$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa File: d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa (raw, json) Hash identifier: +o+HYYv15b/2d/RQlvmxUHKOM6MnmRiqk/+M0FHt0g0= Subject key identifier: 72:A9:44:17:EB:4A:9F:3F:06:9D:BB:17:1C:2C:7B:30:D2:36:72:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B57A205E55102A93C4429420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 7029 IP address blocks: 66.19.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:20:5e:55:10:2a:93:c4:42:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=f4374846-8bd9-49e9-943b-ea7f819d551e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ec:87:07:8c:19:14:d8:87:4f:b2:d8:7d:97: 28:41:21:f8:4e:ce:c1:16:ad:eb:ab:84:3d:14:90: ed:d0:cc:ba:f1:80:03:ec:87:cb:2f:22:f3:c0:50: ac:49:1f:9d:c1:ae:16:02:21:47:de:91:b9:23:cd: 2a:b2:48:bd:54:bc:e0:c2:61:66:6a:7a:c3:19:84: 3d:29:d3:2e:0f:ea:55:a5:8f:e9:94:97:a1:dd:e1: 6a:18:32:a4:a0:a3:dc:de:24:48:f2:5f:1e:f0:b1: d5:4c:2c:d2:ef:9e:4a:00:ee:5b:d3:37:79:fd:3d: 17:11:6c:0d:40:84:55:14:df:85:db:ec:6f:e4:6a: 61:f9:38:fd:4e:ec:80:be:61:23:f1:0c:d3:7d:e2: a7:20:f1:97:8c:55:86:44:57:11:45:8e:7f:7c:46: 2a:17:dd:d3:fe:1e:0b:69:3a:bc:65:4a:10:c4:e1: 0e:21:06:0b:22:4a:2a:8a:d2:6d:99:4a:da:14:1a: 31:d4:fa:0e:0b:ce:d6:66:ef:cd:3a:d6:fc:fe:c8: fa:71:97:6c:f0:e3:ab:77:e3:06:4e:8d:d6:9b:cb: 88:0d:47:7d:1f:d5:b3:3f:e1:4d:2f:a6:58:c0:32: 6c:2e:b9:7c:4c:85:b2:b1:fe:d4:df:31:63:a5:78: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A9:44:17:EB:4A:9F:3F:06:9D:BB:17:1C:2C:7B:30:D2:36:72:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d89e9046-92ce-3c4d-95a9-4e0574a9697c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:12:a3:5a:04:9e:e3:7c:7f:57:fb:dc:53:ef:50:b7:ba:9e: 3a:7b:e4:fa:30:7e:23:6d:41:a9:12:3f:a5:2a:bd:d0:47:4e: 4f:c1:f0:95:87:07:db:8b:6d:cc:1a:04:bf:fb:1a:33:af:21: 99:68:78:32:27:e3:ea:86:ec:0e:24:aa:e4:33:dc:6f:b2:33: 9f:7b:57:95:25:fa:94:41:c9:a4:f0:8e:a8:d6:02:70:80:1e: c2:ef:5c:4f:ad:c4:b4:f8:f0:73:c1:d6:c0:a0:41:ec:2d:ee: f3:d4:13:a0:54:32:1e:97:04:02:f0:14:73:c8:86:87:c5:bd: 4a:ba:df:41:53:93:b3:30:b3:ec:7b:55:1a:20:83:cf:b1:62: 1a:97:f8:7a:5a:f0:f9:d7:40:c4:f6:c6:9c:a0:6b:58:ee:10: b6:24:ca:48:ca:e5:24:f6:49:ec:48:96:06:67:7f:7c:91:d5: ba:5b:60:e5:30:6e:9c:36:96:24:66:3c:ff:7f:52:a7:07:4c: 04:40:ea:0f:95:5e:0c:97:85:88:6a:21:64:f2:fa:ff:5c:82: c6:7f:2e:89:14:1f:60:4a:d6:93:1c:3a:25:10:e8:42:ea:5c: 29:97:ee:50:07:2b:27:e9:46:87:40:dd:cd:4b:01:5d:f8:5b: 3d:56:46:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiBeVRAqk8RClCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZjQzNzQ4NDYtOGJkOS00OWU5LTk0M2ItZWE3ZjgxOWQ1NTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluyHB4wZFNiHT7LYfZcoQSH4Ts7BFq3rq4Q9 FJDt0My68YAD7IfLLyLzwFCsSR+dwa4WAiFH3pG5I80qski9VLzgwmFmanrDGYQ9 KdMuD+pVpY/plJeh3eFqGDKkoKPc3iRI8l8e8LHVTCzS755KAO5b0zd5/T0XEWwN QIRVFN+F2+xv5Gph+Tj9TuyAvmEj8QzTfeKnIPGXjFWGRFcRRY5/fEYqF93T/h4L aTq8ZUoQxOEOIQYLIkoqitJtmUraFBox1PoOC87WZu/NOtb8/sj6cZds8OOrd+MG To3Wm8uIDUd9H9WzP+FNL6ZYwDJsLrl8TIWysf7U3zFjpXjqlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKpRBfrSp8/Bp27FxwsezDSNnI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg5ZTkwNDYtOTJjZS0z YzRkLTk1YTktNGUwNTc0YTk2OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhNcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoSo1oEnuN8f1f73FPvULe6njp75PowfiNtQakSP6UqvdBHTk/B8JWH B9uLbcwaBL/7GjOvIZloeDIn4+qG7A4kquQz3G+yM597V5Ul+pRByaTwjqjWAnCA HsLvXE+txLT48HPB1sCgQewt7vPUE6BUMh6XBALwFHPIhofFvUq630FTk7Mws+x7 VRogg8+xYhqX+Hpa8PnXQMT2xpyga1juELYkykjK5ST2SexIlgZnf3yR1bpbYOUw bpw2liRmPP9/UqcHTARA6g+VXgyXhYhqIWTy+v9cgsZ/LokUH2BK1pMcOiUQ6ELq XCmX7lAHKyfpRodA3c1LAV34Wz1WRk8= -----END CERTIFICATE-----Generated at Sun May 11 01:19:07 2025 by rpki-client