$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa File: d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa (raw, json) Hash identifier: CUGzzG9Yv/4EQ5NSQxxn7Ts+mPboW7WXDHjv3azQoV8= Subject key identifier: 00:81:D4:23:A8:87:E5:2B:B4:1A:ED:F4:B0:71:01:C3:E2:1C:61:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A24B02DFBBA26B242D400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 66.0.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:24:b0:2d:fb:ba:26:b2:42:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fc697890-4041-4b33-8999-414a350a76ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:bd:7b:f2:1a:d5:a2:94:0f:7a:70:51:6e: f3:ba:d3:60:c3:20:eb:49:74:87:05:6b:9f:08:95: 23:07:a3:8a:09:14:7c:24:1a:b7:66:ca:dc:3d:b3: 99:9f:9d:68:fd:db:99:83:8e:cd:22:7d:3f:8a:2b: bb:07:ac:19:c1:33:ce:4c:eb:f1:cf:e5:8b:ab:80: 8f:03:1d:f7:3b:8c:56:93:da:07:b8:87:fb:a6:2d: 7e:16:e3:69:60:cf:aa:00:e9:b0:9f:cd:1a:60:42: 29:c1:f1:0c:3e:fc:c8:4d:f4:f7:fb:c7:ad:e1:18: 20:88:30:d5:83:54:2b:21:32:69:79:9c:0b:8a:b5: 00:31:a9:be:25:73:8f:bd:ec:8b:c2:6d:37:94:c6: db:31:0f:67:26:68:3f:f5:88:c9:71:cc:b4:81:e1: ea:eb:12:9f:74:47:1e:03:8f:6a:49:a4:2b:51:87: 9f:a0:5b:4e:ab:28:48:0d:06:f8:cd:62:cf:84:82: a6:60:44:f5:bb:43:b8:9f:3c:0a:64:4d:22:20:49: f7:56:f4:b2:01:2f:a8:76:da:fa:b6:c9:98:4d:44: 3e:ef:dc:f9:e3:94:6a:9a:99:1d:3c:dd:d9:a4:29: b0:ba:c0:10:08:a0:da:f5:6c:f5:ef:b3:71:df:8e: b2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:81:D4:23:A8:87:E5:2B:B4:1A:ED:F4:B0:71:01:C3:E2:1C:61:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d60d6d6f-aa85-3fff-9aaa-fb1f705db924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:57:68:9e:87:97:3f:ad:5f:38:c0:de:be:80:bf:b8:ce:99: 99:25:4a:c3:f9:6c:79:5a:d1:f7:70:77:89:8f:cd:c3:79:76: c1:a5:f8:fe:53:6c:58:39:ab:96:0a:9d:46:ec:c6:a9:b6:78: 8b:b8:ac:44:0a:c2:22:b1:99:87:aa:a1:96:b1:cb:2d:b2:3e: ba:76:18:b7:74:f3:be:fc:21:5b:88:32:1c:7a:41:a1:6c:cd: 24:b5:74:20:a4:85:b7:0f:a5:bc:89:7c:bc:50:74:c3:5c:6d: eb:1d:37:8c:3a:db:1c:e1:55:45:0b:b5:28:36:9a:1a:60:e9: 77:c5:2c:a0:aa:49:a2:eb:a7:b1:ae:8c:bc:2a:61:6f:af:ad: da:62:d5:a6:b3:01:6b:75:5c:c6:9f:54:88:16:b3:6f:62:2f: a3:9c:71:01:4a:e0:86:68:db:60:19:e3:09:0d:95:a7:28:44: 94:41:7e:e5:21:b6:83:16:4d:9b:bc:2f:8b:d8:8e:76:67:56: 7d:52:4e:fe:d7:2a:bd:f5:b4:53:e9:71:6e:8e:e6:82:7c:c3: 74:83:9d:19:64:a0:f5:a5:52:10:65:c9:ba:16:95:54:2d:da: a4:cf:f9:71:3c:cc:3b:35:2c:93:50:d1:ec:d1:4a:50:07:79: 66:ce:90:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiSwLfu6JrJC1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmM2OTc4OTAtNDA0MS00YjMzLTg5OTktNDE0YTM1MGE3NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMy9e/Ia1aKUD3pwUW7zutNgwyDrSXSHBWuf CJUjB6OKCRR8JBq3ZsrcPbOZn51o/duZg47NIn0/iiu7B6wZwTPOTOvxz+WLq4CP Ax33O4xWk9oHuIf7pi1+FuNpYM+qAOmwn80aYEIpwfEMPvzITfT3+8et4RggiDDV g1QrITJpeZwLirUAMam+JXOPveyLwm03lMbbMQ9nJmg/9YjJccy0geHq6xKfdEce A49qSaQrUYefoFtOqyhIDQb4zWLPhIKmYET1u0O4nzwKZE0iIEn3VvSyAS+odtr6 tsmYTUQ+79z545RqmpkdPN3ZpCmwusAQCKDa9Wz177Nx346yMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACB1COoh+UrtBrt9LBxAcPiHGF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDYwZDZkNmYtYWE4NS0z ZmZmLTlhYWEtZmIxZjcwNWRiOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQgAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItXaJ6Hlz+tXzjA3r6Av7jOmZklSsP5bHla0fdwd4mPzcN5dsGl+P5T bFg5q5YKnUbsxqm2eIu4rEQKwiKxmYeqoZaxyy2yPrp2GLd08778IVuIMhx6QaFs zSS1dCCkhbcPpbyJfLxQdMNcbesdN4w62xzhVUULtSg2mhpg6XfFLKCqSaLrp7Gu jLwqYW+vrdpi1aazAWt1XMafVIgWs29iL6OccQFK4IZo22AZ4wkNlacoRJRBfuUh toMWTZu8L4vYjnZnVn1STv7XKr31tFPpcW6O5oJ8w3SDnRlkoPWlUhBlyboWlVQt 2qTP+XE8zDs1LJNQ0ezRSlAHeWbOkMs= -----END CERTIFICATE-----Generated at Sat May 10 18:56:56 2025 by rpki-client