$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa File: ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa (raw, json) Hash identifier: oyAecZ3lMy7QF5OTkCWflIqTJCqCATsRPLZYldMnWmw= Subject key identifier: 8F:F7:F0:ED:35:2C:28:22:AD:75:BE:9C:07:42:82:6C:66:6B:D7:5B Certificate issuer: /CN=847c7608-e8de-46e4-803f-28e1912f24ed Certificate serial: 010D0C9F43285849C0A4E7CEEAD502881C262EC0 Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 33139 IP address blocks: 66.49.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e7:ce:ea:d5:02:88:1c:26:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=eaf8b949-9c56-45d0-95aa-fab9e6c6b8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6c:91:5a:95:f6:30:1b:d3:d2:7a:d1:2c:08: 32:77:6b:53:c5:70:85:94:45:6d:f8:97:4b:4e:73: f1:27:95:49:db:5d:5f:85:87:53:df:77:4e:41:df: 8d:0b:6d:f0:29:eb:46:e8:5b:c6:48:dc:5a:b9:45: 4a:f5:d0:a6:2a:4d:2b:3b:f4:16:28:9e:25:b5:84: 16:e6:ed:23:55:f9:f0:a1:7b:dd:17:26:28:2d:35: 40:23:e6:73:f5:8a:89:fd:a1:36:6e:3c:0f:4e:07: 17:75:1f:61:b8:bb:8b:d2:f1:84:78:8c:0c:2f:0f: 0e:13:0f:76:5a:80:52:68:97:d5:a4:fd:9b:84:bc: 57:5a:98:c5:09:66:a5:d2:ad:49:a1:4b:e6:3f:0b: ca:a0:00:55:9f:02:5a:b4:6c:8f:77:41:93:73:8b: c6:f5:c1:15:65:7c:c3:97:99:4d:de:48:95:49:63: 0c:65:65:78:1d:f5:7e:b5:8c:24:28:d9:ef:87:8e: 26:cf:1d:ab:b7:6a:80:30:3c:d7:a7:a0:0d:df:19: 9d:68:da:af:25:6c:22:ae:22:32:b1:5e:1f:78:37: 2d:af:c9:89:5f:3f:16:1d:37:e7:47:d9:ad:1c:30: d7:79:9b:3a:32:5c:42:90:16:62:b1:e5:d2:f3:bc: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F7:F0:ED:35:2C:28:22:AD:75:BE:9C:07:42:82:6C:66:6B:D7:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/ce7c0c58-988a-351a-9d02-4c135ad72b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl X509v3 Authority Key Identifier: keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer sbgp-ipAddrBlock: critical IPv4: 66.49.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f7:7c:2d:66:fb:dc:ba:1c:dd:08:5a:83:5e:34:a4:85:dd: 86:4f:1c:2b:3c:57:39:cf:0b:40:f2:e6:2e:7c:a4:9b:98:f4: 36:60:e0:3a:7e:6a:72:47:a4:24:b5:5b:c3:62:6b:25:9f:41: 4b:f2:01:69:be:66:77:90:d1:56:7d:5b:c9:2c:05:84:cf:36: 1d:9f:4e:32:2a:22:c4:72:54:2b:b5:6c:b3:43:31:6f:92:96: f7:9f:b0:20:56:78:e7:c6:93:f3:f5:5c:50:74:3b:e3:66:3b: 41:68:63:ae:e5:6f:db:b7:10:ea:7f:5f:eb:d4:24:c8:f4:4e: d7:69:74:7d:65:13:ed:16:04:f7:67:8c:c0:f1:b3:2d:4c:80: 02:f1:de:c2:a0:b2:1a:c6:04:ef:ae:bd:d0:4f:1c:08:d7:1e: 37:e0:93:2b:34:e5:99:e9:44:dd:cf:09:d3:55:f3:d8:70:7c: a6:ee:c3:04:95:70:7e:98:9a:1d:49:ad:94:4f:aa:4f:c3:e0: 25:90:fd:a2:f8:46:5b:71:b0:a7:69:d5:4e:19:b5:62:b9:4d: 97:8a:66:f4:ba:91:92:e8:19:54:33:7a:a9:55:db:ef:9f:96: e2:a5:35:90:e7:95:be:92:57:d6:95:e1:25:68:d7:ae:01:1e: f8:c6:2f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOfO6tUCiBwmLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ3Yzc2MDgtZThkZS00NmU0LTgwM2YtMjhlMTkxMmYy NGVkMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZWFmOGI5NDktOWM1Ni00NWQwLTk1YWEtZmFiOWU2YzZiOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmyRWpX2MBvT0nrRLAgyd2tTxXCFlEVt+JdL TnPxJ5VJ211fhYdT33dOQd+NC23wKetG6FvGSNxauUVK9dCmKk0rO/QWKJ4ltYQW 5u0jVfnwoXvdFyYoLTVAI+Zz9YqJ/aE2bjwPTgcXdR9huLuL0vGEeIwMLw8OEw92 WoBSaJfVpP2bhLxXWpjFCWal0q1JoUvmPwvKoABVnwJatGyPd0GTc4vG9cEVZXzD l5lN3kiVSWMMZWV4HfV+tYwkKNnvh44mzx2rt2qAMDzXp6AN3xmdaNqvJWwiriIy sV4feDctr8mJXz8WHTfnR9mtHDDXeZs6MlxCkBZiseXS87wiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/38O01LCgirXW+nAdCgmxma9dbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdj NzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUxOTEyZjI0ZWQvY2U3YzBjNTgtOTg4YS0z NTFhLTlkMDItNGMxMzVhZDcyYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODQ3Yzc2MDgtZThkZS00NmU0LTgw M2YtMjhlMTkxMmYyNGVkLzg0N2M3NjA4LWU4ZGUtNDZlNC04MDNmLTI4ZTE5MTJm MjRlZC5jcmwwHwYDVR0jBBgwFoAUC5vDig6EO2524ysqfc0IOy/v5RgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NDdjNzYwOC1lOGRlLTQ2ZTQtODAzZi0yOGUx OTEyZjI0ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQjHFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb3fC1m+9y6HN0IWoNeNKSF3YZPHCs8VznPC0Dy5i58pJuY9DZg4Dp+ anJHpCS1W8NiayWfQUvyAWm+ZneQ0VZ9W8ksBYTPNh2fTjIqIsRyVCu1bLNDMW+S lvefsCBWeOfGk/P1XFB0O+NmO0FoY67lb9u3EOp/X+vUJMj0TtdpdH1lE+0WBPdn jMDxsy1MgALx3sKgshrGBO+uvdBPHAjXHjfgkys05ZnpRN3PCdNV89hwfKbuwwSV cH6Ymh1JrZRPqk/D4CWQ/aL4RltxsKdp1U4ZtWK5TZeKZvS6kZLoGVQzeqlV2++f luKlNZDnlb6SV9aV4SVo164BHvjGL2M= -----END CERTIFICATE-----Generated at Sat May 10 15:11:07 2025 by rpki-client