$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5e7c6c2-72b2-3440-b97c-3a194f755c06.roa File: a5e7c6c2-72b2-3440-b97c-3a194f755c06.roa (raw, json) Hash identifier: KYHGxrpkV38YyBzwGFhJTh7IR2UWTpBZtGqjzFFa3us= Subject key identifier: 75:8F:6E:8E:27:A5:0C:3E:4F:C8:7F:1E:07:52:F0:AC:C1:BA:15:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EBA9FF35618F9722F5F4 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5e7c6c2-72b2-3440-b97c-3a194f755c06.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.19.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:eb:a9:ff:35:61:8f:97:22:f5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=99ad0b46-6819-4bad-83b9-68944631c1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:e7:b5:96:4c:0a:c5:ff:83:d0:e3:10:60: 20:b5:60:d5:b7:c2:fc:d5:d7:66:aa:eb:2c:57:02: da:69:48:1e:a7:f6:66:5f:2c:06:6a:0c:9b:37:cb: 25:46:27:65:cc:41:0d:64:ce:59:11:5c:ba:58:61: 4b:70:f3:96:16:3b:50:b2:49:16:ac:f6:d8:6d:7d: 69:74:d6:ef:67:2d:dc:d2:4a:5a:0d:4c:5d:13:72: ac:84:2c:08:0e:51:20:bc:2f:7f:9e:b7:51:11:98: 8b:b9:ce:99:0d:f2:97:95:c7:c5:2e:ce:55:96:eb: 18:0e:ee:e9:53:5e:8a:2c:fc:19:af:82:8c:17:2c: bd:3f:32:3c:d0:01:30:af:0e:76:2a:b7:cf:b0:08: 0d:db:01:f1:f1:d7:2a:27:c4:df:57:b5:32:8c:c2: 85:71:e7:01:1f:2f:57:7b:9f:7f:be:1f:a7:f6:26: c4:44:6f:9a:77:c3:e8:c7:82:ef:15:7c:f1:fc:d7: 3c:6f:6f:3c:57:9b:98:59:b8:23:75:e4:5d:be:fd: 17:24:a4:a3:7a:ae:d9:3e:a4:a5:3d:b1:5d:e7:e1: 11:af:4e:81:34:0f:6a:65:1a:cd:fd:2a:60:b2:59: d1:e9:90:13:f9:c5:a3:6d:ef:72:b8:c8:23:68:c2: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:6E:8E:27:A5:0C:3E:4F:C8:7F:1E:07:52:F0:AC:C1:BA:15:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5e7c6c2-72b2-3440-b97c-3a194f755c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3b:18:fc:63:7f:06:54:11:24:0f:30:33:1f:14:2e:ae:72: fb:80:b3:f1:42:59:5a:a9:8d:8e:23:dd:8b:80:29:38:22:96: 71:6d:f5:37:74:26:58:8d:0d:3a:c9:7b:36:37:9f:5c:6a:a7: 43:31:72:6e:11:e3:48:bf:96:34:74:b2:21:c3:29:1f:1c:37: ba:35:05:64:e2:41:d7:bc:13:07:4d:ee:33:bc:eb:60:1d:e8: 4e:9e:0e:4e:8b:ba:e3:ec:4c:6a:33:5c:19:ce:88:33:3f:c8: 32:3d:69:d6:12:3f:75:1e:76:e7:78:c4:79:4b:ec:d3:82:ff: ad:f5:7e:6c:ca:33:89:52:8b:ad:1c:61:9e:eb:3a:71:0c:7d: c2:a4:ab:a4:99:c2:8f:f3:52:14:98:1f:94:36:6a:0b:45:6a: 59:0f:c7:11:44:95:01:8a:5a:1f:30:36:e7:54:62:3b:1c:c9: e7:9f:e0:9d:b5:0d:4f:7c:06:ba:ef:c7:bc:0a:9d:58:a7:f4: 01:78:9d:bc:b0:08:06:10:1e:ac:2a:6b:e2:4e:8c:4a:a8:89: 62:60:eb:3e:f4:aa:96:93:df:3c:24:9c:89:d8:02:32:2b:17: 3d:f1:05:35:f1:47:c0:b5:c8:67:59:29:e2:19:fb:13:d7:ad: 49:bc:26:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOup/zVhj5ci9fQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTlhZDBiNDYtNjgxOS00YmFkLTgzYjktNjg5NDQ2MzFjMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyDntZZMCsX/g9DjEGAgtWDVt8L81ddmquss VwLaaUgep/ZmXywGagybN8slRidlzEENZM5ZEVy6WGFLcPOWFjtQskkWrPbYbX1p dNbvZy3c0kpaDUxdE3KshCwIDlEgvC9/nrdREZiLuc6ZDfKXlcfFLs5VlusYDu7p U16KLPwZr4KMFyy9PzI80AEwrw52KrfPsAgN2wHx8dcqJ8TfV7UyjMKFcecBHy9X e59/vh+n9ibERG+ad8Pox4LvFXzx/Nc8b288V5uYWbgjdeRdvv0XJKSjeq7ZPqSl PbFd5+ERr06BNA9qZRrN/SpgslnR6ZAT+cWjbe9yuMgjaMLJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWPbo4npQw+T8h/HgdS8KzBuhX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTVlN2M2YzItNzJiMi0z NDQwLWI5N2MtM2ExOTRmNzU1YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF47GPxjfwZUESQPMDMfFC6ucvuAs/FCWVqpjY4j3YuAKTgilnFt9Td0 JliNDTrJezY3n1xqp0Mxcm4R40i/ljR0siHDKR8cN7o1BWTiQde8EwdN7jO862Ad 6E6eDk6LuuPsTGozXBnOiDM/yDI9adYSP3Uedud4xHlL7NOC/631fmzKM4lSi60c YZ7rOnEMfcKkq6SZwo/zUhSYH5Q2agtFalkPxxFElQGKWh8wNudUYjscyeef4J21 DU98Brrvx7wKnVin9AF4nbywCAYQHqwqa+JOjEqoiWJg6z70qpaT3zwknInYAjIr Fz3xBTXxR8C1yGdZKeIZ+xPXrUm8Jmc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:07:59 2025 by rpki-client