$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa File: daea1de1-7569-3daa-8660-19d0642dc53d.roa (raw, json) Hash identifier: qY9ufmA6TqRpI5vaTh9RCE26upIiEbIu+hMhXp6xOa8= Subject key identifier: 01:D9:EB:1B:9C:DA:F6:37:D9:AA:0D:72:BC:6A:A5:0A:8E:B2:E7:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB982CB8130E8E06DFF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:82:cb:81:30:e8:e0:6d:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=d8561e04-a2ea-410b-9c76-31609cf755ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:76:25:21:34:e8:95:35:f2:0f:57:b5:14: 3c:5e:68:ad:f9:7d:25:f9:58:27:d6:12:23:f8:11: d8:c1:fd:0e:84:e7:22:19:71:ea:cb:51:52:cd:fa: 85:c7:de:31:11:b3:cf:81:54:c0:e3:ba:8b:07:f2: 78:22:a9:3d:3b:8b:c0:a9:52:e2:3b:3e:eb:65:50: 96:0e:fe:09:21:25:67:76:de:38:ec:d3:b2:08:06: b5:48:43:fb:8d:0b:66:5b:e7:24:3e:dd:d2:88:af: 57:51:ef:b9:6a:04:7c:00:2e:38:c3:b4:c3:ad:a6: a4:a3:e4:4a:81:85:c6:34:43:3f:e0:85:5b:b4:19: 09:12:4a:87:4e:79:19:39:64:f6:ce:d0:1d:fe:52: 6d:a5:aa:ab:6a:ea:67:cf:a4:82:9b:bb:a6:44:4d: 1e:97:ef:af:a9:7a:ea:14:58:52:8d:5a:fa:78:07: 67:f0:7d:f1:f8:61:dc:7f:8c:f0:a3:04:40:2a:e7: e5:f0:e0:87:ca:58:2e:23:d6:14:ed:b5:4c:ed:8d: f9:58:a2:4f:bf:ff:d2:62:36:d2:07:10:2d:d8:27: a9:ad:53:5a:b2:22:3a:f4:c6:b9:de:ff:c3:1d:fb: 0d:40:e0:7c:a7:75:88:55:98:67:10:af:5a:e4:75: e5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D9:EB:1B:9C:DA:F6:37:D9:AA:0D:72:BC:6A:A5:0A:8E:B2:E7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/daea1de1-7569-3daa-8660-19d0642dc53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d3:53:20:71:2e:a5:7e:c9:47:b0:b8:86:3b:a9:54:de:d5: 9e:a8:b8:c8:5b:f4:22:05:40:65:5c:51:fe:46:a0:44:4d:e6: 56:24:86:5b:dc:6d:47:e3:f9:87:c0:f8:02:37:a5:a9:93:76: 5b:5e:f8:12:d8:10:c2:5c:96:c9:31:74:71:05:4c:40:dc:3d: 47:54:f1:91:47:6f:84:1d:90:72:eb:dd:41:e5:a8:25:5f:9c: 0c:fe:c2:25:3d:13:c6:2b:4c:ed:1a:e1:96:50:f5:6c:ef:32: e6:57:7b:ad:5e:45:6c:62:4f:bc:52:b4:39:10:53:44:19:d8: 3c:ae:7c:ad:40:5a:ce:ba:60:47:8c:bb:f4:7a:4e:1f:ea:cc: 01:27:23:59:01:86:00:7e:4e:93:c3:cc:2a:1e:0c:47:5a:71: 54:6c:4f:ed:5b:57:d5:4d:82:88:52:b8:48:be:44:a5:a6:9e: 6d:3c:b8:61:f8:1d:5c:fd:18:d8:05:20:9b:fe:bf:3e:cb:40: 8b:87:80:97:b5:1f:83:c1:28:af:2c:61:2f:eb:b0:50:06:d2: ac:56:8e:00:54:32:3c:9b:d2:3a:b7:75:0c:e5:fc:00:b2:bb: 3f:c6:b7:ba:44:fe:26:3b:e5:21:c9:cd:0f:ed:1e:f6:25:d2: 04:08:b0:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7mCy4Ew6OBt/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDg1NjFlMDQtYTJlYS00MTBiLTljNzYtMzE2MDljZjc1NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOF2JSE06JU18g9XtRQ8Xmit+X0l+Vgn1hIj +BHYwf0OhOciGXHqy1FSzfqFx94xEbPPgVTA47qLB/J4Iqk9O4vAqVLiOz7rZVCW Dv4JISVndt447NOyCAa1SEP7jQtmW+ckPt3SiK9XUe+5agR8AC44w7TDraako+RK gYXGNEM/4IVbtBkJEkqHTnkZOWT2ztAd/lJtpaqraupnz6SCm7umRE0el++vqXrq FFhSjVr6eAdn8H3x+GHcf4zwowRAKufl8OCHylguI9YU7bVM7Y35WKJPv//SYjbS BxAt2CeprVNasiI69Ma53v/DHfsNQOB8p3WIVZhnEK9a5HXlwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHZ6xuc2vY32aoNcrxqpQqOsudDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFlYTFkZTEtNzU2OS0z ZGFhLTg2NjAtMTlkMDY0MmRjNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrTUyBxLqV+yUewuIY7qVTe1Z6ouMhb9CIFQGVcUf5GoERN5lYkhlvc bUfj+YfA+AI3pamTdlte+BLYEMJclskxdHEFTEDcPUdU8ZFHb4QdkHLr3UHlqCVf nAz+wiU9E8YrTO0a4ZZQ9WzvMuZXe61eRWxiT7xStDkQU0QZ2DyufK1AWs66YEeM u/R6Th/qzAEnI1kBhgB+TpPDzCoeDEdacVRsT+1bV9VNgohSuEi+RKWmnm08uGH4 HVz9GNgFIJv+vz7LQIuHgJe1H4PBKK8sYS/rsFAG0qxWjgBUMjyb0jq3dQzl/ACy uz/Gt7pE/iY75SHJzQ/tHvYl0gQIsKI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:42 2025 by rpki-client