$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c0ce808-0aa4-3470-8c01-4e31ac2c3a74.roa File: 3c0ce808-0aa4-3470-8c01-4e31ac2c3a74.roa (raw, json) Hash identifier: POiuT/typV5WCLGvMqgUcBUs7iNKT3C3A9rU5o7zvlY= Subject key identifier: A6:1F:DC:72:B8:77:20:7D:AE:36:1F:07:D3:17:B8:0E:99:A4:09:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A499871CF041991259700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c0ce808-0aa4-3470-8c01-4e31ac2c3a74.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26914 IP address blocks: 66.32.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:49:98:71:cf:04:19:91:25:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=655fca17-520a-4753-b28f-f5b8b8e36f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:cd:26:9f:18:30:72:88:dc:e4:25:6b:e2: e5:b5:4a:0a:f5:2a:5a:c9:13:7e:84:bb:9d:d6:40: bf:ff:a1:a6:e3:57:d8:36:0c:9b:4a:2d:44:86:15: 6a:1c:09:35:cd:b9:59:db:d9:20:02:58:1a:f5:59: 79:13:d9:24:a5:6f:fb:fe:af:54:3e:3f:7c:7e:b7: d5:f9:24:25:2a:b6:c6:c6:e6:97:92:e1:5d:eb:eb: b8:d7:9a:37:c7:ae:53:07:01:15:4f:7c:fc:1d:22: 22:07:06:bf:12:a6:26:83:83:12:20:0b:79:34:f7: 01:d8:4e:8a:b7:b8:ed:55:75:f0:e2:19:c5:0a:97: 92:4c:b8:02:c9:59:83:80:4c:39:fc:17:a4:33:f5: dd:cb:9b:f9:c4:d3:60:d2:89:53:d3:01:5a:93:ce: 5b:3e:77:27:9e:25:75:78:2b:dd:68:19:6b:6d:fb: 32:29:6e:21:8f:20:75:01:9a:7f:8e:f9:38:8f:ba: fc:4a:3b:48:c3:44:f3:3c:28:a3:3c:94:a7:e4:1b: 5b:7a:11:59:ce:2f:54:f9:02:3c:0b:f9:d6:a9:09: 7c:7d:7e:d8:2a:8b:85:87:2b:74:a6:91:dd:f7:a1: dc:b3:d1:d9:35:da:5e:b8:de:af:fd:38:e2:0b:9d: a8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1F:DC:72:B8:77:20:7D:AE:36:1F:07:D3:17:B8:0E:99:A4:09:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c0ce808-0aa4-3470-8c01-4e31ac2c3a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2c:5d:d3:4f:92:bc:28:13:cd:8e:b2:d4:62:e0:7d:a6:77: a6:2d:3d:a6:df:fd:c9:71:f3:ad:37:bf:0f:1b:fd:e8:37:94: 10:9f:ac:97:90:ac:85:2d:73:bc:bb:5f:51:cf:38:63:bf:a3: 74:d8:3a:3e:c8:92:55:54:00:f0:57:65:95:64:1c:79:3a:81: 4e:9c:66:d6:10:c5:bb:a0:32:a7:9d:cc:a7:7b:71:c5:99:3e: 6b:cd:4c:5f:35:29:8c:be:3b:53:fa:37:61:fb:4d:b7:ef:62: bb:36:e1:f0:7f:94:75:7e:ab:5a:95:b5:cb:43:05:df:30:07: dd:57:cc:e9:0e:87:10:ae:e8:f7:2c:51:d6:97:d3:c7:c5:28: db:7b:6e:9d:7e:09:86:41:fa:58:53:c6:bc:9a:8c:56:e1:d1: fe:fd:7c:a7:9d:60:0a:e9:aa:6e:e0:0c:4d:f4:56:45:9f:d4: 01:dd:44:be:68:bc:42:c7:54:d9:fe:41:23:6f:01:c1:c5:86: 1a:c4:7e:15:31:1d:ff:e6:2a:21:a7:b0:31:6c:65:10:62:0b: 68:e4:4d:60:37:4d:1e:bc:a5:0f:7b:dc:5c:9b:aa:b3:67:98: 55:03:71:29:5e:4e:e8:9d:61:de:c5:a6:79:8f:65:17:58:df: 61:84:8e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkmYcc8EGZEllwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjU1ZmNhMTctNTIwYS00NzUzLWIyOGYtZjViOGI4ZTM2ZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuenNJp8YMHKI3OQla+LltUoK9SpayRN+hLud 1kC//6Gm41fYNgybSi1EhhVqHAk1zblZ29kgAlga9Vl5E9kkpW/7/q9UPj98frfV +SQlKrbGxuaXkuFd6+u415o3x65TBwEVT3z8HSIiBwa/EqYmg4MSIAt5NPcB2E6K t7jtVXXw4hnFCpeSTLgCyVmDgEw5/BekM/Xdy5v5xNNg0olT0wFak85bPncnniV1 eCvdaBlrbfsyKW4hjyB1AZp/jvk4j7r8SjtIw0TzPCijPJSn5BtbehFZzi9U+QI8 C/nWqQl8fX7YKouFhyt0ppHd96Hcs9HZNdpeuN6v/TjiC52o5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYf3HK4dyB9rjYfB9MXuA6ZpAmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2MwY2U4MDgtMGFhNC0z NDcwLThjMDEtNGUzMWFjMmMzYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACksXdNPkrwoE82OstRi4H2md6YtPabf/clx8603vw8b/eg3lBCfrJeQ rIUtc7y7X1HPOGO/o3TYOj7IklVUAPBXZZVkHHk6gU6cZtYQxbugMqedzKd7ccWZ PmvNTF81KYy+O1P6N2H7TbfvYrs24fB/lHV+q1qVtctDBd8wB91XzOkOhxCu6Pcs UdaX08fFKNt7bp1+CYZB+lhTxryajFbh0f79fKedYArpqm7gDE30VkWf1AHdRL5o vELHVNn+QSNvAcHFhhrEfhUxHf/mKiGnsDFsZRBiC2jkTWA3TR68pQ973FybqrNn mFUDcSleTuidYd7FpnmPZRdY32GEjmQ= -----END CERTIFICATE-----Generated at Sat May 10 18:48:54 2025 by rpki-client