$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa File: c462b8c9-d741-376a-8e7c-9acd25d70057.roa (raw, json) Hash identifier: QVe8u1ss2ntprPLqSER4k7A+L3d5zYHw2k2lwivoUl4= Subject key identifier: D8:F1:B8:36:AD:25:F3:B6:69:44:89:C6:5B:2F:13:77:0E:1C:43:57 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4AF613B8F807A6433A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32376 IP address blocks: 66.173.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:f6:13:b8:f8:07:a6:43:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=426dcd3f-744d-42fe-b0f6-1111b6814ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:72:25:70:3f:98:de:4c:e9:11:df:47:a8: 12:ba:f3:e4:57:4f:9c:2e:9b:6e:0a:6a:82:41:85: d8:a5:00:23:13:b3:81:94:a4:b7:69:5f:1b:93:11: bb:c8:9a:b5:df:06:cf:23:6c:91:98:28:ba:64:00: 54:d9:9e:20:df:97:da:50:91:fd:46:dd:cd:2c:c3: 30:9a:df:ec:d3:4c:5f:cc:73:69:a5:1c:2e:0b:b2: 92:c3:d4:6e:50:32:ac:96:ee:44:ee:b5:31:48:cc: c2:df:3c:c8:93:1d:15:5a:a3:b6:02:84:77:77:77: 98:8b:5b:7f:50:2e:0f:52:25:0a:bb:7c:2e:be:8d: 4a:b2:9e:5e:3d:07:d8:7f:32:f0:67:22:06:e5:17: d9:8d:68:72:06:fb:22:68:b6:a2:26:55:61:02:bf: c5:0d:7c:9d:96:f4:2e:09:5d:32:1c:9d:11:b4:5d: a2:9a:e6:15:5c:81:29:d3:a5:dc:46:06:92:64:12: b0:1d:8c:0e:74:44:34:80:85:eb:4c:ba:90:95:48: 7e:42:c7:04:23:f7:7b:3e:c5:5c:6a:5d:3e:10:4c: 10:63:80:9e:10:bc:06:f6:ce:97:3c:67:94:e6:62: d4:84:dd:ed:ae:0b:fc:62:1d:f4:24:50:cf:fd:f8: 95:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:B8:36:AD:25:F3:B6:69:44:89:C6:5B:2F:13:77:0E:1C:43:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c462b8c9-d741-376a-8e7c-9acd25d70057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ea:52:fc:0b:ba:d0:f8:ec:b3:8c:f4:18:2f:91:1d:e7:13: 28:70:da:7d:16:a3:fa:2d:0c:2e:30:d1:b8:b9:66:c2:8a:ea: 19:2b:d0:8b:c5:a9:91:a3:ad:62:d3:81:bb:17:b6:6f:14:03: c9:38:62:1d:ae:c2:38:e2:0e:13:ff:19:2a:59:8b:d1:85:be: 03:7a:31:d5:57:1c:47:59:93:a9:c6:a2:cc:fe:9b:e2:3a:b9: 4f:92:4d:19:c9:f2:0f:3b:85:69:ca:f4:cb:e1:5c:66:fb:d2: ea:d7:9c:66:47:2c:27:c3:72:a0:96:41:2c:60:bf:f7:3b:b1: 46:30:26:37:19:67:1a:d2:e5:41:da:9a:db:5e:6f:63:98:78: 37:c6:39:e0:5d:82:53:96:b9:21:f5:64:77:b6:4c:15:28:dd: e3:2a:f8:2b:04:b3:c9:43:d0:13:3b:57:8c:65:36:da:ee:7b: 5e:d7:16:a4:3b:5f:27:0a:da:ef:da:7f:06:35:ff:a1:3f:3c: 0f:37:df:dc:fa:dd:50:17:fc:f9:9b:56:42:ea:96:20:e8:47: e2:dd:69:cc:ed:54:33:2e:58:73:b6:bb:0a:25:2e:97:89:05: be:4e:83:44:4a:b6:ef:2f:b6:3e:09:86:11:04:fd:1c:93:47: 44:fd:dc:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkr2E7j4B6ZDOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDI2ZGNkM2YtNzQ0ZC00MmZlLWIwZjYtMTExMWI2ODE0ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+ByJXA/mN5M6RHfR6gSuvPkV0+cLptuCmqC QYXYpQAjE7OBlKS3aV8bkxG7yJq13wbPI2yRmCi6ZABU2Z4g35faUJH9Rt3NLMMw mt/s00xfzHNppRwuC7KSw9RuUDKslu5E7rUxSMzC3zzIkx0VWqO2AoR3d3eYi1t/ UC4PUiUKu3wuvo1Ksp5ePQfYfzLwZyIG5RfZjWhyBvsiaLaiJlVhAr/FDXydlvQu CV0yHJ0RtF2imuYVXIEp06XcRgaSZBKwHYwOdEQ0gIXrTLqQlUh+QscEI/d7PsVc al0+EEwQY4CeELwG9s6XPGeU5mLUhN3trgv8Yh30JFDP/fiVMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjxuDatJfO2aUSJxlsvE3cOHENXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQ2MmI4YzktZDc0MS0z NzZhLThlN2MtOWFjZDI1ZDcwMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrqUvwLutD47LOM9BgvkR3nEyhw2n0Wo/otDC4w0bi5ZsKK6hkr0IvF qZGjrWLTgbsXtm8UA8k4Yh2uwjjiDhP/GSpZi9GFvgN6MdVXHEdZk6nGosz+m+I6 uU+STRnJ8g87hWnK9MvhXGb70urXnGZHLCfDcqCWQSxgv/c7sUYwJjcZZxrS5UHa mtteb2OYeDfGOeBdglOWuSH1ZHe2TBUo3eMq+CsEs8lD0BM7V4xlNtrue17XFqQ7 XycK2u/afwY1/6E/PA8339z63VAX/PmbVkLqliDoR+LdacztVDMuWHO2uwolLpeJ Bb5Og0RKtu8vtj4JhhEE/RyTR0T93Eo= -----END CERTIFICATE-----Generated at Sat May 10 12:37:25 2025 by rpki-client