$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0518fcb7-80b2-3771-b837-f8965ea7f8fb.roa File: 0518fcb7-80b2-3771-b837-f8965ea7f8fb.roa (raw, json) Hash identifier: LyUPLQAmn7/jTYuVaEN9S4z2SzeEBDK1/ziy7kxehYU= Subject key identifier: 54:12:9A:7B:D1:36:9B:08:F4:7D:20:62:B8:86:91:C9:6C:7F:F6:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A121C536F7E170F2D8880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0518fcb7-80b2-3771-b837-f8965ea7f8fb.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:12:1c:53:6f:7e:17:0f:2d:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bd693d18-4065-4262-a6db-8a62f1bba45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2d:e6:c4:bc:7a:28:1e:3f:a8:c3:84:12:c5: 4e:26:9d:ab:0a:e0:ba:4e:a5:98:47:ac:40:d3:b0: 52:b0:2e:64:17:85:2f:3d:25:cb:a1:ab:ff:0b:97: 99:91:b4:b0:11:76:af:54:dc:09:cd:4b:a9:6f:f0: a6:36:33:04:4b:dd:bb:7d:3b:bc:3e:0a:ca:17:db: 31:31:c9:01:e0:5f:ef:d8:e7:32:5b:c2:95:3f:db: 10:6e:64:81:26:50:db:fd:94:00:b6:8b:74:66:3d: 33:ab:13:ad:97:13:70:87:81:23:a0:25:62:5d:e4: 10:81:8b:23:11:42:cf:27:89:b6:7c:19:c9:b1:f6: ce:74:be:a4:66:47:e0:d3:9d:ce:80:ef:71:4e:2d: a7:ab:9b:12:c4:79:8e:1d:c4:ba:70:83:2a:1b:f3: a2:5f:2f:49:48:cb:1f:1a:7b:df:1a:3a:e9:4e:75: fd:b8:af:48:79:31:e1:13:8b:b4:06:d8:10:1e:83: ed:6d:3e:05:5c:08:60:d6:09:9e:1a:79:9f:b0:8c: b7:7d:fa:35:aa:de:25:2c:91:9f:63:13:b9:b6:a3: fa:49:d3:50:6b:8f:bf:eb:d4:8e:3e:09:c3:f6:e1: 96:0d:59:0a:9b:5a:2e:94:0f:28:06:5e:c5:8f:2c: c5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:12:9A:7B:D1:36:9B:08:F4:7D:20:62:B8:86:91:C9:6C:7F:F6:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0518fcb7-80b2-3771-b837-f8965ea7f8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.155.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:80:f9:d0:a3:4f:a6:54:80:59:85:32:6e:52:54:21:2a:27: 38:9b:f7:df:b6:94:aa:88:eb:e6:c8:27:b8:d2:42:95:b6:02: 5a:50:74:d4:e6:2f:1c:11:36:6e:93:d2:d1:8e:d7:3c:91:c4: 85:69:b2:0d:ab:82:9b:8f:38:5f:6a:d1:d0:15:93:42:f9:5b: 08:01:27:b4:b6:65:f2:be:6b:1d:58:fc:5e:9e:21:76:cc:c5: 7b:5a:77:43:54:76:bc:ca:ea:0d:60:cb:88:84:11:ee:d1:a7: 3a:de:12:8c:b5:3f:bb:04:bf:5a:58:d8:2e:6e:a9:89:4d:db: 09:f3:0c:49:25:eb:de:1a:ab:4a:ed:9d:1c:78:1b:c5:0b:d5: c5:b9:22:e2:0a:7d:5f:a0:98:2e:3e:0f:c6:86:53:d0:e9:a3: 6e:d2:bc:ec:21:50:9b:87:cb:14:cf:79:5f:cf:53:48:a0:35: 04:de:4e:9f:db:bb:93:0f:7b:9f:2c:52:c9:ff:fa:fc:e2:ba: fa:c2:ec:55:cc:76:a3:3d:d3:9a:24:ad:1f:10:4a:d7:8d:01: cd:84:64:af:6b:e5:0c:99:88:b2:94:40:dd:d6:7b:39:2b:e9: f2:c9:47:b7:65:a8:ef:9b:7d:c8:dc:0f:40:27:ba:d4:20:3b: 33:ca:cd:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShIcU29+Fw8tiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmQ2OTNkMTgtNDA2NS00MjYyLWE2ZGItOGE2MmYxYmJhNDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8i3mxLx6KB4/qMOEEsVOJp2rCuC6TqWYR6xA 07BSsC5kF4UvPSXLoav/C5eZkbSwEXavVNwJzUupb/CmNjMES927fTu8PgrKF9sx MckB4F/v2OcyW8KVP9sQbmSBJlDb/ZQAtot0Zj0zqxOtlxNwh4EjoCViXeQQgYsj EULPJ4m2fBnJsfbOdL6kZkfg053OgO9xTi2nq5sSxHmOHcS6cIMqG/OiXy9JSMsf GnvfGjrpTnX9uK9IeTHhE4u0BtgQHoPtbT4FXAhg1gmeGnmfsIy3ffo1qt4lLJGf YxO5tqP6SdNQa4+/69SOPgnD9uGWDVkKm1oulA8oBl7FjyzFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQSmnvRNpsI9H0gYriGkclsf/YUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDUxOGZjYjctODBiMi0z NzcxLWI4MzctZjg5NjVlYTdmOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQpuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6A+dCjT6ZUgFmFMm5SVCEqJzib99+2lKqI6+bIJ7jSQpW2AlpQdNTm LxwRNm6T0tGO1zyRxIVpsg2rgpuPOF9q0dAVk0L5WwgBJ7S2ZfK+ax1Y/F6eIXbM xXtad0NUdrzK6g1gy4iEEe7RpzreEoy1P7sEv1pY2C5uqYlN2wnzDEkl694aq0rt nRx4G8UL1cW5IuIKfV+gmC4+D8aGU9Dpo27SvOwhUJuHyxTPeV/PU0igNQTeTp/b u5MPe58sUsn/+vziuvrC7FXMdqM905okrR8QSteNAc2EZK9r5QyZiLKUQN3Wezkr 6fLJR7dlqO+bfcjcD0AnutQgOzPKzXU= -----END CERTIFICATE-----Generated at Sun May 11 16:01:20 2025 by rpki-client