$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa File: 3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa (raw, json) Hash identifier: HdENQkw9eCZvTto1sICaY8ZG2E3hPEt597V6S52E2zU= Subject key identifier: 71:8E:A3:E9:EC:5E:D9:30:A8:48:A6:65:6C:B9:A9:8D:A5:4A:88:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4B6CCFC7A2222C30F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 40399 IP address blocks: 66.251.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4b:6c:cf:c7:a2:22:2c:30:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c8a29cfe-46ae-487c-aafe-0594a027682f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:16:0f:d9:ef:ac:81:13:3d:e8:0d:4c:15: cc:ab:d1:8e:2a:47:58:51:52:c3:3e:2b:84:cc:f2: e7:14:40:dc:8c:7e:46:b3:e7:3a:25:e8:7c:19:5b: 40:72:28:64:e6:1e:fe:2a:a1:29:37:57:c8:31:c7: 70:4a:6c:e4:42:cb:a1:e7:6d:0c:ae:0e:e7:24:6d: 49:e8:43:98:37:37:a9:5b:94:86:fa:29:b1:d3:ff: f8:4a:d1:06:1c:aa:d4:a2:91:5a:73:be:01:58:af: 3b:80:87:ed:28:a3:0d:7d:90:52:ec:4a:f6:d7:5d: dd:f2:6a:70:0c:98:b6:3c:5c:86:54:3f:66:f1:3b: 23:d2:d9:eb:b8:38:9d:b7:a5:01:cb:83:ff:f4:6d: a1:57:76:ae:39:7e:62:06:0d:3b:d8:6e:92:de:0c: c6:15:c4:7f:68:52:c0:9f:ad:33:18:79:f4:c1:ed: 43:92:8e:94:db:8d:0e:ef:88:ce:c1:90:96:04:22: c6:74:e6:89:a2:16:85:59:74:1a:df:d5:ea:4d:0d: 19:67:ca:05:f4:06:03:15:cb:1e:d5:80:bd:53:cb: 3a:a3:bc:b4:bb:7f:cd:41:5a:75:2a:3d:55:1c:29: 27:71:68:ed:ba:fb:9b:09:7f:78:0c:bb:d7:49:35: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8E:A3:E9:EC:5E:D9:30:A8:48:A6:65:6C:B9:A9:8D:A5:4A:88:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d000bef-b9d8-33cf-a07c-0bf8519770b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.251.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9d:5e:af:dc:5d:1c:4f:04:dd:f2:c5:dc:7c:af:93:c9:98: c7:ce:ed:a9:cd:46:09:a7:a1:37:c2:a6:6e:56:fe:33:99:3e: c5:21:a4:1e:88:a4:4e:63:58:2a:f2:06:76:7e:16:22:b6:9a: 7f:d6:e5:59:a2:34:bc:e0:fc:57:c3:79:be:94:59:c8:ee:04: e8:bc:1c:bf:79:0a:a4:8c:59:61:6b:86:27:e6:aa:b4:06:e0: 12:83:dd:4f:5a:07:02:2d:96:25:61:30:5d:fc:df:85:22:af: 6d:07:52:fd:a5:2d:ab:e9:3c:65:78:87:47:9f:1a:76:1f:5d: b5:1b:55:4d:09:08:a8:42:2e:ad:59:13:d4:41:ea:3a:47:72: 83:89:9e:4f:9c:b5:82:fb:3d:1b:c0:b5:11:cd:31:f3:98:b7: ce:15:f1:23:f2:85:8b:3b:72:f8:3e:1e:4a:ad:ba:2e:0d:bd: e2:c9:c7:b2:bc:6a:63:e0:3d:f1:07:47:9d:6d:2d:b6:b1:30: 28:01:c0:43:5d:1c:3e:25:87:3b:90:ce:a1:1b:60:6a:fe:35: 8c:96:02:0e:d6:d7:1c:b2:c6:4e:7c:15:49:ab:6e:37:f4:bd: ce:f3:4d:d5:63:74:08:90:de:82:4e:b6:cc:4d:6f:77:7d:77: 0c:d5:e4:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSktsz8eiIiww8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzhhMjljZmUtNDZhZS00ODdjLWFhZmUtMDU5NGEwMjc2ODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZMWD9nvrIETPegNTBXMq9GOKkdYUVLDPiuE zPLnFEDcjH5Gs+c6Jeh8GVtAcihk5h7+KqEpN1fIMcdwSmzkQsuh520Mrg7nJG1J 6EOYNzepW5SG+imx0//4StEGHKrUopFac74BWK87gIftKKMNfZBS7Er2113d8mpw DJi2PFyGVD9m8Tsj0tnruDidt6UBy4P/9G2hV3auOX5iBg072G6S3gzGFcR/aFLA n60zGHn0we1Dko6U240O74jOwZCWBCLGdOaJohaFWXQa39XqTQ0ZZ8oF9AYDFcse 1YC9U8s6o7y0u3/NQVp1Kj1VHCkncWjtuvubCX94DLvXSTXUHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGOo+nsXtkwqEimZWy5qY2lSoi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2QwMDBiZWYtYjlkOC0z M2NmLWEwN2MtMGJmODUxOTc3MGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQvtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABedXq/cXRxPBN3yxdx8r5PJmMfO7anNRgmnoTfCpm5W/jOZPsUhpB6I pE5jWCryBnZ+FiK2mn/W5VmiNLzg/FfDeb6UWcjuBOi8HL95CqSMWWFrhifmqrQG 4BKD3U9aBwItliVhMF3834Uir20HUv2lLavpPGV4h0efGnYfXbUbVU0JCKhCLq1Z E9RB6jpHcoOJnk+ctYL7PRvAtRHNMfOYt84V8SPyhYs7cvg+Hkqtui4NveLJx7K8 amPgPfEHR51tLbaxMCgBwENdHD4lhzuQzqEbYGr+NYyWAg7W1xyyxk58FUmrbjf0 vc7zTdVjdAiQ3oJOtsxNb3d9dwzV5Lo= -----END CERTIFICATE-----Generated at Sat May 10 14:47:39 2025 by rpki-client