$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529856b4-90e6-34c2-bd8e-932879f89b18.roa File: 529856b4-90e6-34c2-bd8e-932879f89b18.roa (raw, json) Hash identifier: udZ/1IYGno0NwVfiuiYh5sBzqf4dWLahPt9X9mJgD9A= Subject key identifier: DC:61:32:9A:35:AD:BF:27:AF:24:72:D4:9C:9D:76:10:A0:33:7C:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A331B279B00974FD9C1DE7940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529856b4-90e6-34c2-bd8e-932879f89b18.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 66.32.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:27:9b:00:97:4f:d9:c1:de:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=60feeba1-70b2-450e-b863-91963d51c41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:9d:dc:40:b8:c2:ec:e3:f0:a8:26:17:66: e6:93:8b:85:c7:49:7a:66:ce:5b:89:1d:43:f1:e0: 7d:36:d5:fc:4f:77:a0:49:2f:e5:10:21:65:f4:13: a6:79:94:d3:13:d4:67:1c:1e:14:99:33:96:53:01: 27:11:66:d1:fa:7c:c0:06:6e:98:1d:04:13:0b:0e: a1:76:21:ef:04:f0:fa:08:14:6b:1d:af:2e:81:7a: e3:5e:8b:dd:8c:86:c0:4a:cf:3e:85:2f:90:41:cb: 3d:4a:e5:e6:8b:4f:15:ad:96:bc:48:60:91:6e:a3: c6:ce:f9:0c:e8:4d:9d:0d:5a:9c:bf:6b:5b:89:0b: 95:6a:7f:7a:5f:5b:f7:50:bd:16:25:06:50:48:32: 7f:75:a3:94:c8:a5:d6:47:15:69:07:b8:f8:a9:02: b6:4d:9c:43:66:c8:4f:0b:0a:f3:61:7c:7c:65:db: 5e:5b:64:d2:e1:0a:b5:37:81:cc:e5:d7:b9:d4:51: 3d:6a:65:d8:bf:40:52:50:38:f3:90:d1:0e:7f:67: 64:43:fb:6f:bd:d3:76:0c:2b:e0:4b:ec:b7:ea:1c: a7:ba:f5:52:6f:09:7e:da:8d:91:29:30:1a:2c:df: 2a:41:55:c1:c1:64:04:44:3b:59:61:76:26:b4:4a: 89:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:61:32:9A:35:AD:BF:27:AF:24:72:D4:9C:9D:76:10:A0:33:7C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529856b4-90e6-34c2-bd8e-932879f89b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.32.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1b:23:d1:5b:27:9f:18:10:70:79:98:6f:6f:6c:a4:b4:45: c7:d6:29:36:65:b1:68:6f:91:da:89:f9:e8:07:cf:08:6b:f5: 81:66:84:c2:19:97:3d:c8:33:67:a8:1f:ba:10:6c:9d:bb:ce: ca:6e:eb:aa:8c:88:c9:b6:3a:31:b1:62:6a:42:8c:29:1d:53: a8:ca:5e:e0:6e:3c:87:c4:8f:56:d0:3b:04:26:5a:cd:75:6e: 41:b2:89:52:da:c3:9f:e9:d3:c1:de:f5:63:ae:83:be:e0:29: 81:a7:7c:53:96:83:d1:b3:29:86:2c:85:08:4d:c7:3b:f8:47: b4:3c:c3:08:45:15:6c:c0:97:75:93:43:20:d7:24:aa:8d:2a: 07:32:3d:a5:04:a7:15:f8:7d:e2:ee:c2:7c:20:46:80:82:d4: 8e:5b:a7:ac:29:b5:89:a1:1f:1d:b2:db:47:3f:d3:5e:4a:88: 31:79:26:89:cc:29:b9:0a:43:58:bd:cf:ac:e6:44:79:f5:75: cc:0c:b7:2c:aa:94:24:5a:dc:39:0c:1f:79:b1:26:7f:96:4c: 93:0a:d8:4c:46:ca:18:1c:f0:a5:ce:02:ad:91:24:9e:bf:14: dc:61:a9:e0:35:64:4c:e3:86:e2:7d:38:60:c0:6c:60:83:25: a6:bc:b4:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGyebAJdP2cHeeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk NjBmZWViYTEtNzBiMi00NTBlLWI4NjMtOTE5NjNkNTFjNDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBed3EC4wuzj8KgmF2bmk4uFx0l6Zs5biR1D 8eB9NtX8T3egSS/lECFl9BOmeZTTE9RnHB4UmTOWUwEnEWbR+nzABm6YHQQTCw6h diHvBPD6CBRrHa8ugXrjXovdjIbASs8+hS+QQcs9SuXmi08VrZa8SGCRbqPGzvkM 6E2dDVqcv2tbiQuVan96X1v3UL0WJQZQSDJ/daOUyKXWRxVpB7j4qQK2TZxDZshP CwrzYXx8ZdteW2TS4Qq1N4HM5de51FE9amXYv0BSUDjzkNEOf2dkQ/tvvdN2DCvg S+y36hynuvVSbwl+2o2RKTAaLN8qQVXBwWQERDtZYXYmtEqJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxhMpo1rb8nryRy1JyddhCgM3yxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTI5ODU2YjQtOTBlNi0z NGMyLWJkOGUtOTMyODc5Zjg5YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiBlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEbI9FbJ58YEHB5mG9vbKS0RcfWKTZlsWhvkdqJ+egHzwhr9YFmhMIZ lz3IM2eoH7oQbJ27zspu66qMiMm2OjGxYmpCjCkdU6jKXuBuPIfEj1bQOwQmWs11 bkGyiVLaw5/p08He9WOug77gKYGnfFOWg9GzKYYshQhNxzv4R7Q8wwhFFWzAl3WT QyDXJKqNKgcyPaUEpxX4feLuwnwgRoCC1I5bp6wptYmhHx2y20c/015KiDF5JonM KbkKQ1i9z6zmRHn1dcwMtyyqlCRa3DkMH3mxJn+WTJMK2ExGyhgc8KXOAq2RJJ6/ FNxhqeA1ZEzjhuJ9OGDAbGCDJaa8tE0= -----END CERTIFICATE-----Generated at Tue Jun 17 16:19:37 2025 by rpki-client