$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa File: 520be285-2429-3ad0-8ae4-5cc51f14e87e.roa (raw, json) Hash identifier: KDtVMcYgyTzEVjoUq/xAWdmzvYJGVaPGyEl0gMRCNjU= Subject key identifier: F6:F4:F8:45:6B:4F:AD:D3:5B:5C:8C:50:5B:38:6F:31:C0:CF:F6:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111ADCF0391FD1CF50EA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 66.0.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1a:dc:f0:39:1f:d1:cf:50:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0a820cfb-78af-46b2-ab0a-5f0cc8fe1ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:3f:74:78:d4:4c:b8:72:ad:7d:6a:59:69: c5:57:c1:32:23:48:32:ab:62:fe:06:6e:23:61:04: 21:70:ea:78:9f:79:0f:a3:13:89:ca:11:7c:dd:3a: a0:9e:81:b6:f2:30:cd:f4:72:63:43:0f:f6:23:e4: 9e:b6:7e:bb:d2:f4:8c:dc:c0:ff:05:56:79:8e:34: 9a:49:0a:49:54:c6:00:55:ce:1e:cc:79:2d:cf:03: 0a:ca:23:4d:d2:18:64:ee:83:5a:74:21:d0:02:8a: 2a:55:65:33:de:a6:37:eb:c4:37:1f:6b:dd:77:b1: aa:e2:2f:39:a0:43:7b:cd:6d:c8:8f:ac:27:45:45: a5:1f:c8:8d:65:ca:d9:4e:91:12:ca:4c:73:1a:6e: b1:b3:a3:8a:96:20:97:7b:64:27:3a:81:75:3b:59: 33:e8:4e:f0:c3:a5:87:3b:69:19:2b:1f:4f:57:08: 6d:f8:f6:28:a0:87:28:fe:61:f1:43:a2:e5:6f:2b: 2f:8e:1d:21:9f:36:04:27:18:5c:65:fa:68:c1:35: 13:7d:81:39:4f:69:57:ec:ed:e6:7a:84:f2:24:af: c9:ef:5e:72:7b:7a:55:87:18:38:b1:88:51:44:19: b3:78:03:7f:95:ac:d9:e9:3b:36:1b:28:3f:d8:91: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:F8:45:6B:4F:AD:D3:5B:5C:8C:50:5B:38:6F:31:C0:CF:F6:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/520be285-2429-3ad0-8ae4-5cc51f14e87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.0.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:71:b3:10:b2:47:68:7c:ae:ea:ae:32:4e:6c:99:53:92:9c: 7b:36:e8:e8:bc:e1:ad:1d:4e:a8:c1:75:b2:86:69:6e:96:8e: 9b:2b:ca:a8:58:ab:94:1a:d5:75:b9:e5:7a:c6:f0:7b:20:d9: 54:1b:d4:4e:5a:f1:eb:aa:5c:01:4e:21:23:b3:ad:59:ce:72: 24:6d:1a:e8:1d:5c:58:ad:cb:64:86:c2:73:f5:88:25:6d:ed: f6:5e:ab:84:f2:b5:15:0e:12:3c:0d:25:d4:44:f9:28:60:a8: 17:3e:da:1b:34:d4:fe:f7:71:d9:b4:97:61:f6:3b:a3:c7:d8: 2a:23:d9:e2:e4:b8:81:ed:ee:2b:98:88:1f:50:24:24:2e:f9: 5d:5d:9d:a6:3e:d9:b2:1b:9f:0b:3d:f1:39:82:76:96:b1:c7: 83:aa:7c:80:35:9f:4a:d5:76:6d:ed:98:95:a7:eb:f0:8e:83: 2c:44:37:34:13:2d:12:eb:6b:f2:b9:63:9e:e2:a5:67:d2:d6: 95:26:3e:e5:48:1c:93:7d:e1:de:ca:3f:a1:60:1e:5f:fb:46: f3:a0:4b:05:c3:1c:2f:91:82:4f:16:12:7c:23:48:61:1b:ce: 65:24:ad:11:70:0b:b4:fb:c0:5f:b4:cc:38:77:97:59:ec:11: 6d:85:ed:2f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERrc8Dkf0c9Q6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGE4MjBjZmItNzhhZi00NmIyLWFiMGEtNWYwY2M4ZmUxYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7E/dHjUTLhyrX1qWWnFV8EyI0gyq2L+Bm4j YQQhcOp4n3kPoxOJyhF83TqgnoG28jDN9HJjQw/2I+Setn670vSM3MD/BVZ5jjSa SQpJVMYAVc4ezHktzwMKyiNN0hhk7oNadCHQAooqVWUz3qY368Q3H2vdd7Gq4i85 oEN7zW3Ij6wnRUWlH8iNZcrZTpESykxzGm6xs6OKliCXe2QnOoF1O1kz6E7ww6WH O2kZKx9PVwht+PYooIco/mHxQ6Llbysvjh0hnzYEJxhcZfpowTUTfYE5T2lX7O3m eoTyJK/J715ye3pVhxg4sYhRRBmzeAN/lazZ6Ts2Gyg/2JGOMQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPb0+EVrT63TW1yMUFs4bzHAz/bOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwYmUyODUtMjQyOS0z YWQwLThhZTQtNWNjNTFmMTRlODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQgAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiHGzELJHaHyu6q4yTmyZU5Kcezbo6LzhrR1OqMF1soZpbpaOmyvKqFir lBrVdbnlesbweyDZVBvUTlrx66pcAU4hI7OtWc5yJG0a6B1cWK3LZIbCc/WIJW3t 9l6rhPK1FQ4SPA0l1ET5KGCoFz7aGzTU/vdx2bSXYfY7o8fYKiPZ4uS4ge3uK5iI H1AkJC75XV2dpj7ZshufCz3xOYJ2lrHHg6p8gDWfStV2be2Ylafr8I6DLEQ3NBMt Eutr8rljnuKlZ9LWlSY+5Ugck33h3so/oWAeX/tG86BLBcMcL5GCTxYSfCNIYRvO ZSStEXALtPvAX7TMOHeXWewRbYXtLw== -----END CERTIFICATE-----Generated at Mon Apr 28 21:08:04 2025 by rpki-client