$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/271671f3-41a6-3b95-b4f4-5d9aec0d03e4.roa File: 271671f3-41a6-3b95-b4f4-5d9aec0d03e4.roa (raw, json) Hash identifier: b1hCmwU4A22rqLEdabFodf4hMYkJ0tzfkzKcHWVdu6M= Subject key identifier: 8D:7A:A8:AF:85:71:98:0C:78:63:EB:5B:FA:53:D6:FE:68:0A:9B:D3 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE8DE9B5F8CC5491C2D40 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/271671f3-41a6-3b95-b4f4-5d9aec0d03e4.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:de:9b:5f:8c:c5:49:1c:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=8374f125-4c8e-4085-b280-7df0d4583605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:04:41:8d:ce:b3:24:af:77:f3:e1:7c:e1: d3:c6:31:0f:9e:5f:b5:be:a9:e0:92:d7:fe:d7:ad: 29:1a:db:76:ec:95:61:1c:23:64:84:a6:42:7f:61: 5c:1a:ab:40:98:d8:b5:64:99:e1:4b:35:5d:31:eb: 08:b5:fc:b7:86:96:3b:7a:12:29:d3:a1:e7:04:b4: e4:ba:42:45:88:5e:8e:2e:b3:2d:46:a9:30:0e:ed: d8:f8:ea:fe:81:e0:c6:c0:6d:10:1f:43:e6:d7:eb: 69:61:64:03:a7:db:0e:61:51:df:c4:96:14:02:af: 96:0e:34:56:3b:f0:89:03:d2:e1:74:df:26:29:24: c2:10:74:bd:4c:23:6e:35:3d:b2:92:e7:28:45:e6: 74:b2:49:8e:07:e5:20:59:fe:f9:60:8f:17:c1:08: f5:d2:f4:aa:90:18:6a:4d:93:da:4b:82:d5:b6:8d: 66:8b:0c:5e:66:56:0e:68:28:16:f8:f1:c2:33:74: 37:e3:6e:de:62:c2:96:57:a8:c1:e1:1b:e8:ea:7e: 94:c0:c8:54:26:23:66:11:e9:99:e3:e7:77:ad:6d: fd:6c:a3:38:54:c5:80:db:37:3d:b5:a8:20:06:fa: 71:d3:95:48:c6:14:ed:a3:81:e9:69:c9:91:75:e6: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7A:A8:AF:85:71:98:0C:78:63:EB:5B:FA:53:D6:FE:68:0A:9B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/271671f3-41a6-3b95-b4f4-5d9aec0d03e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5e:7c:98:c1:80:b4:4b:c8:6e:d5:aa:90:2d:7d:a8:c0:03: 83:86:15:8c:87:1d:d1:3a:12:83:c5:68:08:56:71:ce:5e:60: e0:0b:60:e8:9c:ee:41:f3:ce:cf:46:e8:6b:04:77:5c:05:ff: 93:f4:ab:ec:a1:df:8f:3a:9e:3e:16:4e:c3:db:75:73:34:6a: 58:49:03:0e:e4:c8:ba:a1:f5:11:ec:48:85:76:42:60:b1:0f: 81:85:5a:df:e8:93:64:1d:3e:67:ac:34:26:b3:cc:33:60:34: 1d:2e:fc:13:1b:a9:a4:86:6f:88:5d:3d:87:89:43:85:26:11: f9:18:8d:33:54:a7:74:35:e2:3f:c7:94:17:d8:cc:b5:d1:8a: 72:dc:60:7b:44:41:e0:48:cf:17:0b:93:95:5d:bf:bb:b1:ca: 6d:33:8c:c9:e5:3c:77:55:6f:8a:41:78:c9:0e:a4:61:92:0f: db:a6:75:5f:23:af:8e:f3:e0:35:8d:19:8d:5d:3e:3a:b5:2c: 4e:f0:f8:ca:6a:35:1c:05:ae:c7:4a:0c:6f:f2:96:86:59:a5: 64:45:95:23:8e:dd:db:2a:1f:fb:84:7e:b6:19:4e:b6:5a:46: 5d:a3:ba:98:22:c1:37:c9:e7:3f:ef:9d:ed:a3:58:93:18:34: ca:16:c3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+jem1+MxUkcLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODM3NGYxMjUtNGM4ZS00MDg1LWIyODAtN2RmMGQ0NTgzNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpsEQY3OsySvd/PhfOHTxjEPnl+1vqngktf+ 160pGtt27JVhHCNkhKZCf2FcGqtAmNi1ZJnhSzVdMesItfy3hpY7ehIp06HnBLTk ukJFiF6OLrMtRqkwDu3Y+Or+geDGwG0QH0Pm1+tpYWQDp9sOYVHfxJYUAq+WDjRW O/CJA9LhdN8mKSTCEHS9TCNuNT2ykucoReZ0skmOB+UgWf75YI8XwQj10vSqkBhq TZPaS4LVto1miwxeZlYOaCgW+PHCM3Q3427eYsKWV6jB4Rvo6n6UwMhUJiNmEemZ 4+d3rW39bKM4VMWA2zc9taggBvpx05VIxhTto4HpacmRdeZgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI16qK+FcZgMeGPrW/pT1v5oCpvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMjcxNjcxZjMtNDFhNi0z Yjk1LWI0ZjQtNWQ5YWVjMGQwM2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRefJjBgLRLyG7VqpAtfajAA4OGFYyHHdE6EoPFaAhWcc5eYOALYOic 7kHzzs9G6GsEd1wF/5P0q+yh3486nj4WTsPbdXM0alhJAw7kyLqh9RHsSIV2QmCx D4GFWt/ok2QdPmesNCazzDNgNB0u/BMbqaSGb4hdPYeJQ4UmEfkYjTNUp3Q14j/H lBfYzLXRinLcYHtEQeBIzxcLk5Vdv7uxym0zjMnlPHdVb4pBeMkOpGGSD9umdV8j r47z4DWNGY1dPjq1LE7w+MpqNRwFrsdKDG/yloZZpWRFlSOO3dsqH/uEfrYZTrZa Rl2jupgiwTfJ5z/vne2jWJMYNMoWwzQ= -----END CERTIFICATE-----Generated at Sat Apr 5 05:22:21 2025 by rpki-client