$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/349fbfee-61e6-3599-83d6-3e907626e24a.roa File: 349fbfee-61e6-3599-83d6-3e907626e24a.roa (raw, json) Hash identifier: 8cVEYtnpxg/6lY2nHBZHf2BNdcHXOOQdwoOd7QQuBlA= Subject key identifier: 95:56:FD:79:27:33:99:53:B0:AB:DD:C3:2A:C0:59:96:39:48:2E:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ED4FDB58C90A179AF79198A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/349fbfee-61e6-3599-83d6-3e907626e24a.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 7029 IP address blocks: 66.173.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:db:58:c9:0a:17:9a:f7:91:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=fe25ef79-b105-41dc-9833-b2075fe417cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:d1:e7:17:f2:cb:8e:fc:79:fa:4b:22:bc: 8f:4a:f2:db:df:21:fb:53:5d:20:9b:1b:9c:00:5b: 00:4c:b8:77:c0:7c:fd:ae:b4:59:01:ce:07:dc:1f: c2:ba:0c:27:fe:15:11:4a:b2:bf:f1:19:15:95:44: 2e:04:9b:31:2d:25:63:a6:0f:26:0b:17:57:3d:f3: 32:dc:d1:08:bf:7b:a4:c2:bb:22:8a:13:a3:7c:b1: b3:01:73:42:00:02:af:5b:8b:1e:40:ac:c4:6e:40: 16:b4:c3:93:c2:da:91:c5:cc:7c:06:09:22:7a:6c: 87:9a:a3:64:eb:c0:c0:c1:44:ce:a6:7e:70:25:ac: b6:bc:8d:82:69:49:ff:c2:d6:47:f5:81:0d:4e:be: 98:d7:4c:8d:fe:a1:6d:37:61:b8:f0:f9:eb:96:80: 79:11:83:f8:09:57:df:2f:f7:c7:24:ab:16:1c:40: 73:c4:39:8b:ed:8b:78:36:ba:e7:cf:ec:1b:44:90: f2:be:a4:cf:17:7c:5d:8e:3e:d5:f2:2d:d2:03:bb: 97:a2:cb:09:d5:e2:51:09:34:71:39:33:80:e6:e0: 79:c7:7b:f2:62:5a:22:31:b5:40:71:06:5b:ee:10: 33:41:e8:c0:59:47:05:ca:c4:f1:51:3b:3f:6b:6f: 41:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:56:FD:79:27:33:99:53:B0:AB:DD:C3:2A:C0:59:96:39:48:2E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/349fbfee-61e6-3599-83d6-3e907626e24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.173.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ce:d0:54:1a:8a:3b:e3:de:b3:c3:03:21:4e:10:47:d4:43: 4a:88:96:29:52:67:03:0f:9c:0d:0d:47:ab:bd:cf:e9:71:b6: 4a:71:c7:d6:b3:02:89:f3:8a:1b:2c:69:46:2e:7a:bb:b7:20: d2:78:94:5e:32:ee:b7:14:cc:5a:da:e6:7e:d4:37:2f:62:2f: b8:f6:70:24:2d:d1:c9:e3:e9:1b:a0:31:3e:89:ec:37:80:8b: 7e:80:ff:a1:5e:20:ff:26:fe:45:0b:98:41:f0:38:db:6b:09: 28:c2:6e:54:66:4c:21:7b:23:61:e6:3c:90:14:ec:b3:53:be: 1d:f3:79:b4:45:cf:cb:78:a8:56:3f:f6:04:8e:12:ed:e2:2d: aa:8f:ee:7a:0c:66:de:fb:c5:91:09:43:bc:59:dc:48:38:73: 4e:02:5e:35:62:c7:88:d9:74:0c:6b:12:dd:be:60:3b:9d:33: f8:13:6d:50:bc:a1:d9:94:bd:b0:19:5f:80:a8:cb:98:81:d0: 74:49:2f:f3:39:24:7f:47:8c:8b:91:85:06:a8:1b:9c:85:ff: 25:51:d2:96:f7:9b:19:48:1c:de:8d:61:d9:2e:4e:d9:a8:0b: a3:54:44:56:ed:d5:3c:88:67:97:a8:3f:d4:02:ce:af:34:3e: 3c:0d:bc:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9tYyQoXmveRmKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmUyNWVmNzktYjEwNS00MWRjLTk4MzMtYjIwNzVmZTQxN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDnR5xfyy478efpLIryPSvLb3yH7U10gmxuc AFsATLh3wHz9rrRZAc4H3B/Cugwn/hURSrK/8RkVlUQuBJsxLSVjpg8mCxdXPfMy 3NEIv3ukwrsiihOjfLGzAXNCAAKvW4seQKzEbkAWtMOTwtqRxcx8BgkiemyHmqNk 68DAwUTOpn5wJay2vI2CaUn/wtZH9YENTr6Y10yN/qFtN2G48PnrloB5EYP4CVff L/fHJKsWHEBzxDmL7Yt4Nrrnz+wbRJDyvqTPF3xdjj7V8i3SA7uXossJ1eJRCTRx OTOA5uB5x3vyYloiMbVAcQZb7hAzQejAWUcFysTxUTs/a29B8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVW/XknM5lTsKvdwyrAWZY5SC6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzQ5ZmJmZWUtNjFlNi0z NTk5LTgzZDYtM2U5MDc2MjZlMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQq3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLO0FQaijvj3rPDAyFOEEfUQ0qIlilSZwMPnA0NR6u9z+lxtkpxx9az AonzihssaUYueru3INJ4lF4y7rcUzFra5n7UNy9iL7j2cCQt0cnj6RugMT6J7DeA i36A/6FeIP8m/kULmEHwONtrCSjCblRmTCF7I2HmPJAU7LNTvh3zebRFz8t4qFY/ 9gSOEu3iLaqP7noMZt77xZEJQ7xZ3Eg4c04CXjVix4jZdAxrEt2+YDudM/gTbVC8 odmUvbAZX4Coy5iB0HRJL/M5JH9HjIuRhQaoG5yF/yVR0pb3mxlIHN6NYdkuTtmo C6NURFbt1TyIZ5eoP9QCzq80PjwNvAw= -----END CERTIFICATE-----Generated at Fri Jun 6 16:52:44 2025 by rpki-client