$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa File: af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa (raw, json) Hash identifier: hXUVZAnw1GSXYiJXqM843bGg2KPtme7HLvrCYu6s/WE= Subject key identifier: 9F:64:9D:6B:C8:27:43:55:49:15:4E:07:39:22:CE:56:54:95:43:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB5754CEBBA4BE09CFA5800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:75:4c:eb:ba:4b:e0:9c:fa:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=abe3eb5f-7aad-473e-8d0e-5c3c4854978f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:4b:7b:58:38:0b:b6:0d:cb:79:a1:f8:8c: fd:db:e6:85:3e:88:27:64:39:fa:40:d0:58:f8:12: a7:1b:ef:cc:f0:b7:3e:39:88:81:45:51:35:eb:0a: 9f:cc:34:50:e5:54:cc:d0:1d:b0:b0:a3:60:25:30: 09:af:2e:61:c7:91:bb:15:58:44:60:d5:1c:73:47: 13:2b:ee:5d:9d:92:5f:18:54:0d:9d:53:5a:48:46: 35:3b:db:3c:c9:ce:44:6c:86:c2:9b:a3:83:33:9d: 37:77:79:6b:8e:ac:73:ef:88:d9:36:4c:cc:f7:66: db:a9:a7:c3:d8:74:0f:23:22:52:3b:b4:00:7d:e7: 9d:78:ce:75:a0:0f:a5:e5:2f:51:2a:db:d7:5a:ca: 29:22:5c:c6:c2:82:fd:e5:7e:30:5f:96:e4:b5:c7: 1c:a0:28:68:6c:b6:19:18:c9:3a:d5:91:c7:5f:4b: 41:26:70:9b:5d:4b:68:b4:0c:b5:d1:39:c1:44:74: 81:b4:e9:b5:3c:97:92:6d:75:2f:44:f5:ea:b1:9e: c6:49:0a:64:ea:df:3d:58:c7:b2:17:1c:4a:bf:55: fc:be:88:bb:8c:e4:7e:2f:96:f4:6e:96:15:8c:91: 9a:8b:9d:f6:d7:f5:48:c8:ae:84:f2:e7:59:b8:e1: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:9D:6B:C8:27:43:55:49:15:4E:07:39:22:CE:56:54:95:43:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:89:de:6b:29:2a:eb:46:12:c6:fd:a6:42:fe:be:af:03:0d: fa:7c:d7:1e:b1:44:4d:d4:fd:28:1a:b8:a6:2d:db:75:4b:81: 05:cd:45:bb:42:55:6c:0f:f0:a2:71:eb:85:97:d1:85:58:47: aa:48:12:b6:00:73:55:22:fe:05:dc:e3:c1:ab:e7:48:de:e9: 55:83:99:8a:ef:46:9b:a7:7d:9a:d0:18:bf:08:ae:49:f3:dc: 37:87:f2:e1:e0:15:cb:ce:d7:29:a7:f8:28:b4:b4:f3:73:ca: d9:e3:30:0d:75:b5:b0:93:11:cd:99:91:e9:58:e5:3a:14:99: 11:1f:9c:e5:0e:0b:d0:b9:2e:6f:e2:47:36:ff:3c:3a:b6:15: 62:7b:fc:bd:ce:64:f9:d2:ad:4e:98:89:83:f3:c3:89:4c:5d: c0:e5:0f:80:c5:d8:99:f2:00:1b:c8:c3:8d:63:8d:9a:94:0f: fa:e7:34:28:f1:fb:58:a2:b9:6c:27:93:38:55:80:db:9e:47: ec:07:a0:fe:df:9c:98:fd:73:74:b3:34:83:3f:45:8a:d2:3b: 07:c4:96:6b:6d:6b:51:83:ac:5d:9f:7b:ce:4e:82:41:32:9d: 83:54:5e:ea:63:7f:9f:92:87:08:8a:66:75:3e:b5:2b:ba:81: 8a:8b:a4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXVM67pL4Jz6WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk YWJlM2ViNWYtN2FhZC00NzNlLThkMGUtNWMzYzQ4NTQ5NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZpLe1g4C7YNy3mh+Iz92+aFPognZDn6QNBY +BKnG+/M8Lc+OYiBRVE16wqfzDRQ5VTM0B2wsKNgJTAJry5hx5G7FVhEYNUcc0cT K+5dnZJfGFQNnVNaSEY1O9s8yc5EbIbCm6ODM503d3lrjqxz74jZNkzM92bbqafD 2HQPIyJSO7QAfeedeM51oA+l5S9RKtvXWsopIlzGwoL95X4wX5bktcccoChobLYZ GMk61ZHHX0tBJnCbXUtotAy10TnBRHSBtOm1PJeSbXUvRPXqsZ7GSQpk6t89WMey FxxKv1X8voi7jOR+L5b0bpYVjJGai5321/VIyK6E8udZuOHa2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9knWvIJ0NVSRVOBzkizlZUlUPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWYzYzBiNmItMDUyZS0z NmZlLWI2ODAtNWI1ZWE3ZTJlNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWJ3mspKutGEsb9pkL+vq8DDfp81x6xRE3U/SgauKYt23VLgQXNRbtC VWwP8KJx64WX0YVYR6pIErYAc1Ui/gXc48Gr50je6VWDmYrvRpunfZrQGL8Irknz 3DeH8uHgFcvO1ymn+Ci0tPNzytnjMA11tbCTEc2ZkelY5ToUmREfnOUOC9C5Lm/i Rzb/PDq2FWJ7/L3OZPnSrU6YiYPzw4lMXcDlD4DF2JnyABvIw41jjZqUD/rnNCjx +1iiuWwnkzhVgNueR+wHoP7fnJj9c3SzNIM/RYrSOwfElmtta1GDrF2fe85OgkEy nYNUXupjf5+ShwiKZnU+tSu6gYqLpJ0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:02 2025 by rpki-client