$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa File: ade62d43-8160-3a6f-a892-94c41cddd2b7.roa (raw, json) Hash identifier: iaDqp+zOEpt6j4XNm88/Sbls6GAnclmL1Zgn82jzfWI= Subject key identifier: 2C:D9:23:F6:75:7E:F7:55:3C:F3:C9:14:B3:23:A6:80:C0:22:5E:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3BDBDB18ECB518BCDC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.202.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:db:db:18:ec:b5:18:bc:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=28c1cbab-cf70-49e3-adcb-9f0140665ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:00:4b:5f:c1:c9:c3:21:ab:2b:80:4f:02: de:29:24:3a:3a:27:a6:4b:c0:42:f6:1f:c0:5c:2c: 29:0e:6b:4c:37:9b:8c:d8:85:eb:ad:33:59:15:f0: bc:db:1c:cb:d5:73:8e:51:bf:4f:44:40:0c:e5:34: c5:7b:07:f6:74:50:76:41:2d:88:fe:55:bc:67:19: 9b:5b:67:5e:63:8d:7f:ce:8e:e0:df:8a:ff:5b:d0: f8:09:73:ff:6c:9f:1e:b0:fd:82:04:b1:fd:bd:db: 34:f6:0d:dd:80:aa:40:f0:10:81:d9:68:73:5c:cb: df:f0:db:c3:54:03:d2:6b:9a:7b:04:16:37:bd:00: 1b:57:2c:1e:ba:d2:58:eb:8d:19:dc:96:b3:06:57: 64:b9:f4:64:ce:0f:a6:39:b8:17:a4:82:04:ab:05: 40:31:0a:9f:f7:17:14:88:4b:19:b3:0f:fe:79:1c: a4:cd:55:97:ee:04:ac:58:33:36:1c:4f:ea:24:e3: 70:40:b2:9b:1b:26:82:05:19:f6:66:b1:f4:ff:4c: 9a:e3:1b:40:08:02:bd:1c:a7:d5:cf:0a:58:a8:f3: 22:95:9b:6c:40:4d:14:91:8f:4b:13:ff:af:3c:0e: da:01:64:39:fd:f5:82:7a:ad:94:dd:9a:09:11:f2: 04:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D9:23:F6:75:7E:F7:55:3C:F3:C9:14:B3:23:A6:80:C0:22:5E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ade62d43-8160-3a6f-a892-94c41cddd2b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.202.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:66:94:fb:ed:62:5b:87:64:80:46:cc:3e:2b:24:90:f0:5f: 1d:5c:b5:d7:07:b3:24:2f:e8:a7:d7:1b:51:c4:24:cc:d5:dd: 9e:9c:e7:77:66:7b:da:fc:c7:0a:20:d6:d7:dc:14:dc:7d:cc: b2:e4:aa:15:4d:53:1e:91:10:5b:83:fc:72:69:b0:66:05:66: c9:e1:b0:98:3f:11:69:fa:8f:ac:4f:34:a7:a2:f4:0e:12:87: bb:14:11:59:17:44:be:47:72:ef:d5:86:b5:98:42:71:de:a2: b6:7d:ff:69:14:37:b3:3f:44:69:e9:0c:6e:4c:de:e3:f3:b4: 97:57:68:77:1b:9e:77:85:bd:8e:3e:13:77:7e:d2:82:60:60: 35:ec:8f:ce:69:bf:e8:cc:4c:89:4c:7e:19:48:24:7a:a4:b1: e8:aa:24:66:10:83:9b:98:54:84:ac:19:0a:78:79:36:52:a6: 2a:54:0c:e3:32:2b:bb:4d:fd:00:ae:b5:58:81:75:d9:3e:58: 44:f5:b6:df:d8:07:47:93:64:cf:4c:88:11:2f:77:30:9b:79: a1:f6:4c:06:90:18:79:0a:1d:d3:17:33:92:92:a3:0f:4d:4f: 52:e7:59:58:48:e0:b8:a3:ea:01:4a:3c:54:00:e1:54:be:43: 40:f9:77:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjvb2xjstRi83IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjhjMWNiYWItY2Y3MC00OWUzLWFkY2ItOWYwMTQwNjY1ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhYAS1/BycMhqyuATwLeKSQ6OiemS8BC9h/A XCwpDmtMN5uM2IXrrTNZFfC82xzL1XOOUb9PREAM5TTFewf2dFB2QS2I/lW8Zxmb W2deY41/zo7g34r/W9D4CXP/bJ8esP2CBLH9vds09g3dgKpA8BCB2WhzXMvf8NvD VAPSa5p7BBY3vQAbVyweutJY640Z3JazBldkufRkzg+mObgXpIIEqwVAMQqf9xcU iEsZsw/+eRykzVWX7gSsWDM2HE/qJONwQLKbGyaCBRn2ZrH0/0ya4xtACAK9HKfV zwpYqPMilZtsQE0UkY9LE/+vPA7aAWQ5/fWCeq2U3ZoJEfIESwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzZI/Z1fvdVPPPJFLMjpoDAIl6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRlNjJkNDMtODE2MC0z YTZmLWE4OTItOTRjNDFjZGRkMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQsoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtmlPvtYluHZIBGzD4rJJDwXx1ctdcHsyQv6KfXG1HEJMzV3Z6c53dm e9r8xwog1tfcFNx9zLLkqhVNUx6REFuD/HJpsGYFZsnhsJg/EWn6j6xPNKei9A4S h7sUEVkXRL5Hcu/VhrWYQnHeorZ9/2kUN7M/RGnpDG5M3uPztJdXaHcbnneFvY4+ E3d+0oJgYDXsj85pv+jMTIlMfhlIJHqkseiqJGYQg5uYVISsGQp4eTZSpipUDOMy K7tN/QCutViBddk+WET1tt/YB0eTZM9MiBEvdzCbeaH2TAaQGHkKHdMXM5KSow9N T1LnWVhI4Lij6gFKPFQA4VS+Q0D5dzQ= -----END CERTIFICATE-----Generated at Sun Jun 15 11:46:32 2025 by rpki-client