$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a02e4cad-c006-3cd2-9c79-b681c2810db7.roa File: a02e4cad-c006-3cd2-9c79-b681c2810db7.roa (raw, json) Hash identifier: ZdvazjmPU2jC2tQTJ0dyIZg1NDyYdkVisINMPwUw47s= Subject key identifier: 30:89:82:D0:0D:8E:9E:EB:AA:8B:DB:55:FC:DF:1A:52:CB:AA:E8:8D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A249855A3997EC84ED180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a02e4cad-c006-3cd2-9c79-b681c2810db7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 26914 IP address blocks: 66.32.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:24:98:55:a3:99:7e:c8:4e:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7c91d1fc-2abc-4a25-b929-8d4dba0fa8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:3b:31:97:31:f0:af:89:09:83:95:c8:72: e8:57:e7:1c:84:e1:09:5f:61:31:8a:4f:49:79:45: 57:25:18:ef:71:0e:0d:ac:e9:e7:e7:47:86:06:3a: 69:e6:1e:83:79:15:e1:1d:fb:ec:fa:df:d6:f6:6c: 43:ae:fe:dd:59:8b:5e:3c:de:d5:9b:c2:21:5e:c1: b4:29:19:6c:5b:91:65:65:6a:c5:dd:8f:5b:cd:cb: a8:02:68:04:4d:cc:b0:b7:3b:bd:b5:5f:b1:2e:2f: 52:0f:24:8d:56:13:ea:bb:9a:b8:83:47:2b:8a:16: 2c:76:cc:52:f6:42:a6:7e:b5:df:2b:89:42:2d:7c: ea:ad:74:5c:b7:40:2e:5d:e4:c9:0a:1f:a9:15:f2: 9a:e3:23:c2:43:0a:a3:ca:2b:e0:12:02:99:4b:7a: cc:d5:06:25:c6:24:1a:82:ae:3a:a0:60:79:46:2a: 4e:5a:9d:1b:35:a1:fe:fa:a2:c6:43:ea:b6:55:1b: c0:21:22:d5:ba:79:c4:48:19:10:61:93:79:8d:42: 2a:38:ef:3f:59:23:37:79:f9:ce:0d:b5:bc:5d:1d: b9:08:00:00:2c:4f:15:c9:73:4c:44:8e:a5:27:01: db:a0:a6:e9:cb:6c:2e:3c:5d:4a:a7:5e:78:27:df: 27:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:82:D0:0D:8E:9E:EB:AA:8B:DB:55:FC:DF:1A:52:CB:AA:E8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a02e4cad-c006-3cd2-9c79-b681c2810db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:09:a8:50:aa:74:a0:13:b9:40:64:0b:db:7e:31:9a:1b:3b: a0:68:3d:a5:7c:41:06:88:cf:e1:e7:3c:f6:44:d8:fe:79:22: 95:e3:84:1c:e1:db:65:76:42:93:ff:05:f0:fa:19:fa:09:04: bc:a8:fb:97:b5:b4:d8:e4:74:b8:2a:b1:29:a5:76:60:77:b0: d7:92:da:5f:6c:cb:fa:ce:5c:de:ef:42:c1:21:b4:e0:a9:48: f1:b7:18:c2:ba:d2:00:27:77:76:07:47:72:4a:b0:e6:c0:9c: 50:fb:6e:4a:a4:72:65:e2:3a:76:a9:e7:d9:22:ec:16:fa:31: 74:e7:5d:98:7f:d8:4a:7f:5b:3e:a2:98:06:3e:26:03:ec:c4: 07:12:46:25:64:7a:b0:40:bf:92:16:d9:4c:63:a4:29:09:cd: b9:89:bc:d9:72:95:33:27:2a:36:e0:f4:bf:20:62:2c:06:55: 9f:6b:75:05:dd:ec:96:42:66:8c:75:38:21:78:90:c5:81:88: 86:60:f9:f2:18:20:45:79:85:ba:a5:99:03:21:1f:77:9d:d5: 3c:ed:b5:88:50:77:51:79:21:a5:ca:1c:88:bd:14:60:0b:31: d8:d7:82:31:d6:ed:41:ea:86:70:5f:e3:9a:93:b6:a5:32:e2: cf:ba:de:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiSYVaOZfshO0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2M5MWQxZmMtMmFiYy00YTI1LWI5MjktOGQ0ZGJhMGZhOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdg7MZcx8K+JCYOVyHLoV+cchOEJX2Exik9J eUVXJRjvcQ4NrOnn50eGBjpp5h6DeRXhHfvs+t/W9mxDrv7dWYtePN7Vm8IhXsG0 KRlsW5FlZWrF3Y9bzcuoAmgETcywtzu9tV+xLi9SDySNVhPqu5q4g0crihYsdsxS 9kKmfrXfK4lCLXzqrXRct0AuXeTJCh+pFfKa4yPCQwqjyivgEgKZS3rM1QYlxiQa gq46oGB5RipOWp0bNaH++qLGQ+q2VRvAISLVunnESBkQYZN5jUIqOO8/WSM3efnO DbW8XR25CAAALE8VyXNMRI6lJwHboKbpy2wuPF1Kp154J98n4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCJgtANjp7rqovbVfzfGlLLquiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTAyZTRjYWQtYzAwNi0z Y2QyLTljNzktYjY4MWMyODEwZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQiAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkJqFCqdKATuUBkC9t+MZobO6BoPaV8QQaIz+HnPPZE2P55IpXjhBzh 22V2QpP/BfD6GfoJBLyo+5e1tNjkdLgqsSmldmB3sNeS2l9sy/rOXN7vQsEhtOCp SPG3GMK60gAnd3YHR3JKsObAnFD7bkqkcmXiOnap59ki7Bb6MXTnXZh/2Ep/Wz6i mAY+JgPsxAcSRiVkerBAv5IW2UxjpCkJzbmJvNlylTMnKjbg9L8gYiwGVZ9rdQXd 7JZCZox1OCF4kMWBiIZg+fIYIEV5hbqlmQMhH3ed1TzttYhQd1F5IaXKHIi9FGAL MdjXgjHW7UHqhnBf45qTtqUy4s+63vM= -----END CERTIFICATE-----Generated at Sat May 10 13:03:44 2025 by rpki-client