$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa File: 65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa (raw, json) Hash identifier: W1FIjEfOhD/gTS2ieOyHqyrcqlqh9gTD5H9P/11lusc= Subject key identifier: 43:C7:87:E2:80:7F:60:31:28:6D:AF:89:DD:03:B4:EA:EA:62:53:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB56B0F4AFF6CA0A3F247C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:6b:0f:4a:ff:6c:a0:a3:f2:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=4c2fa1b4-06b2-4d3c-8b17-9253c623642a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e3:a7:63:79:4d:84:4d:70:56:62:ef:3a:76: 60:fd:cb:49:3a:98:31:b7:98:c1:27:f2:69:18:74: e7:70:25:f1:23:bf:b9:86:42:3d:84:6a:17:0b:44: 29:2b:10:b0:bd:5d:51:f9:d3:e4:44:d4:ff:9c:c1: d3:ef:3a:9f:8d:16:c5:74:42:9e:02:54:1f:2f:e6: c5:49:56:47:cb:3c:de:2e:15:17:80:08:5f:8d:06: 96:bb:5c:4b:33:be:76:01:8a:be:64:9b:c0:c4:d3: 34:47:bd:70:a1:0d:a5:51:1a:30:53:b3:9a:0f:1e: a8:5c:b0:75:18:cc:3c:15:8b:62:97:01:5f:17:3f: c0:16:30:c4:a6:a0:3c:97:ac:f4:2a:a6:c5:0a:fb: 65:b1:9b:7c:cf:9d:81:31:a2:d2:bb:57:13:5e:55: 0f:e3:bb:36:de:d3:33:c1:50:fe:9b:da:90:59:60: 91:1f:6e:38:2d:74:da:a8:5f:07:12:08:59:8e:7f: 1c:2c:db:e1:f8:59:ea:c4:8d:3b:8f:b7:50:fd:c1: 67:d4:75:64:31:2e:43:0f:e4:c9:61:3b:fc:8e:4a: 98:93:00:01:da:a1:39:e2:88:99:3e:2a:29:55:99: 46:fb:32:b4:54:f0:80:8c:ee:f9:2b:2d:75:88:f4: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C7:87:E2:80:7F:60:31:28:6D:AF:89:DD:03:B4:EA:EA:62:53:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:57:d6:fe:47:91:c2:e8:f0:cc:fb:eb:a8:bc:ac:f4:9c:72: a0:a9:1e:41:bd:07:9b:0a:9a:c3:e3:ee:3f:07:68:7a:ef:78: 8b:4f:1c:41:28:6e:c0:c5:33:bc:26:21:86:5e:9f:6c:67:6a: 38:d0:80:53:e4:c9:cc:42:43:08:6c:f9:95:06:b6:f2:aa:93: a1:c8:73:a1:12:5f:06:4f:ea:67:c9:e6:13:ea:c3:7a:db:38: 06:99:e5:ac:3c:b3:4e:af:6c:5e:73:2e:e6:49:b1:1f:ab:cc: a8:70:c7:b0:d5:8a:81:17:f7:75:77:4c:80:0d:53:df:78:6e: d3:0d:99:74:d7:c8:75:f1:2f:30:ea:19:f2:b7:c7:79:a3:3f: 04:66:cb:dc:7f:c2:cb:78:92:10:8f:46:41:46:52:50:c1:33: fd:ea:9a:75:63:c6:d9:74:54:0b:bb:77:ad:8e:14:5d:86:16: 5a:3b:32:a2:8d:72:25:cb:89:90:06:b7:db:13:3f:f6:5a:8e: 30:42:33:3c:8e:a3:bc:4f:90:63:66:a6:53:49:46:5a:7e:48: 82:70:27:f0:68:99:71:3c:dd:81:1a:14:f9:53:db:a5:b4:3b: 13:1f:3f:97:3d:a7:d5:70:cf:02:44:6c:f7:b5:29:60:9a:0a: 97:38:00:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tWsPSv9soKPyR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk NGMyZmExYjQtMDZiMi00ZDNjLThiMTctOTI1M2M2MjM2NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+OnY3lNhE1wVmLvOnZg/ctJOpgxt5jBJ/Jp GHTncCXxI7+5hkI9hGoXC0QpKxCwvV1R+dPkRNT/nMHT7zqfjRbFdEKeAlQfL+bF SVZHyzzeLhUXgAhfjQaWu1xLM752AYq+ZJvAxNM0R71woQ2lURowU7OaDx6oXLB1 GMw8FYtilwFfFz/AFjDEpqA8l6z0KqbFCvtlsZt8z52BMaLSu1cTXlUP47s23tMz wVD+m9qQWWCRH244LXTaqF8HEghZjn8cLNvh+FnqxI07j7dQ/cFn1HVkMS5DD+TJ YTv8jkqYkwAB2qE54oiZPiopVZlG+zK0VPCAjO75Ky11iPQUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPHh+KAf2AxKG2vid0DtOrqYlP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjUzODZlZWItNjQxYi0z ZWQwLWI0NWMtMWMwZmFmYjllMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFX1v5HkcLo8Mz766i8rPSccqCpHkG9B5sKmsPj7j8HaHrveItPHEEo bsDFM7wmIYZen2xnajjQgFPkycxCQwhs+ZUGtvKqk6HIc6ESXwZP6mfJ5hPqw3rb OAaZ5aw8s06vbF5zLuZJsR+rzKhwx7DVioEX93V3TIANU994btMNmXTXyHXxLzDq GfK3x3mjPwRmy9x/wst4khCPRkFGUlDBM/3qmnVjxtl0VAu7d62OFF2GFlo7MqKN ciXLiZAGt9sTP/ZajjBCMzyOo7xPkGNmplNJRlp+SIJwJ/BomXE83YEaFPlT26W0 OxMfP5c9p9VwzwJEbPe1KWCaCpc4ALg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:27 2025 by rpki-client