$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa File: d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa (raw, json) Hash identifier: vffqXyUnk37uLVkmgrduduEr6x70IyQq8xJtnZHcA14= Subject key identifier: 57:E0:99:77:11:58:C0:15:60:FC:F3:2E:92:31:7D:2A:2C:7E:C1:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EC097093F779EC787500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.64.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ec:09:70:93:f7:79:ec:78:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=edff9cfc-8134-46e0-bce8-069b741904b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:4c:fc:97:23:09:6e:78:12:61:37:cb:36: 33:a6:97:88:b5:c9:7b:ea:78:f8:ae:21:3d:c4:f0: 86:df:c7:4d:d6:32:84:ad:2a:5f:06:56:ed:fb:3e: c1:d6:7e:13:3b:60:47:8d:bd:27:3b:f0:20:2a:21: 12:55:01:22:f2:27:38:06:34:a7:f3:71:ce:47:fc: 47:00:62:3d:45:a1:43:d6:66:a4:ba:9c:9c:8a:7c: 2d:f5:4a:04:cc:b2:2c:ee:3d:d2:04:af:3f:47:bd: 7f:b0:7c:76:c4:e2:1a:8c:af:e3:8b:d5:5d:cb:33: 30:e9:08:c8:26:ef:0d:1c:60:81:aa:3c:02:a3:fe: 1d:df:d9:66:85:9b:0d:bc:0c:1a:db:6f:58:2c:3e: 2f:9c:94:bd:9d:26:e9:52:04:13:93:86:35:2a:7c: 00:1d:8e:7b:4f:ee:d9:19:bf:2c:e7:24:aa:84:b2: a9:90:d8:14:76:81:23:7d:31:97:26:17:bd:aa:b3: 7b:29:c8:f6:85:f2:6a:1e:11:36:38:bd:a4:64:04: c5:4a:74:4b:44:6b:4f:94:d3:f5:6e:d4:f2:6e:ec: 44:d9:e1:7f:64:58:e0:25:8a:d6:4f:ca:ce:9e:21: c4:31:c8:33:9c:a2:bc:7b:ae:2e:13:69:b9:83:9e: e1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:99:77:11:58:C0:15:60:FC:F3:2E:92:31:7D:2A:2C:7E:C1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2fd3424-4710-3e72-bb04-a53e2033ac6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.64.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:dd:e0:55:db:17:2c:b9:a5:a2:e7:2e:5b:c5:6a:ae:fc:6c: 04:90:9b:1a:9d:d0:91:71:2e:d0:3f:3e:04:b5:91:0a:90:51: 9e:00:06:62:ed:78:d1:5b:49:97:c4:37:e0:4e:44:33:8c:2c: f9:a8:38:ab:c0:26:d4:aa:80:fe:67:a9:89:dc:3b:d6:96:2c: c5:80:5e:6a:a3:89:b3:ab:24:61:75:2f:09:5d:8f:df:db:ac: c0:6e:e2:a2:f5:17:a5:5b:83:fd:6d:24:4a:d6:51:42:64:69: 33:96:49:4e:62:75:f3:da:62:5f:98:44:2e:67:37:31:83:43: cd:c0:65:6f:65:9a:29:fc:2f:ba:14:92:0e:b7:9e:4c:03:b6: b2:df:90:7a:6a:4e:55:33:55:b5:64:bc:3e:e9:59:27:35:20: 23:82:07:a5:ad:6e:bf:3a:b4:45:a2:d5:55:98:f6:b7:4b:1e: 33:44:0c:e0:06:b5:d6:d4:7f:e6:a3:f3:52:4a:af:3b:bb:da: a7:95:3a:8a:ac:c3:18:68:60:55:3a:fb:74:60:a3:57:0d:1b: 7d:9a:66:0a:c9:22:43:b5:93:33:aa:01:b4:de:5c:28:3b:8c: 07:7a:f7:90:44:47:01:7d:67:5e:18:a6:59:b7:42:a2:51:56: 95:2f:e8:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOwJcJP3eex4dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWRmZjljZmMtODEzNC00NmUwLWJjZTgtMDY5Yjc0MTkwNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRM/JcjCW54EmE3yzYzppeItcl76nj4riE9 xPCG38dN1jKErSpfBlbt+z7B1n4TO2BHjb0nO/AgKiESVQEi8ic4BjSn83HOR/xH AGI9RaFD1makupycinwt9UoEzLIs7j3SBK8/R71/sHx2xOIajK/ji9VdyzMw6QjI Ju8NHGCBqjwCo/4d39lmhZsNvAwa229YLD4vnJS9nSbpUgQTk4Y1KnwAHY57T+7Z Gb8s5ySqhLKpkNgUdoEjfTGXJhe9qrN7Kcj2hfJqHhE2OL2kZATFSnRLRGtPlNP1 btTybuxE2eF/ZFjgJYrWT8rOniHEMcgznKK8e64uE2m5g57h1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfgmXcRWMAVYPzzLpIxfSosfsEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmZDM0MjQtNDcxMC0z ZTcyLWJiMDQtYTUzZTIwMzNhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQkCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjd4FXbFyy5paLnLlvFaq78bASQmxqd0JFxLtA/PgS1kQqQUZ4ABmLt eNFbSZfEN+BORDOMLPmoOKvAJtSqgP5nqYncO9aWLMWAXmqjibOrJGF1Lwldj9/b rMBu4qL1F6Vbg/1tJErWUUJkaTOWSU5idfPaYl+YRC5nNzGDQ83AZW9lmin8L7oU kg63nkwDtrLfkHpqTlUzVbVkvD7pWSc1ICOCB6Wtbr86tEWi1VWY9rdLHjNEDOAG tdbUf+aj81JKrzu72qeVOoqswxhoYFU6+3Rgo1cNG32aZgrJIkO1kzOqAbTeXCg7 jAd695BERwF9Z14Yplm3QqJRVpUv6GI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:19:05 2025 by rpki-client