$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa File: 10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa (raw, json) Hash identifier: lWgeg31E6jiiGQA3OOGdk8SJME1QSnbREmPfOjoW7VI= Subject key identifier: 5E:F1:A5:76:53:36:EE:88:A6:3F:96:64:C4:30:AB:D2:0B:C3:E5:D2 Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285849C0A4E75C8A217FF6B68B8080 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33139 IP address blocks: 66.49.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e7:5c:8a:21:7f:f6:b6:8b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=458f286c-4238-4490-864a-2ae1e193120a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:ed:b2:df:95:63:15:dd:d2:dd:6e:d7:55: 59:f0:de:9e:3c:35:35:de:bd:d4:13:7d:02:d0:53: 06:9d:f7:59:33:f2:8f:66:7c:6b:51:9b:3b:a1:d5: 24:a2:e9:35:1a:54:cd:53:fb:d7:72:84:f5:cd:24: 53:18:e6:a2:bf:74:ec:3a:a8:e2:2d:f3:7d:ad:41: 00:9f:c3:3f:d8:58:9a:20:eb:c1:30:27:7c:95:1c: e6:3c:b4:dc:d1:3c:f8:fb:c7:30:b1:f4:85:06:ed: bf:9b:e1:dd:27:6f:cd:31:f8:8d:9e:04:35:68:89: 5d:c1:49:47:ae:21:32:30:2f:ab:7b:b1:ef:ff:3c: b6:3c:34:05:18:bc:31:5e:f4:fc:33:7c:16:3e:b4: cd:7b:db:81:bd:60:24:45:ff:93:2c:b2:cd:95:b0: f2:d2:3c:54:a3:39:79:3e:a8:70:0c:e8:67:53:7c: 2a:8d:3e:a0:ab:48:47:d1:bd:18:bc:85:bd:99:b8: a9:1e:44:d4:ea:c8:15:a3:3f:76:75:d1:a9:e7:17: 8d:43:a1:7d:01:ed:05:65:45:5c:39:0d:f9:36:1f: 78:d3:ef:26:00:43:ac:3f:6c:23:c2:21:1f:76:71: f8:c8:4b:30:fc:8f:3a:fb:ff:8d:9e:aa:68:07:8b: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:A5:76:53:36:EE:88:A6:3F:96:64:C4:30:AB:D2:0B:C3:E5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/10b3659b-8a93-3a84-9ba4-ac767c2ba63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f9:51:37:6e:e7:c7:da:48:03:46:e3:13:84:5d:e9:55:ea: 72:2d:4f:de:b2:2e:e8:4d:0f:b7:da:db:ef:83:8f:cf:59:e4: 15:f3:be:b7:68:43:43:c1:e9:34:8c:7d:61:61:a2:ea:03:9d: 10:ea:19:5b:37:b6:ce:83:f6:10:1e:67:fb:76:a0:b2:8b:e4: 09:cd:e6:99:0b:1d:81:64:ca:89:79:25:50:90:ae:e8:a9:5b: 28:cc:09:61:08:9f:29:b2:70:cc:50:ed:b9:22:c1:91:6d:2b: a4:74:4d:00:4d:28:a8:46:90:f4:e1:37:fa:5c:ef:d5:e5:ad: 49:3a:b7:7c:1e:b7:df:24:95:9b:62:b2:d4:3d:2a:61:94:f9: e9:40:39:18:e9:d5:b8:40:4f:07:2f:30:fe:63:90:12:49:8b: b0:cc:86:33:7e:53:9c:76:11:9d:b0:d7:47:6b:04:18:89:15: c3:71:2e:2b:38:04:fd:15:16:42:f7:d0:be:1e:b9:03:bb:3b: eb:62:7b:c0:39:eb:ed:f9:07:30:64:00:d8:6c:58:ac:58:01: 6b:29:e7:ae:51:b8:87:1e:42:ad:d1:61:5a:4a:2d:e8:c3:6e: b3:bd:3a:71:03:af:66:9a:b7:d9:8a:e1:d6:7d:4f:87:54:f2: 89:ce:ac:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOdciiF/9raLgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NDU4ZjI4NmMtNDIzOC00NDkwLTg2NGEtMmFlMWUxOTMxMjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxrtst+VYxXd0t1u11VZ8N6ePDU13r3UE30C 0FMGnfdZM/KPZnxrUZs7odUkouk1GlTNU/vXcoT1zSRTGOaiv3TsOqjiLfN9rUEA n8M/2FiaIOvBMCd8lRzmPLTc0Tz4+8cwsfSFBu2/m+HdJ2/NMfiNngQ1aIldwUlH riEyMC+re7Hv/zy2PDQFGLwxXvT8M3wWPrTNe9uBvWAkRf+TLLLNlbDy0jxUozl5 PqhwDOhnU3wqjT6gq0hH0b0YvIW9mbipHkTU6sgVoz92ddGp5xeNQ6F9Ae0FZUVc OQ35Nh940+8mAEOsP2wjwiEfdnH4yEsw/I86+/+NnqpoB4sZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7xpXZTNu6Ipj+WZMQwq9ILw+XSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvMTBiMzY1OWItOGE5My0z YTg0LTliYTQtYWM3NjdjMmJhNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf5UTdu58faSANG4xOEXelV6nItT96yLuhND7fa2++Dj89Z5BXzvrdo Q0PB6TSMfWFhouoDnRDqGVs3ts6D9hAeZ/t2oLKL5AnN5pkLHYFkyol5JVCQruip WyjMCWEInymycMxQ7bkiwZFtK6R0TQBNKKhGkPThN/pc79XlrUk6t3wet98klZti stQ9KmGU+elAORjp1bhATwcvMP5jkBJJi7DMhjN+U5x2EZ2w10drBBiJFcNxLis4 BP0VFkL30L4euQO7O+tie8A56+35BzBkANhsWKxYAWsp565RuIceQq3RYVpKLejD brO9OnEDr2aat9mK4dZ9T4dU8onOrHY= -----END CERTIFICATE-----Generated at Sat May 10 15:14:14 2025 by rpki-client