$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa File: f156dafc-4e5a-3bd6-9bea-783cddf20268.roa (raw, json) Hash identifier: HPx66OJP7ybEOZe8BX+HBDV7mND3Ib+lNfIFms9vbxc= Subject key identifier: FC:28:76:CE:08:15:EB:F0:31:B0:5B:F8:72:46:9F:A8:16:92:BA:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4A43C0BD4DE739ECC080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 29877 IP address blocks: 66.163.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:43:c0:bd:4d:e7:39:ec:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=932840ad-8ab9-41c3-b3fa-55bb1749fbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:05:d2:b2:67:0a:d5:2e:d3:43:5e:d2:90:30: 86:62:3c:3e:f5:4f:f8:65:ac:b2:51:7b:09:b6:31: aa:fe:8b:f0:9b:96:69:23:fb:fd:23:b0:9b:ff:f8: 12:e0:37:fe:21:04:41:48:6d:cf:04:76:90:fc:6c: 3d:7c:01:b1:e8:61:5a:e2:44:de:bd:43:26:c0:1d: 0e:1e:f1:77:fb:b1:e8:ee:d7:9e:99:35:f1:52:21: 0f:da:f8:f9:bd:50:95:43:7b:ff:0e:fb:c0:26:08: 3a:a8:0b:f3:06:3f:d5:8c:d3:ee:14:f3:f8:57:82: 32:9f:d6:3a:6f:ae:74:58:19:ca:8e:86:86:72:d9: 52:14:45:c6:fc:46:ea:ff:d9:34:f3:ff:19:15:5f: aa:df:a0:04:33:02:8b:b6:f4:bc:13:09:f8:c3:24: d0:61:40:ec:1e:18:c2:25:bd:8d:66:64:38:8a:46: 3e:df:ae:7d:47:ca:e4:0c:cb:0c:38:a8:17:3f:1b: ad:69:05:30:59:75:b9:4d:0b:37:97:b9:a2:c2:91: aa:05:04:ee:6d:4f:31:d2:78:c4:31:78:99:db:a0: b9:49:e4:9a:da:5f:97:07:03:03:fe:5f:b0:9e:4f: 35:a8:9c:83:56:35:89:59:35:42:3d:9d:08:9c:34: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:28:76:CE:08:15:EB:F0:31:B0:5B:F8:72:46:9F:A8:16:92:BA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f156dafc-4e5a-3bd6-9bea-783cddf20268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.163.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d1:54:a4:2a:5d:be:2b:06:c5:4c:af:16:30:78:a3:b7:6d: 99:35:cf:ea:c6:ca:a4:a4:ca:cb:79:0d:54:be:cd:69:ab:e4: 76:e8:52:42:20:81:29:ed:5d:2d:83:53:b6:01:60:c6:ff:e7: 8c:99:e5:fb:a3:ee:e7:8c:f1:a2:6b:8c:43:e2:c1:ac:7a:cd: 7e:96:26:29:f4:7c:42:57:27:bf:86:6e:4e:d2:12:ea:b5:64: c2:2b:64:e5:92:c0:73:f0:2f:9e:18:80:5b:d0:49:64:ed:22: cf:f8:f5:08:5a:0a:a7:4f:7c:60:03:85:e3:b4:b1:9e:a2:ea: cc:6d:d5:01:5a:6e:09:51:20:b5:19:8d:6e:52:ea:b4:e8:db: 09:e8:3b:ee:c2:8c:0c:ad:6b:69:15:6e:5a:33:d0:62:ed:ff: 81:10:aa:94:71:6c:34:d3:8b:80:4c:11:ed:55:63:3f:d6:aa: 62:bb:51:bb:57:38:33:16:3c:14:f0:ce:9d:20:6c:b3:e7:0a: 42:52:47:5c:01:be:87:bb:98:3b:b7:1e:bc:bc:2c:6b:74:47: 3c:73:48:76:92:09:d9:c1:47:9d:f8:63:14:2e:60:5e:a8:e5: a1:04:80:25:90:78:10:cc:cb:2c:05:5f:9e:3f:69:25:a4:32: f3:fc:e8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkpDwL1N5znswIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTMyODQwYWQtOGFiOS00MWMzLWIzZmEtNTViYjE3NDlmYmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAXSsmcK1S7TQ17SkDCGYjw+9U/4ZayyUXsJ tjGq/ovwm5ZpI/v9I7Cb//gS4Df+IQRBSG3PBHaQ/Gw9fAGx6GFa4kTevUMmwB0O HvF3+7Ho7teemTXxUiEP2vj5vVCVQ3v/DvvAJgg6qAvzBj/VjNPuFPP4V4Iyn9Y6 b650WBnKjoaGctlSFEXG/Ebq/9k08/8ZFV+q36AEMwKLtvS8Ewn4wyTQYUDsHhjC Jb2NZmQ4ikY+3659R8rkDMsMOKgXPxutaQUwWXW5TQs3l7miwpGqBQTubU8x0njE MXiZ26C5SeSa2l+XBwMD/l+wnk81qJyDVjWJWTVCPZ0InDT7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwods4IFevwMbBb+HJGn6gWkrrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjE1NmRhZmMtNGU1YS0z YmQ2LTliZWEtNzgzY2RkZjIwMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3RVKQqXb4rBsVMrxYweKO3bZk1z+rGyqSkyst5DVS+zWmr5HboUkIg gSntXS2DU7YBYMb/54yZ5fuj7ueM8aJrjEPiwax6zX6WJin0fEJXJ7+Gbk7SEuq1 ZMIrZOWSwHPwL54YgFvQSWTtIs/49QhaCqdPfGADheO0sZ6i6sxt1QFabglRILUZ jW5S6rTo2wnoO+7CjAyta2kVbloz0GLt/4EQqpRxbDTTi4BMEe1VYz/WqmK7UbtX ODMWPBTwzp0gbLPnCkJSR1wBvoe7mDu3Hry8LGt0RzxzSHaSCdnBR534YxQuYF6o 5aEEgCWQeBDMyywFX54/aSWkMvP86J8= -----END CERTIFICATE-----Generated at Sat May 10 13:07:06 2025 by rpki-client