$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa File: 99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa (raw, json) Hash identifier: +xEaL+KsvYK8O0RFp8iHxtqDlnLsIFSBzxvUWXV4wYU= Subject key identifier: BB:99:3D:CC:00:1E:96:28:D8:37:8E:FF:51:76:19:69:24:85:FC:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849446950452365EB6F1E232A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 7029 IP address blocks: 66.16.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:50:45:23:65:eb:6f:1e:23:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=303f81c2-9d6c-4912-918c-368121edf287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:7e:7d:6a:c4:13:4e:cb:1d:63:d7:17:1e: fd:16:8d:02:27:8e:8e:55:f4:37:8d:0d:13:32:74: 92:ef:f9:17:d0:cc:63:61:71:67:19:1e:21:1a:60: 17:60:01:9d:09:d7:df:3d:49:77:0e:32:0a:3e:ab: c3:f3:59:8b:48:5c:03:ce:2f:f2:4d:f6:e1:4e:c7: 13:83:2c:e6:3d:6c:83:b9:3e:0b:1d:d2:38:74:7a: b7:2d:b2:fc:f1:2a:ee:98:31:51:05:95:81:37:36: 0a:61:c1:47:d1:98:ae:a1:81:24:a2:b7:a9:41:88: 82:ee:8d:7c:65:62:96:24:f8:d4:3d:ba:7c:c5:38: fd:93:38:6b:20:0a:09:a3:6b:d2:4f:8e:d1:32:95: 4d:4e:e8:bc:bc:a9:f5:dc:9e:cd:2c:91:c8:b3:0e: b2:02:2a:78:fa:0f:5f:0f:b2:42:36:4a:7a:9f:8c: e4:82:3b:4a:d7:52:d7:40:60:37:60:dc:d6:cf:13: cf:5e:0d:99:8e:cb:fb:b9:a4:12:de:b1:41:35:21: b2:f0:73:e1:b6:87:b9:36:6d:d8:2a:c7:37:00:6f: 62:e8:54:6f:b5:5b:f5:74:d0:58:ad:c3:8a:53:47: 53:dd:cf:17:35:e9:4a:9e:08:3f:23:1f:91:c0:62: c6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:3D:CC:00:1E:96:28:D8:37:8E:FF:51:76:19:69:24:85:FC:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99a22e7b-afe8-39ca-af75-0fe3d17dd152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.16.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:94:e4:e0:ce:fa:5c:91:85:b3:30:d4:51:28:da:7c:76:5e: 9f:e5:58:b3:38:43:9d:8f:01:52:c5:3b:e5:44:7f:c3:b3:fc: 96:0d:f7:97:e7:51:a6:52:cb:72:5c:b0:ed:a5:dc:3b:f2:a6: c4:af:ef:68:c4:ea:d9:c5:1f:9c:2d:1c:37:f0:0a:9d:73:ba: 1c:99:1a:49:c7:5a:26:cb:b9:23:94:7a:66:80:75:04:20:0a: 17:7b:bc:99:a9:12:4f:77:1e:1a:bc:46:61:29:69:ce:f1:da: b5:71:51:9a:a5:87:5c:7b:24:0b:eb:c5:38:d0:6e:7c:93:23: c3:49:b4:e5:92:ff:b4:fe:c8:a6:5c:01:f3:1e:7b:aa:04:bc: 4a:f3:dc:c4:66:35:71:bd:dc:29:cd:d5:6d:dc:8c:17:48:a2: 5c:9e:4a:f3:cc:a2:cf:8a:64:bd:b6:17:a7:9c:fe:56:fa:75: 7d:79:cb:b1:a8:c0:61:65:8e:cf:ca:1e:36:79:8a:d4:e4:52: ee:f2:cb:39:73:ca:25:a9:04:7f:c9:7e:92:55:a9:00:4c:2e: 05:b4:1f:d3:59:20:4b:ee:53:61:73:df:14:66:62:04:19:3f: 11:ea:f6:3f:17:a2:c1:3d:cc:24:f6:00:ed:23:4c:59:c9:f2: d1:70:b1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaVBFI2Xrbx4jKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MzAzZjgxYzItOWQ2Yy00OTEyLTkxOGMtMzY4MTIxZWRmMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf1+fWrEE07LHWPXFx79Fo0CJ46OVfQ3jQ0T MnSS7/kX0MxjYXFnGR4hGmAXYAGdCdffPUl3DjIKPqvD81mLSFwDzi/yTfbhTscT gyzmPWyDuT4LHdI4dHq3LbL88SrumDFRBZWBNzYKYcFH0ZiuoYEkorepQYiC7o18 ZWKWJPjUPbp8xTj9kzhrIAoJo2vST47RMpVNTui8vKn13J7NLJHIsw6yAip4+g9f D7JCNkp6n4zkgjtK11LXQGA3YNzWzxPPXg2Zjsv7uaQS3rFBNSGy8HPhtoe5Nm3Y Ksc3AG9i6FRvtVv1dNBYrcOKU0dT3c8XNelKngg/Ix+RwGLGuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuZPcwAHpYo2DeO/1F2GWkkhfwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTlhMjJlN2ItYWZlOC0z OWNhLWFmNzUtMGZlM2QxN2RkMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiU5ODO+lyRhbMw1FEo2nx2Xp/lWLM4Q52PAVLFO+VEf8Oz/JYN95fn UaZSy3JcsO2l3DvypsSv72jE6tnFH5wtHDfwCp1zuhyZGknHWibLuSOUemaAdQQg Chd7vJmpEk93Hhq8RmEpac7x2rVxUZqlh1x7JAvrxTjQbnyTI8NJtOWS/7T+yKZc AfMee6oEvErz3MRmNXG93CnN1W3cjBdIolyeSvPMos+KZL22F6ec/lb6dX15y7Go wGFljs/KHjZ5itTkUu7yyzlzyiWpBH/JfpJVqQBMLgW0H9NZIEvuU2Fz3xRmYgQZ PxHq9j8XosE9zCT2AO0jTFnJ8tFwsX0= -----END CERTIFICATE-----Generated at Sat May 10 22:12:59 2025 by rpki-client