$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: hnyn/vu73LlJmj3LZwwqsd1l3txw9TibXAn1X5vk8cw= Subject key identifier: 41:A7:FA:94:DA:59:00:94:C8:F5:5D:9D:A1:E2:ED:CC:3E:A1:E8:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3B074F333CE9CAD47B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:07:4f:33:3c:e9:ca:d4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=359759c6-5776-432b-88d0-b3c89c1f271f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:07:1d:e1:8b:e4:a5:e2:51:a4:e7:4e:e6: dd:4a:37:fe:59:3c:2b:f7:cf:d5:77:6f:b0:6e:79: 76:fc:d3:01:e8:89:58:29:3e:89:a7:58:8b:5d:0d: 3d:99:3d:aa:92:21:57:e8:83:23:61:d2:27:64:7e: 82:e7:a1:97:80:01:74:24:0e:26:66:34:c3:de:66: 02:b2:71:16:0a:8a:16:f5:93:e8:ac:a9:73:17:03: 0e:58:74:23:9e:3a:9d:e9:6b:4a:fc:d0:f4:43:19: cc:57:63:93:3f:a0:4a:ad:e8:ad:a7:90:61:e0:73: 66:3b:45:8a:64:f3:99:5e:40:f3:88:73:a6:53:42: 2e:9a:65:3a:fc:8f:68:1f:71:64:bc:f8:4a:13:88: 95:1b:7c:a1:44:c6:be:c1:bc:76:78:91:4a:ab:2d: 7d:a7:fe:8f:e4:be:94:e4:af:5e:f9:c3:aa:63:61: 86:7e:1b:96:a9:cb:96:cc:22:65:cc:78:81:be:66: b3:ef:fe:86:5c:9e:7d:a4:c0:75:8d:70:dd:a2:33: 1d:8d:fb:fd:07:17:6d:9d:f7:de:58:ca:ae:9b:ee: ff:5a:ad:18:64:b6:e2:d7:b4:0e:5b:5f:76:d1:b7: 82:6d:c0:9c:a2:8c:56:57:a3:d2:a2:c5:cf:cc:9a: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:FA:94:DA:59:00:94:C8:F5:5D:9D:A1:E2:ED:CC:3E:A1:E8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:6b:fb:ff:8c:67:e3:e7:7e:f6:ea:ba:96:55:76:61:2d:a2: f0:97:2c:d8:e9:75:9b:64:e9:1e:fc:de:79:6d:d5:39:86:45: 89:3a:58:90:c2:9d:60:3e:c8:e6:3f:30:77:fe:4b:ef:4d:d4: bf:50:d9:13:35:9e:ff:da:91:93:2b:8b:f8:23:14:45:18:02: cc:e9:aa:6b:60:1d:02:ee:15:6b:28:7a:9c:a9:64:9f:80:03: 21:b5:03:4c:a0:9c:34:f9:cd:1c:5d:99:71:8e:2a:d3:ce:5e: e6:2b:cb:87:c7:26:ef:08:68:20:dd:0e:76:68:4e:4b:5a:35: 95:41:80:a1:98:0f:6a:0a:14:c2:67:35:c1:7d:a6:8e:fa:c8: be:12:f7:03:5a:be:bb:cb:8d:03:03:f0:27:4d:7f:4d:3f:39: 3a:e7:9c:21:fb:a4:15:3f:5d:93:2e:10:7d:33:01:4c:96:fd: fc:43:4b:9e:d7:54:7e:49:2c:cc:d3:72:e5:8d:dd:4a:9d:6b: 91:0f:78:3a:dc:cf:0e:3d:2a:f0:4a:d7:31:eb:98:b0:8f:10: 54:56:c8:a1:8d:82:96:1b:48:a5:63:d8:53:ea:4c:86:c0:da: bf:d2:40:b5:8b:d5:00:cd:cf:56:30:09:92:f4:6e:33:85:a9: 1f:55:42:37 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSjsHTzM86crUewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzU5NzU5YzYtNTc3Ni00MzJiLTg4ZDAtYjNjODljMWYyNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMYHHeGL5KXiUaTnTubdSjf+WTwr98/Vd2+w bnl2/NMB6IlYKT6Jp1iLXQ09mT2qkiFX6IMjYdInZH6C56GXgAF0JA4mZjTD3mYC snEWCooW9ZPorKlzFwMOWHQjnjqd6WtK/ND0QxnMV2OTP6BKreitp5Bh4HNmO0WK ZPOZXkDziHOmU0IummU6/I9oH3FkvPhKE4iVG3yhRMa+wbx2eJFKqy19p/6P5L6U 5K9e+cOqY2GGfhuWqcuWzCJlzHiBvmaz7/6GXJ59pMB1jXDdojMdjfv9Bxdtnffe WMqum+7/Wq0YZLbi17QOW1920beCbcCcooxWV6PSosXPzJrbmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEGn+pTaWQCUyPVdnaHi7cw+oejNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXGv7/4xn4+d+9uq6llV2YS2i8Jcs2Ol1m2TpHvzeeW3VOYZFiTpYkMKd YD7I5j8wd/5L703Uv1DZEzWe/9qRkyuL+CMURRgCzOmqa2AdAu4Vayh6nKlkn4AD IbUDTKCcNPnNHF2ZcY4q085e5ivLh8cm7whoIN0OdmhOS1o1lUGAoZgPagoUwmc1 wX2mjvrIvhL3A1q+u8uNAwPwJ01/TT85OuecIfukFT9dky4QfTMBTJb9/ENLntdU fkkszNNy5Y3dSp1rkQ94OtzPDj0q8ErXMeuYsI8QVFbIoY2ClhtIpWPYU+pMhsDa v9JAtYvVAM3PVjAJkvRuM4WpH1VCNw== -----END CERTIFICATE-----Generated at Sun May 11 01:34:34 2025 by rpki-client