$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa File: 3a16288a-c441-313a-a400-24f9d544cdfa.roa (raw, json) Hash identifier: xLNljQlxFD1+uZq0jkDdhNkn3TUEvRBC2AHcuA8JbeM= Subject key identifier: 1E:10:9D:23:3C:04:84:58:0B:91:91:81:D1:2F:5A:76:76:88:10:E9 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285848E16BE884A728E16354744800 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 33139 IP address blocks: 66.49.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e8:84:a7:28:e1:63:54:74:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=c95f4e11-38ff-4de2-99a9-4796f6fdbfde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:ef:7c:8d:96:20:a1:68:33:a7:82:49:11: 1b:ca:b4:ff:1a:3b:53:33:8b:55:2e:6c:ff:cd:b5: c1:15:1b:be:91:56:90:0a:37:69:7c:74:92:81:1e: ba:3a:f6:a2:ac:d4:4c:a0:9b:6a:59:dd:bb:a9:17: c7:fb:90:53:fe:de:8f:50:32:ca:b3:5f:5f:89:e6: 7e:b4:19:2e:1b:ed:d5:f2:3c:03:32:6b:df:9a:72: 5a:fe:c2:41:ac:78:25:4a:88:43:33:0c:65:8a:f5: c0:25:8e:df:bd:f6:a4:c5:c1:98:6a:bf:a7:27:77: bb:93:a7:22:b9:34:f6:99:f3:94:9f:03:03:00:05: b1:20:b6:8f:76:22:c4:08:8c:32:9f:50:83:78:ec: 38:d0:6b:ca:16:df:b0:b8:65:81:c3:e6:65:84:f3: af:e6:69:42:b3:b3:17:9e:ae:7f:54:4d:ce:7a:8d: 0c:f6:4c:d3:55:d8:fd:47:ac:76:a9:f9:26:d1:33: 8f:22:f9:87:a0:5e:97:e9:9f:28:d0:81:ac:22:69: 4b:38:fa:41:82:bb:30:e4:9d:5a:17:89:59:4e:28: fd:45:b4:d6:a9:cd:03:ba:40:7a:46:fe:71:8e:29: 31:d6:96:1a:38:43:be:5e:13:69:64:d5:25:e0:7f: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:9D:23:3C:04:84:58:0B:91:91:81:D1:2F:5A:76:76:88:10:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/3a16288a-c441-313a-a400-24f9d544cdfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:de:bd:93:b2:a5:e5:01:a9:63:af:cd:51:73:a9:30:d9:33: 63:9d:f4:37:40:8c:50:d2:cb:b8:66:33:af:8c:06:8c:d3:93: ac:0c:2e:2d:b6:bc:d1:d5:56:70:cf:32:ef:c7:f8:27:47:15: 03:90:1f:54:90:f1:49:3d:0a:63:c7:9f:b2:54:6d:33:97:a6: 1e:6f:19:7b:3e:16:57:c7:55:e4:ef:0a:b0:96:01:ee:47:06: dd:a0:46:50:5d:36:cb:34:f6:cb:28:42:6c:92:36:eb:8d:11: 20:5c:75:31:dd:b7:c1:4c:f8:0c:75:69:21:bf:b0:e4:92:47: b3:fb:92:70:18:e8:ae:b4:5a:c8:f3:62:98:17:eb:ac:70:fa: 34:54:81:f8:e5:a3:fe:e6:77:0e:30:46:25:e3:e3:62:d6:85: 11:f5:89:8a:3d:09:0a:f5:b5:59:dd:d5:4f:c1:5c:25:1e:7b: 91:42:ed:15:c4:d5:f6:91:21:9e:55:c6:0b:0a:45:ce:5c:dd: 54:97:93:4f:b0:99:33:62:56:b7:a9:ca:1e:79:4d:76:1a:59: 27:68:7d:1c:ad:b9:1d:e8:6f:58:96:b4:bb:af:81:fa:c7:a9: 61:ad:a1:ef:30:ae:30:23:22:fc:25:bb:2c:9e:b4:ce:54:2e: 95:07:ac:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+iEpyjhY1R0SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk Yzk1ZjRlMTEtMzhmZi00ZGUyLTk5YTktNDc5NmY2ZmRiZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHvvfI2WIKFoM6eCSREbyrT/GjtTM4tVLmz/ zbXBFRu+kVaQCjdpfHSSgR66OvairNRMoJtqWd27qRfH+5BT/t6PUDLKs19fieZ+ tBkuG+3V8jwDMmvfmnJa/sJBrHglSohDMwxlivXAJY7fvfakxcGYar+nJ3e7k6ci uTT2mfOUnwMDAAWxILaPdiLECIwyn1CDeOw40GvKFt+wuGWBw+ZlhPOv5mlCs7MX nq5/VE3Oeo0M9kzTVdj9R6x2qfkm0TOPIvmHoF6X6Z8o0IGsImlLOPpBgrsw5J1a F4lZTij9RbTWqc0DukB6Rv5xjikx1pYaOEO+XhNpZNUl4H9DewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4QnSM8BIRYC5GRgdEvWnZ2iBDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvM2ExNjI4OGEtYzQ0MS0z MTNhLWE0MDAtMjRmOWQ1NDRjZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQjH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfevZOypeUBqWOvzVFzqTDZM2Od9DdAjFDSy7hmM6+MBozTk6wMLi22 vNHVVnDPMu/H+CdHFQOQH1SQ8Uk9CmPHn7JUbTOXph5vGXs+FlfHVeTvCrCWAe5H Bt2gRlBdNss09ssoQmySNuuNESBcdTHdt8FM+Ax1aSG/sOSSR7P7knAY6K60Wsjz YpgX66xw+jRUgfjlo/7mdw4wRiXj42LWhRH1iYo9CQr1tVnd1U/BXCUee5FC7RXE 1faRIZ5VxgsKRc5c3VSXk0+wmTNiVrepyh55TXYaWSdofRytuR3ob1iWtLuvgfrH qWGtoe8wrjAjIvwluyyetM5ULpUHrFQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:34:50 2025 by rpki-client