$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa File: 75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa (raw, json) Hash identifier: LdQ3U0se0+Kp0u9MeHSE33egt/qMVJvltDtZIdnHZKg= Subject key identifier: 04:13:EE:7C:10:D3:19:05:C5:F5:93:B4:58:D5:B2:5F:BC:CA:55:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F1316C2B59EDE7755FA4 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 97.66.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:31:6c:2b:59:ed:e7:75:5f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c3eb495d-ee62-4ae5-900e-ed9cdf2eeaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fc:17:67:3f:38:6a:68:23:0d:f4:c2:e5:5f: 57:6a:20:06:2b:f6:a3:e0:01:4b:3d:bb:af:25:da: df:23:94:12:91:55:54:23:41:50:98:d8:c5:e6:e4: 59:3d:d1:c3:79:a2:24:e4:35:cc:42:a6:97:b4:c0: d5:da:ef:17:66:b2:34:c8:7e:fd:1d:20:58:8d:10: 84:0c:69:56:ed:07:9c:9e:9c:1c:90:86:3b:47:a9: 74:02:58:1b:61:05:a4:cf:f5:ee:12:8b:0a:e1:49: cc:5c:53:fc:82:43:e8:f0:66:9d:9e:1b:41:70:92: fd:f0:41:22:8e:a2:77:5a:bd:06:0f:6c:a5:d5:f3: a0:d3:e3:09:30:cc:a9:6c:9c:01:f9:7a:e6:4e:53: 71:b8:47:50:a9:bc:a5:00:be:ba:24:23:91:85:a9: ea:6a:4d:4f:77:7b:d2:f4:1c:2c:4e:2f:0b:e4:eb: c7:2f:eb:cb:8b:b8:3a:f1:12:6c:21:df:5d:ce:ed: 61:be:dd:e6:6b:4f:c4:7d:3d:36:a8:77:26:c9:b7: 8e:0e:f8:f8:83:82:4f:11:06:38:51:09:4d:df:9c: 23:c0:64:4e:ad:5c:3c:4c:37:43:95:e9:4e:a2:8c: b7:ac:e7:d6:10:d8:f6:b4:83:ca:ed:97:7b:5e:4c: 24:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:13:EE:7C:10:D3:19:05:C5:F5:93:B4:58:D5:B2:5F:BC:CA:55:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:25:c3:b3:50:f4:0b:3b:0d:8a:f0:4d:9c:fa:1c:5d:49:38: 16:93:2f:7f:24:46:f6:6f:8b:72:3a:db:e0:52:00:38:d4:76: df:72:20:24:de:61:6c:40:7f:4b:bf:2a:aa:9d:0b:a7:33:be: da:ee:7b:60:22:55:dc:42:59:ed:85:98:4a:7a:1e:66:6b:01: 56:2f:14:fe:a0:2b:08:65:68:9c:02:83:6a:a2:2d:18:d3:d4: 79:b3:43:eb:79:27:1b:4d:c2:8f:f7:50:12:17:d6:9d:11:04: 3c:d4:b0:7c:3f:85:ba:dd:67:8d:b6:82:48:d2:0a:6f:18:ce: 34:21:12:06:30:6b:b9:63:9f:d6:44:38:23:d3:5a:02:c6:1c: e0:2b:9e:07:34:61:c4:95:0e:87:e5:d1:8c:43:cd:b0:c0:d4: 17:f7:03:a4:84:56:ec:f1:ee:56:4e:9e:0a:c3:f2:8c:a2:10: 5a:d1:b6:f2:3f:d4:08:30:08:21:65:cd:e7:2f:ef:76:fd:59: 41:ba:b2:b4:0f:a4:ea:78:fc:19:93:7f:d8:bc:6a:21:8e:26: bd:90:49:f9:08:22:df:e2:5e:86:8f:25:80:fd:f6:ac:a7:7b: 3c:19:23:40:90:7d:72:ae:92:8e:59:a0:eb:d3:53:28:8d:a5: 98:19:75:36 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEPExbCtZ7ed1X6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzNlYjQ5NWQtZWU2Mi00YWU1LTkwMGUtZWQ5Y2RmMmVlYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/wXZz84amgjDfTC5V9XaiAGK/aj4AFLPbuv JdrfI5QSkVVUI0FQmNjF5uRZPdHDeaIk5DXMQqaXtMDV2u8XZrI0yH79HSBYjRCE DGlW7QecnpwckIY7R6l0AlgbYQWkz/XuEosK4UnMXFP8gkPo8GadnhtBcJL98EEi jqJ3Wr0GD2yl1fOg0+MJMMypbJwB+XrmTlNxuEdQqbylAL66JCORhanqak1Pd3vS 9BwsTi8L5OvHL+vLi7g68RJsId9dzu1hvt3ma0/EfT02qHcmybeODvj4g4JPEQY4 UQlN35wjwGROrVw8TDdDlelOooy3rOfWENj2tIPK7Zd7XkwkewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAQT7nwQ0xkFxfWTtFjVsl+8ylVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzVhNjIyM2MtMmNmOC0z MGNjLWJjNTgtNGU2YTBiZTRiMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYSXDs1D0CzsNivBNnPocXUk4FpMvfyRG9m+Lcjrb4FIAONR233IgJN5h bEB/S78qqp0LpzO+2u57YCJV3EJZ7YWYSnoeZmsBVi8U/qArCGVonAKDaqItGNPU ebND63knG03Cj/dQEhfWnREEPNSwfD+Fut1njbaCSNIKbxjONCESBjBruWOf1kQ4 I9NaAsYc4CueBzRhxJUOh+XRjEPNsMDUF/cDpIRW7PHuVk6eCsPyjKIQWtG28j/U CDAIIWXN5y/vdv1ZQbqytA+k6nj8GZN/2LxqIY4mvZBJ+Qgi3+Jeho8lgP32rKd7 PBkjQJB9cq6Sjlmg69NTKI2lmBl1Ng== -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:31 2025 by rpki-client