$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa File: 632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa (raw, json) Hash identifier: ptbBXiExdKR+oRup+sJDou53fwxmEIl+kDD1pooRzqE= Subject key identifier: 23:76:92:C0:35:D2:ED:43:D5:44:2C:16:4C:CB:4C:D5:39:B5:1C:A2 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE8EEDAFE0B5D548DEA90 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:ee:da:fe:0b:5d:54:8d:ea:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=521f8dca-10a5-4edb-9452-4eebb7ef31fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:fa:34:7f:da:5c:97:aa:03:f9:22:9a:33: ae:0e:9a:79:55:3f:67:3d:2a:3b:1c:0d:bc:f6:bf: dc:6d:3d:1b:68:89:93:7a:eb:58:ca:b0:86:33:85: 15:c3:e3:a7:35:e1:89:93:8b:2d:5b:ce:74:b4:64: e5:29:88:bc:0f:37:15:ea:bc:3a:ea:9a:d8:00:37: 82:e1:c0:50:78:ba:ec:c4:87:12:1c:80:1c:13:c7: 9e:a6:f2:70:64:89:85:6c:59:1a:0b:31:28:4a:e7: 03:15:46:c2:71:91:3c:82:50:45:22:19:da:5f:4c: e9:a3:83:c0:8b:45:1b:cc:92:2a:8c:d3:80:3e:8f: c6:a2:06:8e:cf:dd:6f:51:e7:09:d8:ba:86:c0:4f: 1d:4e:ab:6f:cd:3e:67:4f:c9:3f:49:2d:89:0c:fe: c9:06:13:74:d9:24:3b:1c:0f:83:5d:b6:85:c1:26: 85:3b:0b:86:d2:c9:96:fe:c9:f3:d3:8a:3c:78:3b: 43:06:5e:ad:0a:6b:ac:77:d6:9c:ee:c4:2f:22:01: 8f:4f:b4:0e:e5:cd:b3:55:ae:dd:75:08:e4:00:66: ab:5d:13:a1:09:3e:bf:8a:26:d1:59:a7:9d:ab:45: 4a:ee:e8:95:f8:c8:ef:d2:bf:45:09:35:42:ad:27: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:92:C0:35:D2:ED:43:D5:44:2C:16:4C:CB:4C:D5:39:B5:1C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/632209ad-4a4e-3134-a5ca-73ab037c2ebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:62:53:50:b3:02:ff:98:c6:57:6a:d5:1d:6f:a5:bb:a1:b6: 5d:ec:45:ab:23:91:4c:c5:e0:7c:54:d8:c9:93:26:61:ea:59: 47:3c:7b:6c:20:de:11:7d:94:03:27:c8:7b:41:27:8a:0a:a8: 7a:42:49:ed:25:65:7a:d3:fe:fc:28:6c:2d:b8:07:34:59:ae: 6f:0d:84:0c:e3:a4:34:90:1a:8f:9e:93:0e:80:ad:99:05:14: 08:ee:ed:aa:10:7a:cc:d3:70:db:70:43:3b:51:4f:d2:c6:5e: 6d:a2:8e:61:99:77:5c:cb:8b:a4:d9:e2:fa:ce:0c:61:01:92: bc:66:2f:d2:a3:8e:ab:3b:9e:49:d3:5a:d2:47:e1:9a:c6:04: b2:a4:8b:9e:fc:b6:76:9d:69:88:e3:52:4b:a3:2d:1d:2d:54: 45:11:12:c7:21:a2:9e:ab:3d:8e:68:cd:80:09:5b:7b:a7:9d: 8d:d1:dd:56:86:2d:19:7d:ff:37:ea:09:64:db:67:97:30:61: 4b:f5:a6:85:b1:40:53:ee:c8:d4:8f:7c:24:f1:86:73:64:88: 1a:ea:24:f0:65:12:4a:82:92:93:c9:24:85:02:94:d4:cb:e9: f1:53:96:dd:ed:23:2d:84:e9:c6:92:15:c3:bc:4b:79:6b:bf: f2:84:5e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+ju2v4LXVSN6pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk NTIxZjhkY2EtMTBhNS00ZWRiLTk0NTItNGVlYmI3ZWYzMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirP6NH/aXJeqA/kimjOuDpp5VT9nPSo7HA28 9r/cbT0baImTeutYyrCGM4UVw+OnNeGJk4stW850tGTlKYi8DzcV6rw66prYADeC 4cBQeLrsxIcSHIAcE8eepvJwZImFbFkaCzEoSucDFUbCcZE8glBFIhnaX0zpo4PA i0UbzJIqjNOAPo/GogaOz91vUecJ2LqGwE8dTqtvzT5nT8k/SS2JDP7JBhN02SQ7 HA+DXbaFwSaFOwuG0smW/snz04o8eDtDBl6tCmusd9ac7sQvIgGPT7QO5c2zVa7d dQjkAGarXROhCT6/iibRWaedq0VK7uiV+Mjv0r9FCTVCrSdHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN2ksA10u1D1UQsFkzLTNU5tRyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvNjMyMjA5YWQtNGE0ZS0z MTM0LWE1Y2EtNzNhYjAzN2MyZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpiU1CzAv+Yxldq1R1vpbuhtl3sRasjkUzF4HxU2MmTJmHqWUc8e2wg 3hF9lAMnyHtBJ4oKqHpCSe0lZXrT/vwobC24BzRZrm8NhAzjpDSQGo+ekw6ArZkF FAju7aoQeszTcNtwQztRT9LGXm2ijmGZd1zLi6TZ4vrODGEBkrxmL9Kjjqs7nknT WtJH4ZrGBLKki578tnadaYjjUkujLR0tVEUREschop6rPY5ozYAJW3unnY3R3VaG LRl9/zfqCWTbZ5cwYUv1poWxQFPuyNSPfCTxhnNkiBrqJPBlEkqCkpPJJIUClNTL 6fFTlt3tIy2E6caSFcO8S3lrv/KEXio= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:55 2025 by rpki-client