$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa File: cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa (raw, json) Hash identifier: hFe83jUPTKH/5gnYjJgDIfi+SW3/b5o6zbCq6GbiEbY= Subject key identifier: C1:09:15:D7:45:C7:75:81:0B:2C:C5:55:8E:44:D2:C1:77:37:28:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CC7BA77B44008E9A27F7AC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 397889 IP address blocks: 66.19.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:a7:7b:44:00:8e:9a:27:f7:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=718d91c6-4b7c-4e2e-aa0e-1399a30bf69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:ee:5c:64:9c:d2:9c:45:de:3e:a4:eb:85: 20:98:52:76:c6:79:74:1b:c5:c5:21:8a:56:e0:0a: 2d:f0:60:1e:14:42:0c:a7:9c:8e:d0:16:0b:86:e8: 46:68:5e:28:42:49:39:d5:b3:7d:07:73:2f:ea:79: b8:71:ff:5e:be:81:bd:f3:bc:88:93:86:be:27:67: 7c:9a:5c:16:ce:26:d8:f7:1f:01:82:1d:20:6d:5e: 01:5e:c9:05:6d:2b:a5:fe:9a:00:a4:ba:f8:ba:29: d1:ff:3e:65:53:61:9f:5c:7d:90:5f:e2:55:ce:e6: 00:8c:57:1e:e2:b0:ea:55:b0:c2:98:ca:75:74:c2: 90:63:3c:e5:9c:5c:ae:c4:77:ae:4e:4d:12:99:63: 29:42:ac:d0:c2:d9:20:17:54:da:70:a9:39:ea:99: 9f:31:0d:34:75:0e:46:88:21:17:90:16:7a:0d:d2: 4b:10:f0:d2:5f:98:1d:47:d3:aa:f3:64:68:5a:b6: d4:20:42:be:53:3d:d2:ac:0a:ce:99:16:75:c6:53: f2:86:78:32:70:b4:d0:bb:b3:5c:4b:ab:1a:25:b0: 54:b6:15:f2:22:6f:73:e5:74:82:2e:e7:76:82:57: 57:51:68:8f:ad:62:d9:e1:13:9b:8b:5d:95:b1:9e: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:15:D7:45:C7:75:81:0B:2C:C5:55:8E:44:D2:C1:77:37:28:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cdfaef2d-5be9-3f6e-b693-1c0c640702a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:68:1b:aa:00:e2:b9:f9:7e:39:28:bc:b7:11:76:f1:d9:c7: 7a:1f:13:c4:8d:76:df:ba:7e:28:f7:4d:fe:7f:9d:4c:c1:08: f1:34:4f:b9:98:60:6d:55:18:1f:08:85:a9:ce:dd:6c:10:dd: 3f:77:23:cc:e4:54:f5:9e:ec:1a:ad:d2:d3:0c:0e:80:23:d1: 7e:2b:5b:95:f4:5e:cb:ce:8d:ce:66:37:22:91:9b:cc:93:58: c9:13:48:93:e8:3d:33:36:ca:03:7b:f7:9a:03:b8:aa:fd:c0: e1:50:96:99:93:2f:0f:26:1c:d0:4d:fb:91:c1:99:b5:c2:14: 49:9a:58:dc:76:2a:ee:01:90:bf:8b:bb:9c:6d:e1:b5:ae:88: 68:d6:c1:e5:a5:4a:0b:93:e1:5d:b1:b8:a0:3d:e5:ac:89:d9: be:ed:7f:f9:a1:d7:fe:02:8c:9b:5b:b4:ad:90:69:64:c1:d6: 98:55:45:d4:cf:5c:b6:74:e9:c9:59:44:57:98:71:3c:34:54: 5a:80:b2:a2:05:18:d3:a7:eb:25:6d:36:fe:33:a7:6f:a5:51: 91:a4:fa:1d:fa:c2:f5:4e:41:97:b9:73:2e:74:02:1f:f7:a2: 63:37:33:7d:0a:f6:c7:a0:70:fd:94:12:38:25:03:d9:d9:c6: 2b:81:b9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe6d7RACOmif3rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk NzE4ZDkxYzYtNGI3Yy00ZTJlLWFhMGUtMTM5OWEzMGJmNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL/uXGSc0pxF3j6k64UgmFJ2xnl0G8XFIYpW 4Aot8GAeFEIMp5yO0BYLhuhGaF4oQkk51bN9B3Mv6nm4cf9evoG987yIk4a+J2d8 mlwWzibY9x8Bgh0gbV4BXskFbSul/poApLr4uinR/z5lU2GfXH2QX+JVzuYAjFce 4rDqVbDCmMp1dMKQYzzlnFyuxHeuTk0SmWMpQqzQwtkgF1TacKk56pmfMQ00dQ5G iCEXkBZ6DdJLEPDSX5gdR9Oq82RoWrbUIEK+Uz3SrArOmRZ1xlPyhngycLTQu7Nc S6saJbBUthXyIm9z5XSCLud2gldXUWiPrWLZ4RObi12VsZ6uxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJFddFx3WBCyzFVY5E0sF3NygIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RmYWVmMmQtNWJlOS0z ZjZlLWI2OTMtMWMwYzY0MDcwMmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZoG6oA4rn5fjkovLcRdvHZx3ofE8SNdt+6fij3Tf5/nUzBCPE0T7mY YG1VGB8IhanO3WwQ3T93I8zkVPWe7Bqt0tMMDoAj0X4rW5X0XsvOjc5mNyKRm8yT WMkTSJPoPTM2ygN795oDuKr9wOFQlpmTLw8mHNBN+5HBmbXCFEmaWNx2Ku4BkL+L u5xt4bWuiGjWweWlSguT4V2xuKA95ayJ2b7tf/mh1/4CjJtbtK2QaWTB1phVRdTP XLZ06clZRFeYcTw0VFqAsqIFGNOn6yVtNv4zp2+lUZGk+h36wvVOQZe5cy50Ah/3 omM3M30K9segcP2UEjglA9nZxiuBuao= -----END CERTIFICATE-----Generated at Sun Feb 16 20:36:09 2025 by rpki-client