$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1204fb8e-0f2e-3852-b159-9a9f9d0bf767.roa File: 1204fb8e-0f2e-3852-b159-9a9f9d0bf767.roa (raw, json) Hash identifier: tz3fmtQi8zst7Mk/YMHu+3Vbv3g0fo/0qi8rPUXDQpw= Subject key identifier: AB:84:83:45:04:A8:CF:16:D9:A6:81:F6:94:FD:10:17:0F:B8:5A:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A49B53243C8CB3FC2C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1204fb8e-0f2e-3852-b159-9a9f9d0bf767.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26914 IP address blocks: 66.32.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:49:b5:32:43:c8:cb:3f:c2:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cac90b25-04f9-40e9-ad57-1f8201a3f017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:59:50:d8:ce:be:54:c9:2a:8e:72:27:03: 76:df:b6:ad:97:4f:53:62:d8:eb:a9:66:6d:8b:8a: 87:28:19:38:26:f0:37:59:bb:e7:cf:99:a6:65:f5: 69:f2:b1:d3:9d:f8:db:31:8e:5f:82:69:3f:f9:a7: 7d:13:05:4c:e2:98:2f:cd:79:85:c9:fb:36:50:8e: 21:fb:4d:02:52:ec:73:7f:09:ba:f6:8f:87:90:3a: e9:a0:7b:d0:ec:f7:cf:10:65:41:70:a1:fc:3f:31: 16:5f:f7:e9:8e:2d:1e:6b:44:99:54:43:12:46:ab: 88:f3:76:b2:b5:9e:48:d7:42:47:e2:dd:7c:07:5a: eb:f4:4f:32:42:4b:1a:57:36:15:d9:0a:78:04:6e: 29:98:2e:a5:67:3a:94:b0:ce:a3:7c:e4:a7:3b:f6: 70:c3:a8:83:ff:5b:d5:a2:dc:a6:e5:ba:69:c5:fc: a8:ec:85:34:c2:91:c4:f9:5a:d6:6b:d1:ff:00:ba: 3c:5e:aa:35:6b:ff:b1:13:c8:76:28:05:c5:de:89: c8:bb:08:9b:50:06:07:d2:0e:a6:77:00:c6:05:bf: 82:81:c2:eb:8b:02:67:b0:61:44:2b:64:e4:54:a6: 8e:f5:9d:aa:27:2d:c3:b5:f5:48:b2:15:f7:82:c0: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:84:83:45:04:A8:CF:16:D9:A6:81:F6:94:FD:10:17:0F:B8:5A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1204fb8e-0f2e-3852-b159-9a9f9d0bf767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:bd:99:67:e4:b0:ad:af:cb:cc:fa:1b:88:12:9a:48:c6:24: 0e:b0:29:87:79:a7:71:e6:f8:88:1f:aa:ea:12:d9:32:b8:df: 4e:0e:f2:47:b2:27:2e:e3:15:62:69:01:86:df:6e:9c:7c:02: 8f:76:33:ac:b7:2a:da:25:a6:79:fe:5a:85:06:6c:a1:0f:63: b6:c7:b9:5a:3c:26:16:c5:57:f2:54:72:be:51:93:e8:1f:cd: 27:54:ab:a4:7f:b9:a1:b0:28:6f:df:d5:7d:21:62:b3:ae:56: aa:4a:a7:f0:e5:71:42:b8:8e:69:34:26:f4:7c:4e:ac:f1:ea: 4c:45:a0:db:b9:40:7d:5a:d4:b4:69:0a:bf:82:c7:3e:33:a4: 18:b7:1c:8e:7a:52:9f:1d:4f:02:7d:2b:e6:ee:b4:95:86:b4: f6:aa:91:8b:b2:b0:be:90:c3:ca:c1:29:e5:e0:77:d0:f3:54: 8b:75:73:cb:e7:f9:40:2f:e2:ad:0d:2e:f4:df:02:42:25:72: 03:c1:69:37:93:30:47:df:62:90:27:74:46:61:4e:4e:4d:09: 9e:2b:2a:fa:31:e2:1d:aa:9e:ab:08:41:f8:ca:92:57:53:8b: 4e:78:ef:06:93:6f:4c:5d:24:f1:cf:6e:ef:e3:0c:16:38:12: bc:39:b2:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkm1MkPIyz/CxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2FjOTBiMjUtMDRmOS00MGU5LWFkNTctMWY4MjAxYTNmMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ERZUNjOvlTJKo5yJwN237atl09TYtjrqWZt i4qHKBk4JvA3Wbvnz5mmZfVp8rHTnfjbMY5fgmk/+ad9EwVM4pgvzXmFyfs2UI4h +00CUuxzfwm69o+HkDrpoHvQ7PfPEGVBcKH8PzEWX/fpji0ea0SZVEMSRquI83ay tZ5I10JH4t18B1rr9E8yQksaVzYV2Qp4BG4pmC6lZzqUsM6jfOSnO/Zww6iD/1vV otym5bppxfyo7IU0wpHE+VrWa9H/ALo8Xqo1a/+xE8h2KAXF3onIuwibUAYH0g6m dwDGBb+CgcLriwJnsGFEK2TkVKaO9Z2qJy3DtfVIshX3gsDq8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuEg0UEqM8W2aaB9pT9EBcPuFqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTIwNGZiOGUtMGYyZS0z ODUyLWIxNTktOWE5ZjlkMGJmNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO9mWfksK2vy8z6G4gSmkjGJA6wKYd5p3Hm+IgfquoS2TK4304O8key Jy7jFWJpAYbfbpx8Ao92M6y3Ktolpnn+WoUGbKEPY7bHuVo8JhbFV/JUcr5Rk+gf zSdUq6R/uaGwKG/f1X0hYrOuVqpKp/DlcUK4jmk0JvR8Tqzx6kxFoNu5QH1a1LRp Cr+Cxz4zpBi3HI56Up8dTwJ9K+butJWGtPaqkYuysL6Qw8rBKeXgd9DzVIt1c8vn +UAv4q0NLvTfAkIlcgPBaTeTMEffYpAndEZhTk5NCZ4rKvox4h2qnqsIQfjKkldT i0547waTb0xdJPHPbu/jDBY4Erw5siQ= -----END CERTIFICATE-----Generated at Sat May 10 13:39:03 2025 by rpki-client