$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa File: f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa (raw, json) Hash identifier: EGkMZWZjDEBc+f/OhdBt2wRLmJ+43ZwBCauSI5IYXrI= Subject key identifier: BC:B0:4B:B6:BC:BF:DC:AC:26:D1:F1:7C:82:BC:AF:C6:AC:9D:33:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F794DC8C0EA4A5E00940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.66.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f7:94:dc:8c:0e:a4:a5:e0:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e41d1cc3-c34c-4559-afd6-4defde374887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:4b:aa:c1:0d:4d:c6:c7:f1:ef:30:a8:12: 04:55:3c:d6:4a:d6:bd:c6:01:3b:6b:4f:25:fc:c5: 2e:69:91:35:de:54:bb:13:f4:d1:1c:53:c6:dd:e7: 58:40:a1:e3:6a:c5:30:10:fd:05:b6:33:c2:b1:61: fb:21:0e:1d:f1:06:35:ec:b9:26:c1:a6:75:a3:c8: 2a:f4:8d:50:a6:bc:6e:14:98:cf:62:d7:5d:df:2d: 63:e4:b5:7b:9f:b9:0c:07:3a:3f:5d:e6:5d:24:c6: 6a:46:12:fd:d6:9b:b1:e1:70:c2:84:a9:fd:66:ee: c4:ac:93:44:0b:30:84:d1:ce:4e:b0:29:72:76:98: 90:71:87:34:51:a6:df:07:7e:b3:dc:5e:b2:2a:70: bf:d7:90:3e:8e:f2:3f:08:81:ad:19:07:05:a9:19: 04:3a:2d:11:a9:8c:fb:b4:52:a5:1a:a4:69:5e:99: e8:b5:6a:76:f8:b6:15:b5:5a:f9:44:21:e0:ae:d2: 72:92:da:34:8a:71:66:90:35:e1:b2:86:8d:02:25: 9f:18:d1:08:69:1a:86:2f:4c:45:f3:4a:5d:f1:8e: a1:1b:7e:dc:78:64:71:2e:74:6e:c2:d1:54:34:01: 16:a0:ab:18:e1:7e:d4:7c:b9:68:e5:38:a6:0a:66: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B0:4B:B6:BC:BF:DC:AC:26:D1:F1:7C:82:BC:AF:C6:AC:9D:33:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f10acf6c-b0f9-3aa4-9e8c-e3a8e4f92784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0e:ba:e9:0e:08:e9:72:ae:0f:70:17:6d:86:1a:b6:fd:aa: 7e:52:57:44:7e:6f:3d:31:c2:7e:e8:66:f8:73:07:85:a7:db: db:c0:e5:f8:ad:f0:a5:9e:e5:37:22:a2:00:40:66:a8:78:b1: 73:01:4e:d4:ec:55:6a:eb:c7:65:d3:b9:fc:bb:a4:fc:7d:89: 03:c1:f3:fc:e0:37:77:c7:76:14:b2:cf:d6:91:a9:b2:70:22: fe:0f:d5:fa:15:23:20:8a:80:4e:cf:0d:ee:ef:7f:2c:ef:5c: 40:05:13:4e:77:ed:c1:ce:1e:08:b6:42:c2:2f:86:69:a9:57: 32:1b:51:b9:2d:01:5b:d7:20:48:b6:86:d2:d6:41:e6:18:1d: e4:07:17:75:fa:d2:5f:17:0d:08:e8:6a:03:a2:2a:ec:a0:3d: cc:1e:9f:5a:f7:96:18:5f:82:4a:b1:95:a9:f2:e4:ff:26:cb: b5:c3:ba:76:70:6c:7d:a1:13:5c:41:2b:45:f0:12:67:ee:fe: 34:97:bd:62:28:9e:ca:f6:e6:38:e9:76:8c:d7:24:6c:31:fa: b0:0e:ed:0a:79:23:a4:8e:32:34:fc:d0:ac:5d:79:02:0e:3d: e9:16:c3:e1:3b:8c:9c:98:97:ec:96:cf:02:80:38:e2:ba:a0: 91:17:03:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfeU3IwOpKXgCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTQxZDFjYzMtYzM0Yy00NTU5LWFmZDYtNGRlZmRlMzc0ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwBLqsENTcbH8e8wqBIEVTzWSta9xgE7a08l /MUuaZE13lS7E/TRHFPG3edYQKHjasUwEP0FtjPCsWH7IQ4d8QY17LkmwaZ1o8gq 9I1QprxuFJjPYtdd3y1j5LV7n7kMBzo/XeZdJMZqRhL91pux4XDChKn9Zu7ErJNE CzCE0c5OsClydpiQcYc0UabfB36z3F6yKnC/15A+jvI/CIGtGQcFqRkEOi0RqYz7 tFKlGqRpXpnotWp2+LYVtVr5RCHgrtJykto0inFmkDXhsoaNAiWfGNEIaRqGL0xF 80pd8Y6hG37ceGRxLnRuwtFUNAEWoKsY4X7UfLlo5TimCmakKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLywS7a8v9ysJtHxfIK8r8asnTMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjEwYWNmNmMtYjBmOS0z YWE0LTllOGMtZTNhOGU0ZjkyNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8OuukOCOlyrg9wF22GGrb9qn5SV0R+bz0xwn7oZvhzB4Wn29vA5fit 8KWe5TciogBAZqh4sXMBTtTsVWrrx2XTufy7pPx9iQPB8/zgN3fHdhSyz9aRqbJw Iv4P1foVIyCKgE7PDe7vfyzvXEAFE0537cHOHgi2QsIvhmmpVzIbUbktAVvXIEi2 htLWQeYYHeQHF3X60l8XDQjoagOiKuygPcwen1r3lhhfgkqxlany5P8my7XDunZw bH2hE1xBK0XwEmfu/jSXvWIonsr25jjpdozXJGwx+rAO7Qp5I6SOMjT80KxdeQIO PekWw+E7jJyYl+yWzwKAOOK6oJEXA/s= -----END CERTIFICATE-----Generated at Wed May 7 15:48:35 2025 by rpki-client