$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa File: f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa (raw, json) Hash identifier: ORnwC/P8xss4p1ruxvw1mL3i+X9dcSnN72AGDN1Fji8= Subject key identifier: D4:CF:D1:3E:0A:12:61:45:36:3F:E9:11:35:38:51:9D:48:C0:14:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB92839674DC877BE2940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.66.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:28:39:67:4d:c8:77:be:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=b542145b-f601-4adb-9783-9e0a99254d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:ac:aa:3b:7b:96:a4:df:13:77:fd:4c:56: 96:c0:8a:58:34:b1:db:d7:bc:28:48:bb:f0:94:71: b5:e3:0d:d9:95:7b:02:f5:de:0a:23:c5:c8:fc:08: 2d:83:25:df:aa:54:74:94:68:99:da:53:c6:3b:12: fa:ef:62:4e:82:44:69:41:f1:00:16:d7:4c:d6:12: 50:84:23:a0:72:ca:9f:9d:b9:3b:a4:03:38:56:5b: 27:7b:72:74:36:e4:ef:96:37:c6:2f:24:80:b1:a9: 07:a2:0a:23:de:2e:64:98:a7:84:4d:fa:36:79:55: 51:a2:33:82:f7:31:ff:60:c0:83:67:45:64:33:e7: bc:61:48:cf:e8:2a:35:d9:36:37:a0:59:71:c0:90: a7:e8:42:dc:d2:e6:85:75:8d:b3:99:be:f7:79:42: fb:92:da:f2:f6:16:91:ef:77:59:fe:4e:65:5d:7e: fd:af:2c:94:67:36:3d:13:0b:a1:76:eb:b0:79:bf: 83:99:4b:0c:0c:ec:b7:1e:c9:38:70:5f:af:2e:7f: 26:16:91:e2:bd:89:12:15:bc:8c:09:74:36:87:a0: 4f:4c:7d:2b:f0:c7:9d:f9:98:44:e0:a3:f1:6e:a1: 9a:20:d8:24:cd:21:26:76:d1:d3:31:86:a4:9f:5a: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CF:D1:3E:0A:12:61:45:36:3F:E9:11:35:38:51:9D:48:C0:14:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6b:49:9e:fc:75:c1:7d:6b:5d:26:16:89:cb:63:8d:46:2a: ef:d8:27:59:df:7b:9e:19:11:6b:04:79:67:b1:79:cc:fe:f2: c8:17:19:9c:1d:fd:c0:d6:f4:7a:ba:be:7b:01:be:66:34:c3: 67:f2:b1:fd:68:6c:21:e1:b2:47:28:c1:5a:74:13:aa:1d:cc: fd:c5:18:6e:8f:61:8f:0f:69:b9:d9:d3:30:32:74:2b:98:70: 7f:f9:3e:35:cb:2f:dc:64:f3:f9:20:a5:18:ce:e4:18:38:70: 91:6a:30:11:4a:90:de:9e:c1:e7:06:cf:df:b9:4c:8e:70:45: b3:c1:48:73:33:90:22:2a:62:05:eb:64:b2:62:f1:c8:a8:c3: 61:f4:b4:bb:91:f0:27:ec:c3:de:bc:c0:0c:3f:c3:ea:af:e6: 42:59:49:e0:28:2d:8a:e6:e9:76:30:1f:9a:53:a8:97:60:ed: ee:18:62:e9:6d:9c:9a:45:f1:c0:36:40:2d:66:36:b5:29:eb: b3:43:40:e4:bc:82:e6:1c:b8:f4:bd:c9:37:ec:29:38:d3:1d: 04:d1:e6:fc:42:0b:9e:23:ad:25:02:e9:14:d5:e5:4e:00:d5: 4b:6b:3f:c4:c5:c1:44:7e:dd:f1:14:73:b5:09:01:49:a3:df: 53:9f:18:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7koOWdNyHe+KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YjU0MjE0NWItZjYwMS00YWRiLTk3ODMtOWUwYTk5MjU0ZDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3+sqjt7lqTfE3f9TFaWwIpYNLHb17woSLvw lHG14w3ZlXsC9d4KI8XI/AgtgyXfqlR0lGiZ2lPGOxL672JOgkRpQfEAFtdM1hJQ hCOgcsqfnbk7pAM4Vlsne3J0NuTvljfGLySAsakHogoj3i5kmKeETfo2eVVRojOC 9zH/YMCDZ0VkM+e8YUjP6Co12TY3oFlxwJCn6ELc0uaFdY2zmb73eUL7ktry9haR 73dZ/k5lXX79ryyUZzY9Ewuhduuweb+DmUsMDOy3Hsk4cF+vLn8mFpHivYkSFbyM CXQ2h6BPTH0r8Med+ZhE4KPxbqGaINgkzSEmdtHTMYakn1prMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTP0T4KEmFFNj/pETU4UZ1IwBRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjEwYWNmNmMtYjBmOS0z YWE0LTllOGMtZTNhOGU0ZjkyNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZrSZ78dcF9a10mFonLY41GKu/YJ1nfe54ZEWsEeWexecz+8sgXGZwd /cDW9Hq6vnsBvmY0w2fysf1obCHhskcowVp0E6odzP3FGG6PYY8PabnZ0zAydCuY cH/5PjXLL9xk8/kgpRjO5Bg4cJFqMBFKkN6ewecGz9+5TI5wRbPBSHMzkCIqYgXr ZLJi8ciow2H0tLuR8Cfsw968wAw/w+qv5kJZSeAoLYrm6XYwH5pTqJdg7e4YYult nJpF8cA2QC1mNrUp67NDQOS8guYcuPS9yTfsKTjTHQTR5vxCC54jrSUC6RTV5U4A 1UtrP8TFwUR+3fEUc7UJAUmj31OfGKo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:39 2025 by rpki-client