$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa File: af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa (raw, json) Hash identifier: MFEKRnrhGYJ8KhVUYi9/ahyEZVl8L6Jp+W1QEdyaVu8= Subject key identifier: 88:C5:FF:47:64:C2:44:8D:9B:55:E5:3B:B5:8B:5C:F9:96:FE:2C:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7167A281B1EE06E4CB8500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.66.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:67:a2:81:b1:ee:06:e4:cb:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=2a649a97-bce8-4db6-ae2b-6b4bd83166d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:8a:b0:ff:e9:19:42:03:fc:29:c9:e8:19: 34:a7:1b:6c:37:e5:10:a7:e8:77:2c:c7:4e:d4:ca: 31:1a:45:35:f7:1d:df:5f:1f:3c:bd:d4:24:4a:cf: 16:b1:a9:ca:80:e8:02:6d:07:e6:00:4d:80:5b:96: 4d:01:8c:3e:b8:95:4e:9e:74:4b:18:8b:ea:33:e6: 6e:1a:ab:09:9c:45:2f:aa:06:97:df:6f:95:f3:07: 0a:67:d9:42:01:d1:5b:6d:42:b4:1f:b0:f0:0b:01: 27:83:86:ce:a3:82:de:e5:b3:b4:a9:85:fa:dd:25: 9f:99:4f:66:29:a7:7c:97:84:6f:c0:73:0d:7f:73: b6:bd:94:78:36:4c:e1:b9:9a:07:2e:da:d2:be:23: f1:e1:9c:ff:71:29:60:7d:b5:e4:28:a6:e1:09:3c: 01:54:bc:15:6a:66:fe:94:33:70:57:dd:82:21:ca: 28:91:c1:80:d2:bd:97:a4:b3:0d:5d:41:b2:f3:61: ea:e6:02:96:17:37:11:a1:aa:ce:bf:8b:fe:f2:88: ce:92:00:92:8a:e7:30:19:07:18:5a:74:a5:d5:9f: 72:79:60:f0:fd:ff:38:9a:ae:57:ad:90:35:71:23: 1e:3f:76:d3:3f:76:21:6e:d5:5f:cb:d3:dd:ff:d4: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:FF:47:64:C2:44:8D:9B:55:E5:3B:B5:8B:5C:F9:96:FE:2C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/af3c0b6b-052e-36fe-b680-5b5ea7e2e707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e2:1b:29:cc:37:90:e8:d5:83:c2:a3:3a:03:4b:81:dc:9a: 11:07:5c:0a:3f:b8:c8:5f:d9:5a:d2:7e:14:b4:a6:5a:a6:da: 3c:46:26:cd:1e:00:3c:96:ee:f8:48:68:81:63:8b:e3:93:48: dc:04:ab:80:d1:bd:b1:6a:e9:fc:69:5b:5e:e8:43:39:6e:f3: d2:2c:33:f6:2d:6b:34:d2:6f:97:e7:20:aa:3a:dd:ca:ee:3e: 9b:90:8d:6f:70:96:39:b2:00:6e:95:8d:69:87:bf:8b:a3:65: 15:10:13:b9:b3:e9:f3:fa:7a:d7:73:a0:b5:f5:d0:c2:56:a4: 04:c5:af:4f:00:e6:72:e4:85:40:cd:92:27:95:cb:d9:23:bf: 09:26:3c:86:2c:04:ab:e8:e5:07:c6:69:58:8c:47:29:8f:02: 33:78:a6:6c:f6:f5:61:4f:7a:26:6e:a4:21:f8:4f:08:29:95: 77:32:72:92:ed:91:86:6d:c7:83:99:a2:0a:20:ba:b3:5c:2a: cf:9b:f5:2c:c7:ea:58:87:de:32:45:35:62:ae:b9:27:29:d3: fc:cd:c8:a0:c8:c9:3c:79:be:0d:b8:96:f5:4c:ea:b5:c7:c1: a8:a9:b8:15:e4:f5:da:54:e7:cd:c6:42:19:5b:19:b9:52:92: 03:99:95:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWeigbHuBuTLhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmE2NDlhOTctYmNlOC00ZGI2LWFlMmItNmI0YmQ4MzE2NmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJuKsP/pGUID/CnJ6Bk0pxtsN+UQp+h3LMdO 1MoxGkU19x3fXx88vdQkSs8WsanKgOgCbQfmAE2AW5ZNAYw+uJVOnnRLGIvqM+Zu GqsJnEUvqgaX32+V8wcKZ9lCAdFbbUK0H7DwCwEng4bOo4Le5bO0qYX63SWfmU9m Kad8l4RvwHMNf3O2vZR4NkzhuZoHLtrSviPx4Zz/cSlgfbXkKKbhCTwBVLwVamb+ lDNwV92CIcookcGA0r2XpLMNXUGy82Hq5gKWFzcRoarOv4v+8ojOkgCSiucwGQcY WnSl1Z9yeWDw/f84mq5XrZA1cSMeP3bTP3YhbtVfy9Pd/9RkaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjF/0dkwkSNm1XlO7WLXPmW/ixzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWYzYzBiNmItMDUyZS0z NmZlLWI2ODAtNWI1ZWE3ZTJlNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADziGynMN5Do1YPCozoDS4HcmhEHXAo/uMhf2VrSfhS0plqm2jxGJs0e ADyW7vhIaIFji+OTSNwEq4DRvbFq6fxpW17oQzlu89IsM/YtazTSb5fnIKo63cru PpuQjW9wljmyAG6VjWmHv4ujZRUQE7mz6fP6etdzoLX10MJWpATFr08A5nLkhUDN kieVy9kjvwkmPIYsBKvo5QfGaViMRymPAjN4pmz29WFPeiZupCH4TwgplXcycpLt kYZtx4OZogogurNcKs+b9SzH6liH3jJFNWKuuScp0/zNyKDIyTx5vg24lvVM6rXH waipuBXk9dpU583GQhlbGblSkgOZld0= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:28 2025 by rpki-client