$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa File: a7f026e9-0187-3d65-b799-bbc396c95a39.roa (raw, json) Hash identifier: T025aYSfNnOG0Sl/OPshpt1+g7rgQXBvk31uF0a0svA= Subject key identifier: B7:0F:BB:2A:16:BD:57:42:F4:A4:95:BA:E5:8C:41:72:BC:09:6C:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489BA0B686A920C482C4BF8200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 27338 IP address blocks: 66.0.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:b6:86:a9:20:c4:82:c4:bf:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=b2a51b84-6083-4383-9847-0d7e9f7a758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:e4:f5:77:ee:26:08:d3:10:cd:b3:34:4f: 11:b0:89:ea:41:c5:59:21:3d:0e:32:27:97:59:1e: 2c:81:c7:d9:99:ac:d3:f0:4c:9a:a1:91:f3:04:7b: de:f1:1a:36:03:be:d8:5d:1e:4e:2d:17:a6:4e:3a: 4b:79:4d:d2:8e:e8:3e:50:f0:8a:ef:c3:7c:ea:f8: 14:50:bf:64:b2:53:00:7c:99:b1:26:8d:39:85:2e: 0a:aa:4e:4c:fe:7b:ad:f2:08:af:2e:d1:2d:97:1a: da:a1:92:19:b9:e2:65:13:17:e5:30:7b:15:c3:40: a6:d4:37:c5:d6:33:63:d8:94:34:6d:fe:e0:21:4a: 4d:5f:c7:dd:05:48:ed:b6:08:d7:77:1f:e4:ed:97: 19:ca:10:21:34:5e:f8:9a:02:c8:71:4a:74:2d:d6: 2c:61:20:b3:c2:b8:8a:09:c9:a2:a7:59:c9:d0:3b: 92:26:88:7c:44:3c:5e:f1:06:0f:8a:42:34:02:9a: eb:a9:9a:7c:60:db:23:d7:f8:54:2b:00:ee:79:92: 03:23:d3:71:1d:08:b8:00:7e:d1:59:57:c7:22:45: 17:8c:20:b6:d1:a6:67:e4:73:67:cd:df:15:db:b8: 46:d5:ce:6c:62:19:cb:5c:f0:1b:58:7f:8e:92:53: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:BB:2A:16:BD:57:42:F4:A4:95:BA:E5:8C:41:72:BC:09:6C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7f026e9-0187-3d65-b799-bbc396c95a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a0:05:0e:c3:c0:95:89:33:fc:80:0d:18:79:22:b1:70:b8: e2:e1:73:ad:19:87:03:65:d7:81:b0:24:1a:d5:8c:6a:c1:e1: 63:1f:1f:a6:dc:c3:37:33:0a:f6:83:fe:cf:86:bc:ac:11:c2: 82:7b:62:04:4e:80:9f:0f:dd:be:59:c1:f3:56:7a:23:ad:b6: 34:a6:d2:21:dd:b4:80:a4:7d:e4:de:4a:e2:b2:5e:d5:34:16: 61:6a:d7:9b:6e:5e:d1:4e:6f:a6:79:51:0e:90:92:ed:cf:eb: 0f:c6:ca:b5:c1:2e:61:5c:f0:51:6e:f0:29:e6:d1:cd:23:da: d7:ac:7f:b8:9e:94:8e:40:96:a8:ef:4d:e3:29:35:d2:26:57: a1:69:06:cf:96:46:fd:ec:41:28:c5:9b:21:cb:c0:8c:b9:2d: ca:87:fb:bc:db:f1:f2:bc:ab:3a:b1:42:5d:81:d7:75:06:76: 78:83:56:d6:2e:5b:21:61:1f:aa:d9:2f:11:11:90:e0:d4:7f: 79:22:dd:8b:e1:df:97:19:ad:a3:b1:d5:d3:c0:14:8d:9f:03: 22:27:ec:58:a1:31:db:85:0a:2a:67:60:26:24:63:f0:c6:68: 34:54:f0:b0:2c:7a:e9:5d:43:66:fd:6d:0b:f5:bc:ec:53:6b: e7:66:4b:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLaGqSDEgsS/ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk YjJhNTFiODQtNjA4My00MzgzLTk4NDctMGQ3ZTlmN2E3NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmjk9XfuJgjTEM2zNE8RsInqQcVZIT0OMieX WR4sgcfZmazT8EyaoZHzBHve8Ro2A77YXR5OLRemTjpLeU3Sjug+UPCK78N86vgU UL9kslMAfJmxJo05hS4Kqk5M/nut8givLtEtlxraoZIZueJlExflMHsVw0Cm1DfF 1jNj2JQ0bf7gIUpNX8fdBUjttgjXdx/k7ZcZyhAhNF74mgLIcUp0LdYsYSCzwriK Ccmip1nJ0DuSJoh8RDxe8QYPikI0AprrqZp8YNsj1/hUKwDueZIDI9NxHQi4AH7R WVfHIkUXjCC20aZn5HNnzd8V27hG1c5sYhnLXPAbWH+OklPprwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcPuyoWvVdC9KSVuuWMQXK8CWxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdmMDI2ZTktMDE4Ny0z ZDY1LWI3OTktYmJjMzk2Yzk1YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQgA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACigBQ7DwJWJM/yADRh5IrFwuOLhc60ZhwNl14GwJBrVjGrB4WMfH6bc wzczCvaD/s+GvKwRwoJ7YgROgJ8P3b5ZwfNWeiOttjSm0iHdtICkfeTeSuKyXtU0 FmFq15tuXtFOb6Z5UQ6Qku3P6w/GyrXBLmFc8FFu8Cnm0c0j2tesf7ielI5Alqjv TeMpNdImV6FpBs+WRv3sQSjFmyHLwIy5LcqH+7zb8fK8qzqxQl2B13UGdniDVtYu WyFhH6rZLxERkODUf3ki3Yvh35cZraOx1dPAFI2fAyIn7FihMduFCipnYCYkY/DG aDRU8LAseuldQ2b9bQv1vOxTa+dmS4s= -----END CERTIFICATE-----Generated at Sun Feb 16 20:11:07 2025 by rpki-client