$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa File: 65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa (raw, json) Hash identifier: Mmd3jVCpONNJ9EJuEOhnbad0kns3x6GZ/nVxdufwwOU= Subject key identifier: 21:A2:00:5C:48:72:89:97:41:BB:ED:88:47:7E:9E:AC:C2:64:04:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715F5EAE2B064B2C867B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.66.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:5e:ae:2b:06:4b:2c:86:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=560f3ad3-655d-4a34-88a2-10b43d45ebd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:88:59:30:96:67:a2:ef:0b:07:05:63:55: 93:9f:ed:41:d1:88:6e:80:7d:50:e7:86:aa:41:51: cb:11:d0:4e:eb:9c:d7:91:a7:64:07:93:63:e9:09: 1a:58:78:28:8f:ba:83:05:49:81:8e:65:19:93:f8: fc:8f:78:6a:9d:97:ef:0b:d2:cd:c5:91:a3:f8:93: 2b:33:84:37:da:9c:d1:c1:87:8e:4a:e2:e1:61:c4: 1e:74:6e:3c:db:2b:cb:ad:10:81:e4:d3:57:d9:77: db:58:ea:40:44:a7:69:a1:79:fe:92:b7:9d:88:03: ca:21:eb:49:72:0c:7d:10:71:d9:6e:18:9f:61:2d: 07:42:db:9e:a7:64:9a:c5:5c:e8:a5:8d:d9:65:3b: 7a:8f:41:2f:57:78:a4:d0:b1:0a:71:5b:2a:2a:7c: 34:74:4f:54:cb:f5:77:90:0a:89:cf:d5:d8:d7:e3: 65:f9:07:e5:86:3f:b2:ab:ee:09:78:51:da:77:55: 0a:6d:c0:35:5d:91:a6:f8:58:a4:ef:7b:81:1a:69: 78:8e:fb:52:c2:f8:08:4d:44:39:c5:2d:b4:c7:83: fe:86:a0:56:10:30:64:a6:0e:4e:5d:87:5f:f7:c3: da:32:36:f4:ff:cb:88:78:bd:e5:85:0b:12:d5:e2: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A2:00:5C:48:72:89:97:41:BB:ED:88:47:7E:9E:AC:C2:64:04:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/65386eeb-641b-3ed0-b45c-1c0fafb9e1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2b:e0:1b:44:a1:ff:92:dd:6c:7d:18:d2:c4:4c:b5:d0:70: ea:23:b5:f5:f7:cf:64:c5:99:6c:98:5f:81:6f:29:d4:6d:10: fa:f8:c9:d8:6a:4a:2b:35:b2:5f:9a:63:0a:91:dd:cc:cb:88: 2e:f5:9f:5c:41:8a:a3:f6:ee:13:29:3e:69:db:a1:a5:e2:34: 05:45:3b:dc:52:df:e4:37:59:3d:a2:fd:0f:0c:e7:03:cc:51: a6:f4:ce:51:ee:da:2a:38:84:05:1b:f6:c6:82:69:e4:26:50: 7c:52:01:8c:08:e9:8c:e2:54:24:d4:b2:f3:14:f2:ea:0d:d4: 6e:a7:dc:35:01:a0:d2:7b:7a:51:0f:0c:ff:08:02:5f:36:87: 3e:67:23:ad:d4:f8:7e:a7:23:3c:89:37:7b:33:94:1e:95:15: 69:0c:21:74:0a:de:56:ca:1a:2d:20:80:e7:da:13:00:70:e8: 71:6d:fb:1a:42:af:c6:34:14:ea:d8:64:08:e3:1b:38:89:9d: bf:6e:b2:09:58:76:57:24:b5:40:9c:65:a6:a4:e6:cf:8d:7c: 3e:51:c5:26:f8:06:e7:30:37:75:5f:de:59:e3:69:eb:20:df: c0:0d:18:2c:26:e5:fe:3f:06:c5:94:a7:06:21:c9:0b:e2:fd: ba:91:79:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV9erisGSyyGe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTYwZjNhZDMtNjU1ZC00YTM0LTg4YTItMTBiNDNkNDVlYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9GIWTCWZ6LvCwcFY1WTn+1B0YhugH1Q54aq QVHLEdBO65zXkadkB5Nj6QkaWHgoj7qDBUmBjmUZk/j8j3hqnZfvC9LNxZGj+JMr M4Q32pzRwYeOSuLhYcQedG482yvLrRCB5NNX2XfbWOpARKdpoXn+krediAPKIetJ cgx9EHHZbhifYS0HQtuep2SaxVzopY3ZZTt6j0EvV3ik0LEKcVsqKnw0dE9Uy/V3 kAqJz9XY1+Nl+Qflhj+yq+4JeFHad1UKbcA1XZGm+Fik73uBGml4jvtSwvgITUQ5 xS20x4P+hqBWEDBkpg5OXYdf98PaMjb0/8uIeL3lhQsS1eKPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGiAFxIcomXQbvtiEd+nqzCZAQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjUzODZlZWItNjQxYi0z ZWQwLWI0NWMtMWMwZmFmYjllMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkr4BtEof+S3Wx9GNLETLXQcOojtfX3z2TFmWyYX4FvKdRtEPr4ydhq Sis1sl+aYwqR3czLiC71n1xBiqP27hMpPmnboaXiNAVFO9xS3+Q3WT2i/Q8M5wPM Uab0zlHu2io4hAUb9saCaeQmUHxSAYwI6YziVCTUsvMU8uoN1G6n3DUBoNJ7elEP DP8IAl82hz5nI63U+H6nIzyJN3szlB6VFWkMIXQK3lbKGi0ggOfaEwBw6HFt+xpC r8Y0FOrYZAjjGziJnb9usglYdlcktUCcZaak5s+NfD5RxSb4BucwN3Vf3lnjaesg 38ANGCwm5f4/BsWUpwYhyQvi/bqReb0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:25:07 2025 by rpki-client