$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b44ed9b7-7f12-3733-98c8-4137b9740cb8.roa File: b44ed9b7-7f12-3733-98c8-4137b9740cb8.roa (raw, json) Hash identifier: lnsVR9OfD8NjrrDnRWctpPBXSAkYGsOIoR36HugK4/I= Subject key identifier: 49:1A:16:72:7F:62:4C:FC:6C:71:96:89:C1:A1:75:9F:30:E5:34:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A25A161C7450F5CAEE540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b44ed9b7-7f12-3733-98c8-4137b9740cb8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 29877 IP address blocks: 66.55.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:25:a1:61:c7:45:0f:5c:ae:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=eccf064e-02b4-4f0a-9b9a-bf87918f7e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5d:47:4f:db:21:f7:17:54:fc:78:91:ae:f0: 00:be:93:9e:94:78:eb:19:06:61:c4:33:c6:be:8e: 18:fd:62:90:49:88:6c:8d:6a:1b:bd:7e:e5:44:d4: 53:77:df:1c:53:fb:b8:05:3a:5f:15:71:f4:cc:ea: eb:d3:30:8d:97:c9:e6:66:44:69:02:96:37:f2:f4: be:af:f0:b5:66:f0:a5:07:88:a9:a2:c5:2c:1b:15: 59:f2:c2:ba:f7:9b:c8:e6:8b:3a:9e:d6:d5:44:45: 47:4e:4d:62:bc:fc:93:3a:44:f3:61:65:7a:06:19: 98:94:84:73:8b:9a:11:f9:89:4e:58:46:d0:d1:d3: b7:37:b1:8d:9b:50:c8:89:79:72:20:4b:0a:9f:0d: 76:dc:e3:5a:21:78:12:96:fc:de:1e:44:4a:3c:6d: e1:21:89:b4:d4:06:66:02:bc:ae:8d:b1:60:36:a0: ce:16:83:1f:13:41:cc:86:fb:2e:2d:fa:51:94:57: 48:0b:33:8b:ac:a8:2d:d8:1f:2f:66:7a:c0:14:09: 76:9f:22:b2:13:38:67:cd:e8:e7:f8:09:8b:6c:89: 61:01:7a:a7:3a:02:a7:fa:0c:8e:73:33:e8:8b:f4: 00:cc:b7:5d:fe:16:35:c6:ba:a1:64:69:0b:8c:1d: 8a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:16:72:7F:62:4C:FC:6C:71:96:89:C1:A1:75:9F:30:E5:34:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b44ed9b7-7f12-3733-98c8-4137b9740cb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.55.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0a:74:ed:c0:a6:ac:bd:35:b8:d6:c1:86:de:9e:26:8c:34: 36:2b:45:85:72:0d:1d:ec:95:cb:a7:77:e2:48:80:f7:cb:90: 9f:9d:3c:0f:21:73:fd:c7:5e:e1:57:ea:09:07:58:e9:f9:d4: d8:8c:6d:00:10:cb:1b:89:68:46:70:9f:6a:d6:3a:a2:46:a8: 34:96:9d:b5:0b:bb:2d:a4:19:a2:8d:25:9c:2f:48:55:f0:06: cc:51:00:56:8e:29:89:1e:61:76:67:1e:67:9f:e3:8c:ea:48: 57:ac:c7:86:7a:12:ea:a1:f5:16:6b:28:b2:e4:54:a5:14:e0: 85:f0:68:cf:0b:66:84:8f:fe:27:26:ef:39:4a:d9:e4:df:cb: 7f:a3:45:9b:1f:c9:ad:fb:c5:48:c9:39:a6:3f:1f:23:5e:a6: ed:a4:df:c7:80:30:ae:b6:44:3c:4f:3e:0f:4e:20:90:23:f5: bd:c8:26:76:ab:44:ae:dd:e5:a0:08:3f:b3:0c:09:87:96:2e: 3c:69:fb:5e:2c:18:65:a4:8e:85:bc:b6:59:44:71:f4:b7:bd: 8e:5b:95:e5:94:2b:95:1a:a5:56:0f:1d:05:5b:e5:be:d8:2a: b7:8b:0a:dd:58:5a:07:0d:f8:c8:70:e6:90:a5:33:26:42:77: fb:0a:d2:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiWhYcdFD1yu5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWNjZjA2NGUtMDJiNC00ZjBhLTliOWEtYmY4NzkxOGY3ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF1HT9sh9xdU/HiRrvAAvpOelHjrGQZhxDPG vo4Y/WKQSYhsjWobvX7lRNRTd98cU/u4BTpfFXH0zOrr0zCNl8nmZkRpApY38vS+ r/C1ZvClB4iposUsGxVZ8sK695vI5os6ntbVREVHTk1ivPyTOkTzYWV6BhmYlIRz i5oR+YlOWEbQ0dO3N7GNm1DIiXlyIEsKnw123ONaIXgSlvzeHkRKPG3hIYm01AZm AryujbFgNqDOFoMfE0HMhvsuLfpRlFdICzOLrKgt2B8vZnrAFAl2nyKyEzhnzejn +AmLbIlhAXqnOgKn+gyOczPoi/QAzLdd/hY1xrqhZGkLjB2KXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkaFnJ/Ykz8bHGWicGhdZ8w5TTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ0ZWQ5YjctN2YxMi0z NzMzLTk4YzgtNDEzN2I5NzQwY2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMKdO3Apqy9NbjWwYbeniaMNDYrRYVyDR3slcund+JIgPfLkJ+dPA8h c/3HXuFX6gkHWOn51NiMbQAQyxuJaEZwn2rWOqJGqDSWnbULuy2kGaKNJZwvSFXw BsxRAFaOKYkeYXZnHmef44zqSFesx4Z6Euqh9RZrKLLkVKUU4IXwaM8LZoSP/icm 7zlK2eTfy3+jRZsfya37xUjJOaY/HyNepu2k38eAMK62RDxPPg9OIJAj9b3IJnar RK7d5aAIP7MMCYeWLjxp+14sGGWkjoW8tllEcfS3vY5bleWUK5UapVYPHQVb5b7Y KreLCt1YWgcN+Mhw5pClMyZCd/sK0n4= -----END CERTIFICATE-----Generated at Sat May 10 13:36:43 2025 by rpki-client