwDv8 uxSPuLeE8Nq5bx8gaeddvJwp3AWqrc2ondg4FFp0VBWhY8jImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF1YB+3Cs0lsuyFUL2kjFN199CtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA3ZTAzYjMtYzFjZC0z M2E3LTlhNjItOTA1Nzc3NTMwNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQq2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM5rZ7Ht/e9x2vrDyEi/XuYqAyp+uSMk8w5X6uetD2hzNg+mnH+sRLx /DziFQnm4T4XQjhvViB7xSRNc/l/Unn8gc8OS9/6J0Ic+LkoIg4dUEifqzPRaeIz HdoMRzaAcBZdR8VASnXHMnP2AQ3UBQqVOpG6BpYULSFzn+F66XREH26PCjT1BeZ3 dEzP+oLfyn171rosugb03sE6tPHNBmw/UR0mEAEkh4uZzEHrpNsvVbL89VCbBRlx QkhyPuID9jfNvyw524hncgdTVaw2FJEgdGlSUlc/S3iqhTz2mwt35VZvY5ikSaHc q9h7G59Gph0Vr0kZwrMQUuNQck7qraQ= -----END CERTIFICATE-----Generated at Fri Mar 14 13:56:43 2025 by rpki-client