$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa File: 601631aa-1788-3e00-8366-1ab7d8df59e3.roa (raw, json) Hash identifier: Mr/VbJ2nDp1GX61R/7qYo6ldWkhQoSVec+HWUzptctI= Subject key identifier: 73:02:66:BA:75:71:CA:D4:F9:FC:DB:AC:D0:A7:EB:64:5D:58:3B:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3B4267FF6B3BED405F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:42:67:ff:6b:3b:ed:40:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1bac2bbd-adcb-46fb-a558-6496fbb219ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:65:94:ec:8a:bd:2a:f5:db:1a:34:23:b9: c2:21:7f:73:57:6f:63:2e:29:c9:0a:10:66:28:d3: c5:43:2e:76:66:f1:9e:19:b7:55:5c:9b:47:d8:0e: 9f:e8:1e:8c:e2:56:3b:b5:ed:e2:fb:ec:dd:9b:dd: 96:c0:07:67:36:d7:64:6f:ed:2b:9b:05:00:cc:68: b5:3f:4c:b9:e8:f7:b0:6f:80:45:72:a7:a6:cd:b4: 96:e4:3e:63:a5:c8:d1:73:78:13:97:e5:60:f2:1f: 90:20:9b:30:c4:41:da:73:bb:9a:4b:aa:3c:66:bd: a8:ad:f0:8c:bc:20:4b:50:d1:66:19:b3:dd:37:6f: 8e:77:53:35:bc:d2:1f:c4:a0:61:63:ea:f8:3b:ac: 89:31:01:97:51:4f:b0:2c:9f:68:bf:a6:c8:69:a0: 71:23:ba:03:73:b0:d3:b3:8f:20:77:9b:7f:60:d9: 0e:6f:76:44:62:92:15:77:1b:b8:23:14:a5:da:89: d8:4a:b5:65:47:ea:45:3e:ba:7d:b6:d7:ba:25:50: 8d:65:47:10:bc:60:35:70:14:61:da:df:f9:6f:a7: db:57:c6:6a:69:1d:37:d9:fe:62:0b:f2:bd:e6:8c: 92:54:cf:15:99:d9:97:93:00:11:f6:18:ad:70:98: c0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:02:66:BA:75:71:CA:D4:F9:FC:DB:AC:D0:A7:EB:64:5D:58:3B:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601631aa-1788-3e00-8366-1ab7d8df59e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b4:04:7f:86:be:c8:44:7d:3e:a3:3e:be:40:75:20:4a:fd: 8c:4b:e8:a0:df:f0:c6:4a:a5:4f:0f:39:7b:cd:6f:30:45:ae: e4:0a:86:42:e2:e7:76:d6:db:0c:43:75:70:36:4b:96:ce:a3: c0:dc:93:ee:d9:3f:9d:23:59:e0:6a:f7:ae:a0:75:7e:01:ee: 5e:f5:12:af:1e:0f:03:03:9c:b1:7c:2c:be:c8:4e:bd:24:04: 76:16:47:73:59:fe:85:85:1d:c5:7c:1e:57:66:44:b9:55:75: c4:fc:46:cd:12:c5:e1:85:b5:65:0e:48:45:f1:8e:82:34:10: ef:48:76:52:06:b0:12:68:35:7d:5b:0a:c1:59:6d:b9:e2:e1: a6:7c:aa:50:18:b2:d5:cb:e7:2f:f6:b8:5f:98:2a:00:3e:92: 5c:0e:2a:91:d3:70:ba:66:f5:dd:8b:22:4b:fd:a8:7c:f0:79: 24:b0:39:a5:78:1b:58:72:8e:62:b7:28:e9:89:c8:7b:22:ab: f7:d8:8c:e4:85:bc:5b:9e:ed:e5:c9:57:82:1a:b9:22:2a:61: a1:bb:37:f8:55:cf:00:25:4b:f2:b4:2f:5d:52:6a:62:48:c7: c4:81:46:08:2f:46:ea:35:38:48:16:67:3e:cd:fa:f1:54:bb: 58:f5:78:85 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSjtCZ/9rO+1AXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWJhYzJiYmQtYWRjYi00NmZiLWE1NTgtNjQ5NmZiYjIxOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYxllOyKvSr12xo0I7nCIX9zV29jLinJChBm KNPFQy52ZvGeGbdVXJtH2A6f6B6M4lY7te3i++zdm92WwAdnNtdkb+0rmwUAzGi1 P0y56Pewb4BFcqemzbSW5D5jpcjRc3gTl+Vg8h+QIJswxEHac7uaS6o8Zr2orfCM vCBLUNFmGbPdN2+Od1M1vNIfxKBhY+r4O6yJMQGXUU+wLJ9ov6bIaaBxI7oDc7DT s48gd5t/YNkOb3ZEYpIVdxu4IxSl2onYSrVlR+pFPrp9tte6JVCNZUcQvGA1cBRh 2t/5b6fbV8ZqaR032f5iC/K95oySVM8VmdmXkwAR9hitcJjAyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHMCZrp1ccrU+fzbrNCn62RdWDu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxNjMxYWEtMTc4OC0z ZTAwLTgzNjYtMWFiN2Q4ZGY1OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQiAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJ7QEf4a+yER9PqM+vkB1IEr9jEvooN/wxkqlTw85e81vMEWu5AqGQuLn dtbbDEN1cDZLls6jwNyT7tk/nSNZ4Gr3rqB1fgHuXvUSrx4PAwOcsXwsvshOvSQE dhZHc1n+hYUdxXweV2ZEuVV1xPxGzRLF4YW1ZQ5IRfGOgjQQ70h2UgawEmg1fVsK wVltueLhpnyqUBiy1cvnL/a4X5gqAD6SXA4qkdNwumb13YsiS/2ofPB5JLA5pXgb WHKOYrco6YnIeyKr99iM5IW8W57t5clXghq5Iiphobs3+FXPACVL8rQvXVJqYkjH xIFGCC9G6jU4SBZnPs368VS7WPV4hQ== -----END CERTIFICATE-----Generated at Sun May 11 22:19:37 2025 by rpki-client