$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1616a229-4a83-3a4e-a336-4b4352b4e0ab.roa File: 1616a229-4a83-3a4e-a336-4b4352b4e0ab.roa (raw, json) Hash identifier: XXJhyKnCr8xpbUChrbfxAEPjihHwUpeejnbfI58Y8Bc= Subject key identifier: 8E:77:6C:31:02:C7:0E:6D:CC:70:67:D5:5A:6C:91:32:0D:70:9C:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21121912F48E52463067180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1616a229-4a83-3a4e-a336-4b4352b4e0ab.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 155.212.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:21:91:2f:48:e5:24:63:06:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5d95f933-79a3-4f0e-87f4-c46567b40cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:2a:13:37:62:94:8f:12:05:13:67:c4:91: 53:62:8a:5c:28:1b:d1:03:01:d3:9a:49:b4:42:27: 9e:b0:bf:96:b1:84:03:5a:41:5f:bd:ac:b7:54:05: 59:bb:c5:ea:29:83:4d:06:41:ea:63:53:e8:d8:93: a8:4c:ad:97:6b:f4:bf:9c:e4:ac:39:db:aa:e4:92: 68:19:01:87:e8:07:43:51:fd:6a:7e:6e:d6:00:34: bc:cf:ee:06:b2:ce:29:d8:26:92:f8:21:26:9a:b2: 18:9a:79:a9:cf:fb:3a:66:d1:62:46:b0:7e:2b:19: 31:c6:7f:ef:99:1b:96:a7:25:2e:13:89:b5:f6:61: 6d:f3:b0:07:6c:ba:ac:10:51:dc:93:89:d4:5c:f4: 4d:83:92:a8:5c:3c:09:38:87:32:8f:d3:41:05:e1: 97:d3:de:e6:4f:b1:d5:61:1b:d1:de:30:9f:3e:c5: ce:14:aa:3a:bc:20:d8:06:8a:70:53:d9:4d:c3:b2: eb:14:9c:a2:df:5e:8f:97:ff:6e:cc:c8:82:92:9e: f0:d3:08:27:f9:37:0b:fd:30:60:d4:33:df:e3:4c: 90:f8:15:73:7a:f4:99:ff:bc:cc:fa:68:a0:10:bf: 33:92:8d:f5:9b:21:91:62:fa:e1:a0:6b:c4:05:ce: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:6C:31:02:C7:0E:6D:CC:70:67:D5:5A:6C:91:32:0D:70:9C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1616a229-4a83-3a4e-a336-4b4352b4e0ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 155.212.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d3:e0:6d:d7:05:48:ce:61:e1:b1:3b:7c:1e:d8:98:91:91: 6e:2d:7e:76:a1:d7:28:61:bb:96:06:dc:f7:a2:51:53:97:7f: de:68:9e:e5:02:2b:86:a2:9e:c9:25:66:cd:48:4d:c4:b5:86: 6e:0f:7f:b1:9b:dc:cb:54:c6:c7:f4:81:f7:5c:72:4e:0f:50: 52:55:e9:d6:07:31:d2:41:5b:48:f8:00:3e:cc:c6:16:be:8e: 72:58:5d:16:cc:9a:35:d6:7c:ce:be:97:ad:8e:00:e2:8b:46: 5f:2c:f1:aa:50:ac:77:74:a1:35:80:60:87:b6:b1:42:e8:f1: c7:91:8e:04:df:49:50:f8:a2:d2:24:49:9e:1b:0c:45:67:27: ad:1c:ea:b3:52:00:53:43:70:bc:0a:de:0a:78:0f:d1:54:fb: 30:9b:9e:a2:41:90:4e:5a:06:2f:3c:03:9e:77:11:8c:be:20: 6e:c2:12:b9:03:ac:d4:db:64:86:1c:9b:b3:04:a3:df:1a:f4: 89:a8:9a:29:62:11:25:dc:50:ca:bc:a8:1c:dc:d5:b1:a0:19: 29:f4:e0:94:e3:6b:ae:43:63:57:3d:22:50:97:2b:b0:bb:ea: ce:68:4e:70:1c:84:de:4b:bb:cc:89:d4:cf:c0:76:69:1f:1e: 0e:61:e6:c4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSESGRL0jlJGMGcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NWQ5NWY5MzMtNzlhMy00ZjBlLTg3ZjQtYzQ2NTY3YjQwY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3sqEzdilI8SBRNnxJFTYopcKBvRAwHTmkm0 QieesL+WsYQDWkFfvay3VAVZu8XqKYNNBkHqY1Po2JOoTK2Xa/S/nOSsOduq5JJo GQGH6AdDUf1qfm7WADS8z+4Gss4p2CaS+CEmmrIYmnmpz/s6ZtFiRrB+Kxkxxn/v mRuWpyUuE4m19mFt87AHbLqsEFHck4nUXPRNg5KoXDwJOIcyj9NBBeGX097mT7HV YRvR3jCfPsXOFKo6vCDYBopwU9lNw7LrFJyi316Pl/9uzMiCkp7w0wgn+TcL/TBg 1DPf40yQ+BVzevSZ/7zM+migEL8zko31myGRYvrhoGvEBc6WQwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI53bDECxw5tzHBn1VpskTINcJwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTYxNmEyMjktNGE4My0z YTRlLWEzMzYtNGI0MzUyYjRlMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm9QwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACtPgbdcFSM5h4bE7fB7YmJGRbi1+dqHXKGG7lgbc96JRU5d/3mie5QIr hqKeySVmzUhNxLWGbg9/sZvcy1TGx/SB91xyTg9QUlXp1gcx0kFbSPgAPszGFr6O clhdFsyaNdZ8zr6XrY4A4otGXyzxqlCsd3ShNYBgh7axQujxx5GOBN9JUPii0iRJ nhsMRWcnrRzqs1IAU0NwvAreCngP0VT7MJueokGQTloGLzwDnncRjL4gbsISuQOs 1NtkhhybswSj3xr0iaiaKWIRJdxQyryoHNzVsaAZKfTglONrrkNjVz0iUJcrsLvq zmhOcByE3ku7zInUz8B2aR8eDmHmxA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:54 2025 by rpki-client