$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa File: c35273ee-a67b-389a-abed-e2f536761270.roa (raw, json) Hash identifier: bns2Aki6HlvEIlsH3UtBqA3sUT8KLuHhwQQcWgPqfT0= Subject key identifier: 3F:73:FE:23:0E:64:16:8D:EC:64:87:E3:73:0F:4C:8F:40:EC:01:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112E3F482B9E2A50E24608 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 26914 IP address blocks: 66.32.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2e:3f:48:2b:9e:2a:50:e2:46:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ea506260-3286-4de4-b3e3-cbdfe424420d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:de:ee:8a:82:7d:07:95:45:3e:c1:cf:a2: 95:82:ea:e4:b0:10:36:8e:26:16:72:d5:1e:73:a3: 59:23:80:2b:2c:99:de:aa:e9:8f:89:9b:23:7f:5a: 96:19:44:7e:9a:56:79:10:89:90:76:11:85:f0:0b: fe:40:26:b5:7d:26:4f:8e:45:d0:5f:84:a9:77:21: 38:f9:f4:4b:f8:42:d6:22:a0:54:34:97:7b:2e:e0: 44:18:d8:dd:07:1c:71:07:0c:02:03:c6:68:f7:7a: 10:88:31:89:eb:aa:0b:e3:46:ea:f9:79:75:18:31: a0:9a:f6:b9:68:ce:1a:30:c6:5e:d6:35:79:8d:24: 9b:8e:73:c8:08:81:8c:b9:9b:51:51:0d:e3:5d:36: 08:94:70:49:ce:3e:7d:a2:8a:8b:36:df:41:b7:9b: 9a:f1:fa:af:4d:71:90:38:bd:dd:c0:87:79:cc:bd: b8:d7:e8:35:84:84:26:90:fc:7e:e3:c8:a1:31:16: df:8b:30:84:44:00:7f:47:f0:47:8f:55:f1:1c:c3: 71:b9:1e:73:12:0c:b0:fc:a9:26:58:e1:dc:a6:38: 01:d2:b3:e8:f0:f4:28:63:8c:33:fe:52:8e:8b:58: ae:8f:aa:5d:14:a0:cf:64:44:03:cf:15:49:f9:43: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:FE:23:0E:64:16:8D:EC:64:87:E3:73:0F:4C:8F:40:EC:01:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c35273ee-a67b-389a-abed-e2f536761270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4c:32:06:13:56:60:14:22:d9:1b:99:f7:a2:01:b0:ea:86: 60:9d:f1:51:8f:71:da:35:6b:ba:14:73:0b:a4:9d:c5:f3:36: 55:52:6d:cb:ef:d9:f0:d2:2c:bb:ac:bf:49:83:be:c4:a4:d8: dd:2f:39:6b:b4:09:44:38:82:68:f4:40:d1:de:58:98:10:00: ae:51:7b:81:2d:90:0b:ab:25:5c:60:b9:dd:a9:36:78:45:5b: fd:fe:9d:fd:f7:ae:12:64:83:52:bc:12:ee:45:81:5f:f4:6b: 82:6c:fa:f6:a1:af:cb:a4:d7:ce:56:cb:60:02:8d:78:00:15: 23:b4:44:3a:e2:20:0b:e4:2a:81:81:b7:cc:36:8d:d0:1b:57: 6b:56:bf:23:34:6b:64:04:18:50:99:cc:c4:ac:c9:e9:89:a7: a6:4b:cf:d5:83:ba:6d:96:65:a9:23:1a:22:94:e2:80:65:d9: 28:69:cc:68:ca:f6:87:f5:3d:74:5a:cd:4c:de:5a:7b:c9:a2: 69:13:77:b9:7c:f8:c7:c1:da:82:42:68:00:2d:be:21:80:2a: 82:b2:0b:dc:36:3c:fb:9b:4e:7a:4a:53:15:f1:9f:cb:bb:34: 02:8d:8a:4c:eb:ce:7f:c2:0f:bd:1c:1f:11:1f:ae:0a:fc:e7: 27:8a:c4:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES4/SCueKlDiRggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWE1MDYyNjAtMzI4Ni00ZGU0LWIzZTMtY2JkZmU0MjQ0MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFfe7oqCfQeVRT7Bz6KVgurksBA2jiYWctUe c6NZI4ArLJnequmPiZsjf1qWGUR+mlZ5EImQdhGF8Av+QCa1fSZPjkXQX4SpdyE4 +fRL+ELWIqBUNJd7LuBEGNjdBxxxBwwCA8Zo93oQiDGJ66oL40bq+Xl1GDGgmva5 aM4aMMZe1jV5jSSbjnPICIGMuZtRUQ3jXTYIlHBJzj59ooqLNt9Bt5ua8fqvTXGQ OL3dwId5zL241+g1hIQmkPx+48ihMRbfizCERAB/R/BHj1XxHMNxuR5zEgyw/Kkm WOHcpjgB0rPo8PQoY4wz/lKOi1iuj6pdFKDPZEQDzxVJ+UM+HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9z/iMOZBaN7GSH43MPTI9A7AH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzM1MjczZWUtYTY3Yi0z ODlhLWFiZWQtZTJmNTM2NzYxMjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5MMgYTVmAUItkbmfeiAbDqhmCd8VGPcdo1a7oUcwukncXzNlVSbcvv 2fDSLLusv0mDvsSk2N0vOWu0CUQ4gmj0QNHeWJgQAK5Re4EtkAurJVxgud2pNnhF W/3+nf33rhJkg1K8Eu5FgV/0a4Js+vahr8uk185Wy2ACjXgAFSO0RDriIAvkKoGB t8w2jdAbV2tWvyM0a2QEGFCZzMSsyemJp6ZLz9WDum2WZakjGiKU4oBl2ShpzGjK 9of1PXRazUzeWnvJomkTd7l8+MfB2oJCaAAtviGAKoKyC9w2PPubTnpKUxXxn8u7 NAKNikzrzn/CD70cHxEfrgr85yeKxFI= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:43 2025 by rpki-client