$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fadc519-8d66-3760-bdab-bebdc77a02ba.roa File: 7fadc519-8d66-3760-bdab-bebdc77a02ba.roa (raw, json) Hash identifier: o+JzVRkOJ5WO0ren1LN6Zy5N7tS+QbBaX8CsUyeccy0= Subject key identifier: 99:96:01:B1:00:1B:B0:F9:B7:9D:80:E3:6A:EA:D6:08:0A:E0:41:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2663FCC12856E0430600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fadc519-8d66-3760-bdab-bebdc77a02ba.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 35997 IP address blocks: 66.84.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:26:63:fc:c1:28:56:e0:43:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1c24cfbe-e98d-4e6b-9646-0ce2dd9d80d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:74:d0:d1:ed:6d:a3:5a:e2:74:f8:69:76: 66:ef:fb:9b:39:78:49:bb:93:ce:9c:2d:ba:c4:19: ea:e4:f3:3c:19:02:e5:26:5b:bf:88:a5:9a:ea:38: 81:d3:70:66:08:fe:03:97:b0:25:84:14:9d:97:8c: 65:4b:7d:57:f4:7c:10:fb:17:ac:06:ba:e9:32:cc: 3d:af:fa:b4:6a:40:8d:05:82:c9:7f:62:91:a6:eb: c7:c8:6e:27:17:a7:01:94:e5:ec:33:dd:1a:0f:e4: 42:db:51:87:21:19:75:fe:af:52:94:2d:80:99:69: f8:71:4e:0b:a0:ca:0b:3a:ed:9e:4e:a8:03:0f:16: 53:96:77:ab:98:a6:35:ae:2e:77:ad:4d:82:7d:f9: 1a:89:78:3c:d7:62:80:91:6a:e1:0c:c9:48:ef:c7: 96:2a:20:61:4c:47:58:42:ed:c6:79:51:23:dc:7b: aa:81:23:f2:f1:7b:1e:4d:ff:dc:97:99:55:89:46: 6f:3d:6a:fe:5b:5f:8e:55:3c:4f:63:00:5e:30:55: 92:e6:be:dd:04:f9:e7:17:20:d9:fa:21:c2:00:ba: 78:c8:de:62:ab:91:2d:a5:2f:3e:25:3b:73:73:c8: fe:96:38:86:8e:99:e6:72:71:16:90:10:91:e8:12: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:96:01:B1:00:1B:B0:F9:B7:9D:80:E3:6A:EA:D6:08:0A:E0:41:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7fadc519-8d66-3760-bdab-bebdc77a02ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.84.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b9:90:d2:a2:10:3e:f5:9c:3a:1c:14:40:4d:2e:8e:be:09: 8a:52:a4:ac:26:48:ef:ff:5d:e7:63:bf:7d:88:17:9a:e9:22: 27:fc:4e:37:80:2d:7b:2b:d0:7e:13:35:c7:88:f0:af:83:be: 94:a4:a7:67:99:c8:70:37:ed:bb:02:9f:f4:6f:cb:96:e4:89: e2:20:3d:ec:9a:e2:a7:67:93:c2:5c:48:b7:91:85:92:7d:24: cd:93:fd:e2:63:25:2b:3f:24:b1:a4:7c:25:5a:2a:45:2e:c3: b2:11:c7:ad:91:64:3b:3a:64:ab:04:20:ee:28:9b:2c:60:55: 16:83:18:81:4a:80:fe:9a:f9:ea:5b:f5:bc:2e:36:04:2c:f0: 3c:33:54:5f:8e:3b:2f:38:50:ba:03:83:78:4b:35:ff:74:14: 6d:1e:87:4c:98:ab:cd:b0:37:64:52:9c:11:c2:02:e8:35:9d: 17:91:17:1d:22:91:9d:5f:2a:69:0c:12:21:47:ee:65:70:e9: be:72:88:bf:d1:00:f1:23:aa:7b:f1:93:ce:ba:97:e7:e1:bd: 3f:89:bd:ec:27:19:50:e1:14:58:0b:e6:ec:20:d2:d8:eb:ae: d8:3f:d3:3d:17:28:a0:de:48:70:15:7e:03:03:7d:8d:3f:62: cf:45:e5:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiZj/MEoVuBDBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWMyNGNmYmUtZTk4ZC00ZTZiLTk2NDYtMGNlMmRkOWQ4MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSl00NHtbaNa4nT4aXZm7/ubOXhJu5POnC26 xBnq5PM8GQLlJlu/iKWa6jiB03BmCP4Dl7AlhBSdl4xlS31X9HwQ+xesBrrpMsw9 r/q0akCNBYLJf2KRpuvHyG4nF6cBlOXsM90aD+RC21GHIRl1/q9SlC2AmWn4cU4L oMoLOu2eTqgDDxZTlnermKY1ri53rU2CffkaiXg812KAkWrhDMlI78eWKiBhTEdY Qu3GeVEj3HuqgSPy8XseTf/cl5lViUZvPWr+W1+OVTxPYwBeMFWS5r7dBPnnFyDZ +iHCALp4yN5iq5EtpS8+JTtzc8j+ljiGjpnmcnEWkBCR6BLalwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmWAbEAG7D5t52A42rq1ggK4EF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2ZhZGM1MTktOGQ2Ni0z NzYwLWJkYWItYmViZGM3N2EwMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlSSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy5kNKiED71nDocFEBNLo6+CYpSpKwmSO//Xedjv32IF5rpIif8TjeA LXsr0H4TNceI8K+DvpSkp2eZyHA37bsCn/Rvy5bkieIgPeya4qdnk8JcSLeRhZJ9 JM2T/eJjJSs/JLGkfCVaKkUuw7IRx62RZDs6ZKsEIO4omyxgVRaDGIFKgP6a+epb 9bwuNgQs8DwzVF+OOy84ULoDg3hLNf90FG0eh0yYq82wN2RSnBHCAug1nReRFx0i kZ1fKmkMEiFH7mVw6b5yiL/RAPEjqnvxk866l+fhvT+JvewnGVDhFFgL5uwg0tjr rtg/0z0XKKDeSHAVfgMDfY0/Ys9F5XU= -----END CERTIFICATE-----Generated at Sun May 11 12:26:55 2025 by rpki-client