$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bbae574-7652-3107-a119-a58b71cfdc77.roa File: 6bbae574-7652-3107-a119-a58b71cfdc77.roa (raw, json) Hash identifier: 5EY5BtadZ2gjS1wSNdlgDRrs/aT9+8KkjCbW9Z9GKOY= Subject key identifier: 61:EE:63:F1:47:AB:58:2E:02:CE:CC:C1:49:35:47:82:F8:38:E1:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EBF4DA1164E8BB14F380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bbae574-7652-3107-a119-a58b71cfdc77.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.55.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:eb:f4:da:11:64:e8:bb:14:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b819cb73-0cda-4fde-bd6a-6fff9fb7b89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:67:9c:41:14:c0:b0:86:f0:d9:d7:b7:c9: d8:c9:24:9c:c2:00:fa:3d:5e:47:4c:f3:2f:1d:d4: b9:fa:8d:ae:9d:96:5d:a2:51:35:ab:5d:3e:ff:d4: f3:f8:35:89:7e:dd:c7:1d:b0:22:9a:4e:6e:c8:19: 97:bb:5e:a2:73:26:fe:94:07:7a:54:7d:06:e6:66: bb:a5:52:6e:ae:18:ff:a8:9b:f2:eb:ce:50:83:21: d3:3f:9c:b3:1c:67:01:ef:8b:bc:0c:dd:da:2a:46: 60:4e:84:ca:e2:94:cf:39:10:81:c2:13:87:50:5b: d1:4d:a9:c4:ec:43:5f:50:9c:11:a6:d0:74:43:14: 97:71:a4:7e:1e:3b:c4:b2:2d:a0:7a:b1:f6:a7:6c: 86:d5:8a:b4:1d:73:50:4e:d4:3e:ea:42:96:7f:64: ba:40:a8:41:79:cc:5c:bf:9e:64:b5:a2:91:23:37: c9:95:9d:f6:b2:99:ed:5c:b4:d5:8d:4e:da:12:36: ca:16:9b:75:40:ab:5e:79:d1:06:ba:97:c6:de:86: 9f:b5:53:51:de:61:17:7e:9f:6f:87:df:e9:2d:fd: 09:db:f7:90:01:ab:c9:8b:dd:c6:c2:c1:a1:df:3f: f4:1c:96:d8:33:57:d3:94:9f:5c:7d:04:3e:dd:b3: dc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EE:63:F1:47:AB:58:2E:02:CE:CC:C1:49:35:47:82:F8:38:E1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6bbae574-7652-3107-a119-a58b71cfdc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.55.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f6:72:bc:8f:55:f8:59:92:ba:94:b3:5c:60:96:ee:41:79: ad:88:03:32:ae:4b:36:07:ec:87:71:7c:04:55:aa:7e:5c:f5: da:cc:80:27:ca:aa:b5:11:15:07:cc:c4:18:88:e7:1b:b7:8a: 16:b1:f3:67:b1:83:a2:24:b9:55:ac:c9:29:db:0d:e8:8f:95: 14:fa:8a:97:f2:5b:86:dd:fc:a9:20:af:17:86:25:8f:82:b0: 4b:f8:77:30:ac:37:6a:41:88:1a:31:1b:5c:8c:5b:af:65:07: 59:e5:4d:10:3a:18:f6:ae:23:cd:2e:30:af:5d:bb:35:b5:59: 21:7e:aa:f1:8b:fb:e1:3d:d2:9c:20:51:84:3e:0f:03:3b:7e: aa:30:c6:c7:54:b6:db:1a:86:f5:54:79:f6:8e:df:fe:3b:af: 83:68:15:ed:ae:ba:13:dd:0d:08:93:78:0b:f6:d0:d1:03:aa: a9:ea:f1:ac:00:37:41:9d:27:0f:83:e2:f0:38:93:c1:a9:cf: d3:6d:5a:2f:ba:a9:a9:04:9c:66:a6:4e:9b:97:0e:40:e6:9e: 17:6e:aa:63:19:80:51:7e:bc:57:95:64:79:9a:4a:25:31:25: dd:e5:06:20:41:c2:ae:3c:6a:0c:f0:7a:8d:9a:30:e9:f2:61: 43:0f:78:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOv02hFk6LsU84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjgxOWNiNzMtMGNkYS00ZmRlLWJkNmEtNmZmZjlmYjdiODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtnnEEUwLCG8NnXt8nYySScwgD6PV5HTPMv HdS5+o2unZZdolE1q10+/9Tz+DWJft3HHbAimk5uyBmXu16icyb+lAd6VH0G5ma7 pVJurhj/qJvy685QgyHTP5yzHGcB74u8DN3aKkZgToTK4pTPORCBwhOHUFvRTanE 7ENfUJwRptB0QxSXcaR+HjvEsi2gerH2p2yG1Yq0HXNQTtQ+6kKWf2S6QKhBecxc v55ktaKRIzfJlZ32spntXLTVjU7aEjbKFpt1QKteedEGupfG3oaftVNR3mEXfp9v h9/pLf0J2/eQAavJi93GwsGh3z/0HJbYM1fTlJ9cfQQ+3bPcPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHuY/FHq1guAs7MwUk1R4L4OOEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmJiYWU1NzQtNzY1Mi0z MTA3LWExMTktYTU4YjcxY2ZkYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD2cryPVfhZkrqUs1xglu5Bea2IAzKuSzYH7IdxfARVqn5c9drMgCfK qrURFQfMxBiI5xu3ihax82exg6IkuVWsySnbDeiPlRT6ipfyW4bd/KkgrxeGJY+C sEv4dzCsN2pBiBoxG1yMW69lB1nlTRA6GPauI80uMK9duzW1WSF+qvGL++E90pwg UYQ+DwM7fqowxsdUttsahvVUefaO3/47r4NoFe2uuhPdDQiTeAv20NEDqqnq8awA N0GdJw+D4vA4k8Gpz9NtWi+6qakEnGamTpuXDkDmnhduqmMZgFF+vFeVZHmaSiUx Jd3lBiBBwq48agzweo2aMOnyYUMPeFk= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:51 2025 by rpki-client