$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa File: f983c697-6f67-36ce-910e-552ff60e066b.roa (raw, json) Hash identifier: MfNVbe36AAP21GwhCKq94Nhju6dXF0F4aeQLw8+uS/Y= Subject key identifier: EA:19:48:3B:1A:2A:E4:13:B5:90:E7:8B:6E:3B:67:B8:30:81:0D:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A11E617B0FCD3DA6AD3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.35.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:e6:17:b0:fc:d3:da:6a:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fd2db0f1-d129-499b-9174-06444e909c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:5d:3c:ad:aa:81:7b:fd:14:bf:7d:69:c2: 99:97:82:03:15:62:ef:fe:c5:2c:cd:36:21:6d:d1: d0:88:4d:36:3f:c0:52:f4:08:a5:67:f1:e9:f2:38: c9:b2:4d:de:75:eb:07:0a:94:c4:93:f2:f3:55:a9: f1:9b:da:af:e7:e7:50:ea:24:5f:3d:05:ba:1d:99: ef:0f:7a:a5:00:94:ee:5f:9e:8c:7a:86:99:0d:c6: 50:5a:fa:c1:f3:be:54:3b:a0:df:72:18:75:3a:e3: 24:dd:a6:6d:14:30:c4:33:8b:dc:bb:81:24:fd:ce: b5:3b:79:d8:e2:73:6e:2f:ab:e6:f8:6a:8d:13:74: ba:aa:4b:8e:a3:d4:bd:ad:ab:59:e5:6e:26:66:ad: 9b:76:77:be:f5:bd:3c:84:25:2f:28:6a:3c:a4:25: 3c:d0:15:90:09:fe:29:a3:65:b9:22:ba:c2:af:72: a0:5f:a4:49:2c:23:50:ef:01:68:d7:5f:24:55:38: 1f:59:58:28:ba:9d:ad:20:f4:74:58:ae:d9:24:38: ef:d6:aa:cf:b0:ee:13:19:7f:02:d1:e3:45:8c:ae: 6c:4a:6d:2a:17:c1:0d:ed:65:ca:01:02:66:85:82: f4:88:f2:f7:0d:ef:f5:65:46:96:82:9f:1f:3c:f3: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:19:48:3B:1A:2A:E4:13:B5:90:E7:8B:6E:3B:67:B8:30:81:0D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f983c697-6f67-36ce-910e-552ff60e066b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.35.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e2:e4:51:e0:b1:c9:d3:15:ac:45:8f:fd:37:1a:91:68:2d: 42:c6:a3:60:d5:c6:c6:bd:29:88:5a:d7:e9:d3:db:00:6d:23: 37:42:a4:89:c4:b0:4a:8a:df:86:a9:ae:67:d3:2b:12:f6:23: 6a:fb:4a:14:10:9d:b2:43:d8:e7:8e:f6:f7:39:cc:9d:d9:64: 03:66:23:58:38:e0:13:56:e4:36:83:5d:f8:44:cf:1d:6f:73: d2:df:2b:de:95:c9:5f:39:0e:ca:40:23:42:9f:99:0a:79:87: 78:63:a9:b6:15:49:0e:4b:bd:34:87:0c:8e:58:35:fc:f4:18: 92:58:02:28:33:b4:8a:52:54:a1:7a:10:04:0f:f2:48:42:39: 51:ed:6e:0f:47:fa:c0:62:b7:51:6c:81:72:92:b2:52:b5:a5: 4b:e3:c3:1b:22:d5:15:62:a8:7a:39:a8:30:72:e9:fc:e4:ae: 19:e1:49:11:a7:ca:9b:36:a2:ed:0e:16:aa:fa:1f:26:c9:f4: 4b:b2:20:85:79:8a:ef:fa:0c:68:7b:0f:21:a7:7b:03:92:b3: f7:d0:20:39:4c:da:b5:c1:d7:bb:7e:7b:ca:e5:b2:48:32:f3: 84:03:1e:cd:b0:2d:ec:2f:16:32:f3:30:f0:bc:9d:58:59:d4: ab:22:fe:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShHmF7D809pq08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmQyZGIwZjEtZDEyOS00OTliLTkxNzQtMDY0NDRlOTA5YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIBdPK2qgXv9FL99acKZl4IDFWLv/sUszTYh bdHQiE02P8BS9AilZ/Hp8jjJsk3edesHCpTEk/LzVanxm9qv5+dQ6iRfPQW6HZnv D3qlAJTuX56MeoaZDcZQWvrB875UO6Dfchh1OuMk3aZtFDDEM4vcu4Ek/c61O3nY 4nNuL6vm+GqNE3S6qkuOo9S9ratZ5W4mZq2bdne+9b08hCUvKGo8pCU80BWQCf4p o2W5IrrCr3KgX6RJLCNQ7wFo118kVTgfWVgoup2tIPR0WK7ZJDjv1qrPsO4TGX8C 0eNFjK5sSm0qF8EN7WXKAQJmhYL0iPL3De/1ZUaWgp8fPPMBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoZSDsaKuQTtZDni247Z7gwgQ1BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk4M2M2OTctNmY2Ny0z NmNlLTkxMGUtNTUyZmY2MGUwNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQiOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAji5FHgscnTFaxFj/03GpFoLULGo2DVxsa9KYha1+nT2wBtIzdCpInE sEqK34aprmfTKxL2I2r7ShQQnbJD2OeO9vc5zJ3ZZANmI1g44BNW5DaDXfhEzx1v c9LfK96VyV85DspAI0KfmQp5h3hjqbYVSQ5LvTSHDI5YNfz0GJJYAigztIpSVKF6 EAQP8khCOVHtbg9H+sBit1FsgXKSslK1pUvjwxsi1RViqHo5qDBy6fzkrhnhSRGn yps2ou0OFqr6HybJ9EuyIIV5iu/6DGh7DyGnewOSs/fQIDlM2rXB17t+e8rlskgy 84QDHs2wLewvFjLzMPC8nVhZ1Ksi/ps= -----END CERTIFICATE-----Generated at Sat May 10 10:20:31 2025 by rpki-client