$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa File: 62f0b57b-daef-3027-8cda-e48512f11a8b.roa (raw, json) Hash identifier: ZujF7/csW2609R4UpExApAGvo9ieAsN1NCFK/UEWxqg= Subject key identifier: D2:18:3F:71:E3:4D:D8:5C:4C:AC:A0:05:8E:23:B9:FA:30:EB:C1:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93C9F27A487DB509E1CF60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa Signing time: Thu 06 Feb 2025 18:13:46 +0000 ROA not before: Thu 06 Feb 2025 18:13:46 +0000 ROA not after: Wed 07 May 2025 17:13:46 +0000 asID: 7029 IP address blocks: 69.66.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:c9:f2:7a:48:7d:b5:09:e1:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:46 2025 GMT Not After : May 7 17:13:46 2025 GMT Subject: CN=b7ac4773-c834-49f6-9b1b-9433a7ced784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:55:b4:b9:2a:bc:70:c5:38:69:70:c6:96: 76:07:28:22:e1:ca:78:eb:51:6a:19:a9:32:6f:15: d4:07:a8:43:ef:e5:1f:71:56:be:f8:d6:14:13:5f: 6b:17:27:8b:3e:89:cb:a5:3d:0a:71:62:fc:c2:92: 00:1f:02:63:8c:4a:24:32:d6:37:d0:0c:fe:7b:3c: e6:2c:3f:3a:99:61:c4:8c:8e:9c:f5:24:cd:4a:a6: 0d:8c:c8:9a:d4:2f:35:2e:63:7f:e9:a8:49:fe:96: 93:7a:37:36:d3:14:ef:3a:5b:b3:20:c1:fa:e7:e9: 30:99:40:af:3e:79:9a:0a:12:b4:36:0c:f7:2c:2b: a3:5e:33:41:46:3d:2d:e7:b5:62:d0:93:c8:9a:2c: a6:20:78:c4:b9:ec:7e:49:ff:41:1c:8a:0f:d0:54: 6f:15:38:e9:9e:dd:a9:86:42:85:3f:8f:5c:07:5a: 0e:d8:c8:ed:a4:66:4e:26:0c:22:9a:0c:c2:51:11: fb:9b:42:4e:f0:92:9c:af:0f:52:64:67:7f:60:76: c3:57:36:b9:49:f0:92:97:a9:8d:cf:b8:c0:9f:bc: 5b:86:8d:2e:bf:73:a6:59:05:8b:7b:00:2c:8d:e1: 4d:f2:11:81:66:ec:0b:fb:de:f3:f8:1b:51:39:a5: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:3F:71:E3:4D:D8:5C:4C:AC:A0:05:8E:23:B9:FA:30:EB:C1:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/62f0b57b-daef-3027-8cda-e48512f11a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:90:cf:51:e7:89:9d:7c:f3:08:89:04:d6:54:fb:2f:5a:6e: 41:00:85:36:de:69:a5:96:64:4c:75:9d:56:e3:87:33:9a:d6: e5:00:00:3e:ab:9c:c0:ef:f5:74:bd:da:de:b5:95:df:86:78: 08:ff:96:c0:63:f9:0c:2f:55:22:13:0d:ea:ea:42:45:bc:ea: ac:87:e0:4c:24:97:e8:9f:c8:6b:04:9c:78:f4:dd:ad:97:45: c3:e5:ed:c0:2a:c6:87:74:df:b1:3f:ef:12:c7:76:66:3c:98: c5:2e:20:2e:24:92:b2:42:19:6d:d5:62:a1:1b:88:96:c7:bb: cf:86:fd:42:7f:87:38:e8:5d:55:ed:8c:5b:e8:bc:59:a5:e6: ce:ad:6e:2b:87:f4:7b:b1:d1:c4:23:25:db:9c:cf:46:56:07: a2:72:81:05:5b:db:86:47:11:b0:78:d7:81:15:1e:ae:50:1f: 37:d7:f7:e3:4e:fe:a0:12:7a:c2:e4:1c:ff:07:24:73:cd:85: 74:6f:9c:c9:ee:44:0c:40:f8:c9:c3:f6:40:3e:65:f1:06:11: 44:28:84:6f:42:f7:8b:1d:7c:36:2b:de:3a:de:c3:bc:ca:8d: 59:37:db:f2:6d:f8:30:c0:66:fb:91:a9:c2:89:d7:fe:39:4e: a8:8a:19:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk8nyekh9tQnhz2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTM0NloXDTI1MDUwNzE3MTM0NlowLzEtMCsGA1UEAxMk YjdhYzQ3NzMtYzgzNC00OWY2LTliMWItOTQzM2E3Y2VkNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ZVtLkqvHDFOGlwxpZ2Bygi4cp461FqGaky bxXUB6hD7+UfcVa++NYUE19rFyeLPonLpT0KcWL8wpIAHwJjjEokMtY30Az+ezzm LD86mWHEjI6c9STNSqYNjMia1C81LmN/6ahJ/paTejc20xTvOluzIMH65+kwmUCv PnmaChK0Ngz3LCujXjNBRj0t57Vi0JPImiymIHjEuex+Sf9BHIoP0FRvFTjpnt2p hkKFP49cB1oO2MjtpGZOJgwimgzCURH7m0JO8JKcrw9SZGd/YHbDVza5SfCSl6mN z7jAn7xbho0uv3OmWQWLewAsjeFN8hGBZuwL+97z+BtROaVn1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIYP3HjTdhcTKygBY4jufow68E5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjJmMGI1N2ItZGFlZi0z MDI3LThjZGEtZTQ4NTEyZjExYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRUKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiQz1HniZ188wiJBNZU+y9abkEAhTbeaaWWZEx1nVbjhzOa1uUAAD6r nMDv9XS92t61ld+GeAj/lsBj+QwvVSITDerqQkW86qyH4Ewkl+ifyGsEnHj03a2X RcPl7cAqxod037E/7xLHdmY8mMUuIC4kkrJCGW3VYqEbiJbHu8+G/UJ/hzjoXVXt jFvovFml5s6tbiuH9Hux0cQjJducz0ZWB6JygQVb24ZHEbB414EVHq5QHzfX9+NO /qASesLkHP8HJHPNhXRvnMnuRAxA+MnD9kA+ZfEGEUQohG9C94sdfDYr3jrew7zK jVk32/Jt+DDAZvuRqcKJ1/45TqiKGX4= -----END CERTIFICATE-----Generated at Sun Apr 27 01:35:33 2025 by rpki-client