$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa File: 57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa (raw, json) Hash identifier: UEMtu+Z9HFowZzPxSRc/uSSFbaT1jOWjWkPpl1L984s= Subject key identifier: 96:C3:F3:2D:8E:A2:BC:CC:09:8C:AA:F9:DD:E8:27:82:66:26:B4:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A11D99E82853D8AD4AAC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.29.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:d9:9e:82:85:3d:8a:d4:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=20fdb341-e41e-487c-9976-ba0fbcd7386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:5d:b8:02:df:49:87:78:43:21:ad:4d:ee: 8a:d7:75:60:55:8a:7d:2e:6d:f3:65:7b:3b:f8:c2: 1a:49:49:c7:f7:da:af:75:f9:de:94:fc:2e:c3:ce: 97:2f:c9:7f:67:4b:af:06:cb:07:33:19:2b:3a:7d: 9d:fd:76:46:2b:ab:91:c1:d5:61:7f:4c:a7:a7:28: 76:39:5b:99:43:a3:b9:1c:fb:73:37:10:ef:b3:87: aa:43:14:c0:e8:83:fe:f2:ab:d5:b2:78:8e:ab:8a: 01:bd:fe:46:1f:85:8f:06:b1:96:e7:33:1f:e4:18: 0a:f4:99:da:ad:af:14:ed:0d:ef:a3:c5:6d:d2:26: a1:fa:10:86:75:3c:e0:74:1f:a5:8c:26:fc:c6:ad: b3:e9:d6:d6:a9:03:47:46:b9:82:7f:87:9e:9e:ad: 19:fb:cd:f3:56:13:9b:cd:2d:16:ca:d9:8c:67:d9: 2b:d8:7b:5c:dd:62:e1:d3:a7:91:74:8d:98:15:79: e6:59:be:c6:0a:bb:33:b8:55:e1:8d:35:9b:51:a6: 67:0b:e3:e2:e0:89:76:41:95:57:79:ee:34:f5:22: d8:ca:58:05:88:bd:5c:8e:f8:02:cd:11:91:27:45: 71:9b:49:4f:9a:a4:55:aa:d2:da:4e:8f:60:90:41: 93:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C3:F3:2D:8E:A2:BC:CC:09:8C:AA:F9:DD:E8:27:82:66:26:B4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/57c1c6e7-8a00-3d9c-a4e7-1e40ef76c181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:2c:c5:05:7a:c6:b4:65:62:7f:c1:92:97:af:77:e7:11:b3: 8f:14:13:da:33:1c:1a:44:60:96:23:5f:67:1f:dc:50:7d:8d: 80:0f:a9:cf:60:27:e9:8b:4c:ef:70:e0:d1:ec:3b:fa:77:ab: 8a:59:1c:58:8f:2a:9b:d8:e5:39:18:89:e6:10:d0:3a:1c:df: 10:e0:22:77:97:19:26:41:d4:a4:9b:39:de:f6:01:b6:91:a3: 95:3e:15:3c:9e:37:13:53:d2:8e:3a:7d:44:b6:cf:c0:8a:ac: 57:47:68:e4:64:4c:be:77:af:31:12:9a:55:22:b6:72:e0:e2: 6a:f3:29:66:6b:9f:db:a4:bb:e8:75:bf:cd:46:f2:09:8a:16: dc:66:62:1a:e8:13:e8:a2:9e:8d:61:19:c2:51:b3:73:b9:5c: 2e:3b:5c:f4:fa:59:c6:17:29:6d:df:df:47:81:47:56:47:bc: 87:77:5c:0e:80:1d:66:db:f4:46:d5:e8:6e:dd:d1:68:74:ae: 35:25:41:95:0a:b9:e4:46:6f:b6:05:20:62:b1:58:3e:a5:33: 1f:1e:ba:5a:d3:72:b3:eb:4c:70:b8:0d:4d:b3:84:e9:02:2d: 61:cc:50:f9:50:ed:85:b0:ca:30:55:9a:90:d0:9b:99:56:8f: d9:21:6e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShHZnoKFPYrUqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjBmZGIzNDEtZTQxZS00ODdjLTk5NzYtYmEwZmJjZDczODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKhduALfSYd4QyGtTe6K13VgVYp9Lm3zZXs7 +MIaSUnH99qvdfnelPwuw86XL8l/Z0uvBssHMxkrOn2d/XZGK6uRwdVhf0ynpyh2 OVuZQ6O5HPtzNxDvs4eqQxTA6IP+8qvVsniOq4oBvf5GH4WPBrGW5zMf5BgK9Jna ra8U7Q3vo8Vt0iah+hCGdTzgdB+ljCb8xq2z6dbWqQNHRrmCf4eenq0Z+83zVhOb zS0WytmMZ9kr2Htc3WLh06eRdI2YFXnmWb7GCrszuFXhjTWbUaZnC+Pi4Il2QZVX ee409SLYylgFiL1cjvgCzRGRJ0Vxm0lPmqRVqtLaTo9gkEGTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbD8y2OorzMCYyq+d3oJ4JmJrTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTdjMWM2ZTctOGEwMC0z ZDljLWE0ZTctMWU0MGVmNzZjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQh3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwsxQV6xrRlYn/Bkpevd+cRs48UE9ozHBpEYJYjX2cf3FB9jYAPqc9g J+mLTO9w4NHsO/p3q4pZHFiPKpvY5TkYieYQ0Doc3xDgIneXGSZB1KSbOd72AbaR o5U+FTyeNxNT0o46fUS2z8CKrFdHaORkTL53rzESmlUitnLg4mrzKWZrn9uku+h1 v81G8gmKFtxmYhroE+iino1hGcJRs3O5XC47XPT6WcYXKW3f30eBR1ZHvId3XA6A HWbb9EbV6G7d0Wh0rjUlQZUKueRGb7YFIGKxWD6lMx8eulrTcrPrTHC4DU2zhOkC LWHMUPlQ7YWwyjBVmpDQm5lWj9khbl0= -----END CERTIFICATE-----Generated at Wed May 7 03:13:56 2025 by rpki-client