$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa File: f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa (raw, json) Hash identifier: TaHDWPcIxqnYEdOgWNlEQOWz1zgzshoLE3WtqY5qjhg= Subject key identifier: 09:6E:03:7A:4D:ED:C6:C8:96:36:E8:EE:CD:B4:42:22:4B:9D:59:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4A37CDE53F3247C589E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 29877 IP address blocks: 66.29.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:37:cd:e5:3f:32:47:c5:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=337d0de5-2d27-4c7a-9fb2-7eef09dc67bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:16:95:5f:16:76:59:aa:0f:65:48:fe:9a: d2:74:aa:47:49:91:e3:2b:70:38:dc:e9:5a:3a:dd: 54:a7:d5:e1:ad:d1:6b:dc:81:46:d5:71:4a:88:b8: 98:75:4a:a5:26:53:8a:20:96:b2:9d:c9:aa:0f:a4: a4:5f:4a:83:5e:13:6c:7b:38:26:09:b1:29:3b:9b: 29:52:30:c5:7b:68:d1:7f:c4:d9:fb:7b:2b:bc:27: 72:35:7c:73:00:c6:21:08:86:03:9a:b1:58:c9:57: 4a:40:2d:1d:be:19:27:8c:20:19:64:d6:8a:4e:83: 6d:e5:e6:46:e7:a9:9d:4e:a7:40:a2:09:75:16:5a: 78:69:ec:bb:b4:ca:a2:64:36:0e:58:65:d1:a7:87: 98:31:e8:9e:90:d3:17:a1:ac:78:ea:35:14:bc:75: 54:be:86:2c:af:3d:bd:ad:be:54:05:18:0d:e5:06: 4e:37:f1:80:b9:81:6e:26:e4:3a:95:45:c7:da:c4: 65:e2:9f:6f:38:db:50:54:60:91:06:66:85:a7:4b: fa:a8:b3:53:dd:f8:be:e8:41:0b:db:83:ce:99:03: fb:92:80:11:5e:93:47:c9:15:10:a5:1e:60:60:98: eb:fd:4e:e4:3b:74:2d:14:bb:e2:04:89:9d:14:19: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:03:7A:4D:ED:C6:C8:96:36:E8:EE:CD:B4:42:22:4B:9D:59:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9fe9716-f269-3aab-b290-8b097e7b8bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:04:8e:d0:1f:c1:46:b9:16:04:b3:bc:13:b5:77:a6:cb:c7: 1a:0b:11:fd:0d:15:ee:0c:f0:e1:b5:ac:be:0f:e7:2f:bf:0f: 8a:41:69:d6:14:0d:55:e6:26:cd:19:a6:b1:9e:0f:da:ce:c4: f4:79:52:28:d7:7f:f9:5f:2f:79:7b:88:99:70:9b:0d:aa:11: 72:be:37:2a:e5:9b:bf:03:21:7f:65:51:04:c9:a3:29:56:4b: bc:b1:ea:7d:f2:ec:f2:b8:c5:5e:5f:68:66:13:e5:0f:c2:c2: 5e:a1:20:dd:7f:40:dc:bc:e9:84:4c:15:c1:29:5c:40:63:00: 4c:22:c2:5d:ba:0f:4c:64:66:07:5a:b9:a7:04:17:18:b1:cc: c9:5d:61:a5:17:de:b7:2a:05:e6:84:00:b3:56:fa:bf:55:f5: 67:b3:0b:1f:d1:df:0f:fd:2f:8a:a2:99:ae:7d:24:3c:70:1c: 0c:d7:a3:1f:81:5d:59:60:f6:3a:79:85:52:9f:ef:2f:48:35: a8:ee:89:93:22:9a:ff:39:90:88:d7:cd:7a:1a:82:7e:68:70: 70:18:36:40:94:ff:02:04:ca:dc:da:c0:b6:35:31:aa:9e:78: a9:c4:d4:51:80:b6:4f:c3:15:ed:cd:7b:b4:b3:bb:03:a2:0e: 1b:db:3c:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSko3zeU/MkfFieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzM3ZDBkZTUtMmQyNy00YzdhLTlmYjItN2VlZjA5ZGM2N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf4WlV8WdlmqD2VI/prSdKpHSZHjK3A43Ola Ot1Up9XhrdFr3IFG1XFKiLiYdUqlJlOKIJayncmqD6SkX0qDXhNsezgmCbEpO5sp UjDFe2jRf8TZ+3srvCdyNXxzAMYhCIYDmrFYyVdKQC0dvhknjCAZZNaKToNt5eZG 56mdTqdAogl1Flp4aey7tMqiZDYOWGXRp4eYMeiekNMXoax46jUUvHVUvoYsrz29 rb5UBRgN5QZON/GAuYFuJuQ6lUXH2sRl4p9vONtQVGCRBmaFp0v6qLNT3fi+6EEL 24POmQP7koARXpNHyRUQpR5gYJjr/U7kO3QtFLviBImdFBm6pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAluA3pN7cbIljbo7s20QiJLnVmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjlmZTk3MTYtZjI2OS0z YWFiLWIyOTAtOGIwOTdlN2I4YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQh3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4EjtAfwUa5FgSzvBO1d6bLxxoLEf0NFe4M8OG1rL4P5y+/D4pBadYU DVXmJs0ZprGeD9rOxPR5UijXf/lfL3l7iJlwmw2qEXK+Nyrlm78DIX9lUQTJoylW S7yx6n3y7PK4xV5faGYT5Q/Cwl6hIN1/QNy86YRMFcEpXEBjAEwiwl26D0xkZgda uacEFxixzMldYaUX3rcqBeaEALNW+r9V9WezCx/R3w/9L4qima59JDxwHAzXox+B XVlg9jp5hVKf7y9INajuiZMimv85kIjXzXoagn5ocHAYNkCU/wIEytzawLY1Maqe eKnE1FGAtk/DFe3Ne7SzuwOiDhvbPJ0= -----END CERTIFICATE-----Generated at Sat May 10 22:01:37 2025 by rpki-client