$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa File: 1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa (raw, json) Hash identifier: 5354u5QCD80Okmb6WuKvrAxNVjXyAh/QqCFxE/dWo3E= Subject key identifier: E8:81:E6:79:29:62:0D:8B:DF:47:B0:73:A8:FA:44:6B:2C:8A:98:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A49C22F236F4AD7F3E680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26914 IP address blocks: 66.32.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:49:c2:2f:23:6f:4a:d7:f3:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=15499699-3186-4a30-939d-abf27e6c7ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:39:c2:b3:72:89:a8:66:7d:df:53:f0:2b: 8b:c9:05:85:c9:6c:d2:20:78:b7:9c:78:98:89:b6: 50:8a:4e:3e:63:6b:7c:78:d1:c0:f2:49:b2:45:37: 3d:b0:41:76:5d:93:ca:dc:07:ab:39:03:d1:09:6e: a6:a1:6b:f5:ee:4b:28:a6:49:7c:e8:b6:fc:8c:74: 92:7a:15:62:3d:2d:5a:b9:0a:ef:ce:a6:88:e8:f4: da:7f:c0:3b:a3:84:4c:41:1e:e7:71:15:b4:10:30: df:45:72:4b:31:25:e2:f2:9c:2c:bb:b3:d1:b4:63: 8b:8f:3f:79:b3:a7:ee:8d:c6:57:61:f0:60:f6:90: 05:50:0f:f5:08:86:0e:00:ce:e1:a4:4c:dd:83:b0: 27:47:7f:de:79:7b:ba:55:53:08:ee:eb:83:2b:19: 83:20:9c:89:17:5c:87:07:4a:98:bc:e7:d0:6f:89: 5c:c6:4f:c5:79:71:46:ee:50:fb:44:7c:6a:82:7c: b1:f3:af:c4:f4:8c:70:58:9c:8a:9c:b9:e4:cf:da: d2:91:8c:06:11:5e:2f:21:71:d5:d3:28:c6:7d:71: 35:91:d9:51:a6:96:3c:2c:01:b7:d3:09:16:a0:0f: 35:7f:93:97:24:e6:dc:43:78:a0:10:ad:25:4e:3c: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:E6:79:29:62:0D:8B:DF:47:B0:73:A8:FA:44:6B:2C:8A:98:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fba203b-a0f0-3ab6-a904-4adb4243aa73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:44:f5:a3:73:2d:9b:b2:9d:69:90:dc:2f:a2:ba:8e:3f:a1: cb:2f:6f:00:a4:51:ff:13:f9:e1:13:4d:1f:48:90:dd:5b:24: b5:ed:86:d4:07:53:5d:35:dc:bd:d7:11:75:c9:97:b6:f3:29: 34:26:64:f4:aa:e3:ba:bd:ed:3d:c5:2f:38:62:69:2d:b1:8f: 19:6a:3e:0c:bb:98:bc:9d:11:e1:9d:0b:e0:1c:79:aa:6f:ac: ff:58:2d:51:b0:f0:7d:81:f8:19:9e:18:0f:a7:f9:b4:16:93: a0:20:ef:f2:88:55:ff:5b:e5:8e:57:2a:65:d1:75:de:b7:e1: 80:98:6c:18:10:91:5a:c6:fc:53:27:fa:32:c2:6c:34:9c:48: 10:9e:05:58:40:e9:56:c6:f0:85:fa:6b:ca:15:e5:20:e0:94: a1:5d:58:0c:ae:e4:92:75:32:eb:84:da:9f:83:c8:a4:85:d6: 0e:8e:90:87:10:c6:e3:c4:93:25:e1:c5:8c:17:4a:dc:b4:92: de:d9:d5:92:07:a3:3a:59:c3:aa:27:d1:05:29:1b:21:cf:94: a3:3d:d9:1c:43:09:95:55:ad:e0:62:85:47:30:3f:5b:c7:40: 4e:4a:78:ff:a2:57:4f:ea:09:70:e8:9e:cd:90:5e:fe:34:48: 81:fd:2d:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSknCLyNvStfz5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTU0OTk2OTktMzE4Ni00YTMwLTkzOWQtYWJmMjdlNmM3ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki45wrNyiahmfd9T8CuLyQWFyWzSIHi3nHiY ibZQik4+Y2t8eNHA8kmyRTc9sEF2XZPK3AerOQPRCW6moWv17ksopkl86Lb8jHSS ehViPS1auQrvzqaI6PTaf8A7o4RMQR7ncRW0EDDfRXJLMSXi8pwsu7PRtGOLjz95 s6fujcZXYfBg9pAFUA/1CIYOAM7hpEzdg7AnR3/eeXu6VVMI7uuDKxmDIJyJF1yH B0qYvOfQb4lcxk/FeXFG7lD7RHxqgnyx86/E9IxwWJyKnLnkz9rSkYwGEV4vIXHV 0yjGfXE1kdlRppY8LAG30wkWoA81f5OXJObcQ3igEK0lTjyaVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiB5nkpYg2L30ewc6j6RGssipj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZiYTIwM2ItYTBmMC0z YWI2LWE5MDQtNGFkYjQyNDNhYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQiAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtE9aNzLZuynWmQ3C+iuo4/ocsvbwCkUf8T+eETTR9IkN1bJLXthtQH U1013L3XEXXJl7bzKTQmZPSq47q97T3FLzhiaS2xjxlqPgy7mLydEeGdC+Aceapv rP9YLVGw8H2B+BmeGA+n+bQWk6Ag7/KIVf9b5Y5XKmXRdd634YCYbBgQkVrG/FMn +jLCbDScSBCeBVhA6VbG8IX6a8oV5SDglKFdWAyu5JJ1MuuE2p+DyKSF1g6OkIcQ xuPEkyXhxYwXSty0kt7Z1ZIHozpZw6on0QUpGyHPlKM92RxDCZVVreBihUcwP1vH QE5KeP+iV0/qCXDons2QXv40SIH9LQg= -----END CERTIFICATE-----Generated at Sat May 10 14:42:36 2025 by rpki-client