$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa File: d253f950-d9ce-3513-90d5-e8256b0c4b40.roa (raw, json) Hash identifier: VAKwIwhAaXPYXkbyei+8FqV6lnj/JS7AxxgbtjV6dyo= Subject key identifier: 8E:DB:1A:72:51:B8:00:D3:82:E3:FA:48:18:FA:6A:E3:8D:91:17:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FDD0C9B69A5088CC7F90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.66.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fd:d0:c9:b6:9a:50:88:cc:7f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6f16a794-fcee-443a-8684-3036334a758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9b:7d:a6:09:84:33:89:5d:c0:fc:9c:b5:0b: 88:f2:a4:b2:79:7d:6e:f5:54:94:e1:22:aa:a2:2b: 07:ca:50:7a:89:1c:b7:66:32:5b:96:dc:ae:ea:64: ff:7a:cd:fd:63:48:42:11:7c:cd:a2:ec:b1:3d:f4: b9:11:7e:b6:22:5b:52:7b:6a:2b:3f:f3:28:3e:69: 2d:1c:6c:93:16:ea:a3:7a:17:53:c3:ba:d8:ae:30: 73:85:02:28:fb:d4:ca:f4:e8:d9:48:1f:40:fb:6a: 17:cd:41:18:36:be:7b:79:7a:c5:ee:ae:35:76:df: 0a:9a:01:69:c6:9f:39:26:d6:ca:5e:b6:be:39:ab: 0e:ae:84:3a:ae:f7:79:49:5b:b1:97:ca:f2:24:15: c8:f0:c9:55:10:8c:05:4e:fe:2a:80:b2:93:64:40: 5c:7a:27:b7:37:e9:2c:14:ff:01:b1:f1:f4:4b:1e: e4:ee:75:fb:37:c4:44:13:ce:3b:77:f3:ef:fd:c6: 69:92:48:a0:80:b4:32:bb:02:51:04:71:6e:f0:e5: e1:8a:4a:52:27:42:2e:69:b6:87:73:ac:7b:52:f3: 7c:d7:10:b9:47:eb:b7:49:19:6e:14:64:2b:07:b3: d5:e1:7f:e9:7c:09:5c:a1:35:bd:09:f7:a0:6e:e1: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:1A:72:51:B8:00:D3:82:E3:FA:48:18:FA:6A:E3:8D:91:17:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d253f950-d9ce-3513-90d5-e8256b0c4b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fb:e7:2b:dc:b3:29:47:6b:41:f7:bf:6e:96:86:ad:a8:5b: d4:d7:93:50:89:f6:30:9c:04:aa:14:cd:95:dd:8e:20:f8:e3: ab:97:44:ea:46:5c:4f:dc:47:e3:23:77:0f:ea:15:4b:e4:03: ac:10:75:69:68:64:df:a7:38:48:b0:67:bb:2a:aa:f4:a6:ee: ed:f1:06:5a:76:72:e7:27:fc:fb:37:97:4e:77:67:57:5a:a3: 9f:ee:df:e4:26:02:c4:cc:cb:7f:85:1c:60:f0:bb:4f:b9:22: 68:fa:de:c2:e2:8a:d8:91:71:9d:15:0e:bf:ae:e7:59:76:43: b2:72:9a:31:15:77:64:1a:8b:8c:e1:4a:10:ed:2f:62:f0:b8: 56:ae:4f:ae:1f:51:c2:53:f0:89:4d:b6:0f:4f:1e:c4:f7:03: 4d:3a:44:2c:66:45:5a:65:51:1d:6a:74:50:42:23:78:a7:7a: 91:75:d8:b5:2f:90:44:3a:fb:77:e3:2f:74:01:de:8c:78:6d: 48:7e:e7:a0:7f:c6:16:44:f5:72:92:32:6c:99:85:2c:7d:db: 42:54:3f:db:fb:a9:35:bb:a6:4e:32:cb:a9:25:8e:cb:96:7f: 0e:04:0f:74:30:8a:fb:f7:c7:5e:c9:f4:fd:7b:a9:81:83:86: 3f:49:ed:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf3QybaaUIjMf5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmYxNmE3OTQtZmNlZS00NDNhLTg2ODQtMzAzNjMzNGE3NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipt9pgmEM4ldwPyctQuI8qSyeX1u9VSU4SKq oisHylB6iRy3ZjJbltyu6mT/es39Y0hCEXzNouyxPfS5EX62IltSe2orP/MoPmkt HGyTFuqjehdTw7rYrjBzhQIo+9TK9OjZSB9A+2oXzUEYNr57eXrF7q41dt8KmgFp xp85JtbKXra+OasOroQ6rvd5SVuxl8ryJBXI8MlVEIwFTv4qgLKTZEBceie3N+ks FP8BsfH0Sx7k7nX7N8REE847d/Pv/cZpkkiggLQyuwJRBHFu8OXhikpSJ0IuabaH c6x7UvN81xC5R+u3SRluFGQrB7PV4X/pfAlcoTW9CfegbuF8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7bGnJRuADTguP6SBj6auONkRefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1M2Y5NTAtZDljZS0z NTEzLTkwZDUtZTgyNTZiMGM0YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/75yvcsylHa0H3v26Whq2oW9TXk1CJ9jCcBKoUzZXdjiD446uXROpG XE/cR+Mjdw/qFUvkA6wQdWloZN+nOEiwZ7sqqvSm7u3xBlp2cucn/Ps3l053Z1da o5/u3+QmAsTMy3+FHGDwu0+5Imj63sLiitiRcZ0VDr+u51l2Q7JymjEVd2Qai4zh ShDtL2LwuFauT64fUcJT8IlNtg9PHsT3A006RCxmRVplUR1qdFBCI3inepF12LUv kEQ6+3fjL3QB3ox4bUh+56B/xhZE9XKSMmyZhSx920JUP9v7qTW7pk4yy6kljsuW fw4ED3Qwivv3x17J9P17qYGDhj9J7Sg= -----END CERTIFICATE-----Generated at Sat May 10 13:40:29 2025 by rpki-client