$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa File: 38470f8d-5686-30f7-9170-22f3bc850829.roa (raw, json) Hash identifier: PK6cUGKk+BN6WFJ+Vy0weVG3ms52OsDpJEmNEPfZOI0= Subject key identifier: 5A:7A:67:89:AB:D4:ED:5B:11:4C:92:07:F8:DA:5D:36:93:BD:96:2D Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE8CFF5F24AAEB0C2FF60 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:cf:f5:f2:4a:ae:b0:c2:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=ec5f7c60-e6fe-4098-a1b6-c563935683d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c0:6b:79:fd:e7:02:35:3c:30:32:89:3e:92: 14:75:83:05:90:0c:39:70:ba:eb:5e:e3:cd:0f:3d: 6f:3d:5e:a5:34:16:48:73:31:f5:b8:c4:19:98:ca: 54:19:41:0b:10:01:7d:a0:06:55:e4:4e:7f:b5:20: 2c:b1:c0:8f:e7:fd:0a:2f:a9:b8:4a:32:84:26:0b: bf:f6:da:03:a6:9a:6f:82:7c:35:23:21:dd:eb:18: 84:fe:fb:64:82:d1:5f:7a:0d:0b:a6:13:2c:da:4a: 41:09:2d:26:b1:af:01:c6:4b:69:4a:9b:ea:e4:7a: 3d:12:10:67:90:b8:78:0c:a7:66:12:87:f9:9a:0c: 4b:8e:69:dc:ba:28:ea:dd:87:d9:c3:ef:a9:a7:07: c0:7e:88:ca:0d:38:be:24:c6:25:2f:2c:e1:fb:4c: 94:89:e1:1c:cf:d4:31:90:91:b5:9e:b7:81:e5:e6: 68:3b:fc:53:2f:69:97:6c:0f:98:af:f6:eb:ed:56: b0:83:27:65:d3:fe:4b:87:70:67:46:f0:03:6e:ba: f4:5c:c0:6f:f3:a8:84:ee:69:2c:60:97:05:7b:2a: 99:53:02:f1:eb:86:94:d5:84:dd:e0:1e:9c:4e:df: 92:33:7b:7f:b7:77:bf:3e:a9:69:b7:b6:2b:92:59: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:67:89:AB:D4:ED:5B:11:4C:92:07:F8:DA:5D:36:93:BD:96:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/38470f8d-5686-30f7-9170-22f3bc850829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:af:00:75:cf:e1:90:58:cf:b9:9d:e0:a8:39:10:bd:d3: 4c:f9:01:ae:86:c1:fd:f5:ce:30:9e:43:8e:0e:35:c3:a4:5d: 5a:61:5b:04:58:b5:8d:f3:59:d4:8c:39:90:47:8c:18:05:49: 82:42:e0:e8:55:63:bd:22:39:e6:a6:7a:6e:41:fe:43:52:f6: 4c:22:a6:0b:61:52:ba:a1:c5:8f:65:b3:7e:92:15:44:97:0d: 07:52:75:0d:d8:ad:02:9e:d9:53:4a:59:5e:33:ba:0d:dd:ac: f4:73:16:cc:d7:f4:41:37:1b:67:d3:80:ce:ca:0b:4f:39:ab: d6:c3:04:d3:c5:91:11:0e:87:70:ef:da:64:f5:8c:ea:7c:87: 9a:20:ef:94:da:88:0a:43:1d:30:bb:3b:85:a9:2b:5d:36:a9: 16:58:d1:b9:e8:b3:6a:83:3f:e7:0d:9d:9a:8c:f3:d7:53:71: ad:79:34:c6:a6:bc:c3:c8:4e:ba:03:eb:a3:df:1a:5a:5c:1f: f5:8c:51:8a:4a:ff:f0:a4:ac:d6:cf:2f:67:87:5d:57:9c:78: 98:3f:a0:b8:c8:c0:a6:64:8d:67:e0:cc:80:88:a0:91:c6:1e: 90:83:60:01:d6:3f:a2:4a:6e:9e:91:03:32:12:d6:69:14:df: 72:3a:77:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+jP9fJKrrDC/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWM1ZjdjNjAtZTZmZS00MDk4LWExYjYtYzU2MzkzNTY4M2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsBref3nAjU8MDKJPpIUdYMFkAw5cLrrXuPN Dz1vPV6lNBZIczH1uMQZmMpUGUELEAF9oAZV5E5/tSAsscCP5/0KL6m4SjKEJgu/ 9toDpppvgnw1IyHd6xiE/vtkgtFfeg0LphMs2kpBCS0msa8BxktpSpvq5Ho9EhBn kLh4DKdmEof5mgxLjmncuijq3YfZw++ppwfAfojKDTi+JMYlLyzh+0yUieEcz9Qx kJG1nreB5eZoO/xTL2mXbA+Yr/br7Vawgydl0/5Lh3BnRvADbrr0XMBv86iE7mks YJcFeyqZUwLx64aU1YTd4B6cTt+SM3t/t3e/Pqlpt7YrklmYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp6Z4mr1O1bEUySB/jaXTaTvZYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMzg0NzBmOGQtNTY4Ni0z MGY3LTkxNzAtMjJmM2JjODUwODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA86rwB1z+GQWM+5neCoORC900z5Aa6Gwf31zjCeQ44ONcOkXVphWwRY tY3zWdSMOZBHjBgFSYJC4OhVY70iOeamem5B/kNS9kwipgthUrqhxY9ls36SFUSX DQdSdQ3YrQKe2VNKWV4zug3drPRzFszX9EE3G2fTgM7KC085q9bDBNPFkREOh3Dv 2mT1jOp8h5og75TaiApDHTC7O4WpK102qRZY0bnos2qDP+cNnZqM89dTca15NMam vMPITroD66PfGlpcH/WMUYpK//CkrNbPL2eHXVeceJg/oLjIwKZkjWfgzICIoJHG HpCDYAHWP6JKbp6RAzIS1mkU33I6dzY= -----END CERTIFICATE-----Generated at Tue Apr 29 02:57:10 2025 by rpki-client