$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1dcbd585-830e-3110-a80a-84276743c259.roa File: 1dcbd585-830e-3110-a80a-84276743c259.roa (raw, json) Hash identifier: Uejxtf5ORFjmg4ddAR0zHFu1I4dZqZlL48u32EB/6Fs= Subject key identifier: AC:8A:DD:C0:16:0A:E3:50:30:F1:B3:2F:13:F8:15:D6:48:BA:84:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211250E97C3F640A5CF7200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1dcbd585-830e-3110-a80a-84276743c259.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 206.245.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:25:0e:97:c3:f6:40:a5:cf:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8237f89a-8f8f-485b-9792-c474dc54f6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:f3:de:dc:98:8b:2e:93:20:93:76:cc:70: 76:e6:fb:30:44:e3:3b:b7:b5:35:7b:c7:a2:3a:9a: 77:1c:e3:c4:07:f0:87:1c:d4:98:13:bb:e1:39:1f: 6d:b4:7b:85:22:88:b9:ba:7d:ab:23:0d:00:60:07: 72:ac:1a:f9:18:18:b0:1c:93:c7:12:3c:a3:6f:b0: a4:ff:fd:72:fd:4c:20:cd:5e:ad:1e:8d:8e:75:3d: fa:86:6b:7b:af:7e:d7:8a:26:6b:f9:76:0b:6c:8f: 32:f9:bf:2f:9c:c6:9a:1d:4a:49:68:ce:2b:a8:f9: 31:9c:a4:92:e6:bf:d1:17:d6:72:71:99:53:b9:e4: 1d:9e:4a:27:3a:2d:52:36:5a:96:d1:56:01:66:a9: 54:81:31:d5:44:c8:57:d0:88:79:c8:6b:a9:77:f2: b2:40:db:25:a4:66:15:e6:bc:6b:df:25:cc:6f:93: 9f:c8:8a:df:90:00:93:01:54:5b:47:e6:f9:d5:9d: 80:50:32:76:69:8b:97:7b:3f:ed:fa:1b:63:38:b3: c6:1b:e3:c4:c0:9e:e8:60:aa:05:1d:0f:d6:68:a8: df:86:15:bb:d1:b7:89:52:70:06:f2:55:b2:2e:1f: e8:90:23:b0:f9:47:07:63:6f:3c:c8:8f:a0:59:d2: 7b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8A:DD:C0:16:0A:E3:50:30:F1:B3:2F:13:F8:15:D6:48:BA:84:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1dcbd585-830e-3110-a80a-84276743c259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.245.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0b:67:26:fd:f6:fe:cb:df:d1:93:06:76:79:8b:07:38:9a: 08:23:00:9a:ac:d9:b1:03:0c:62:91:e8:34:15:39:ac:7d:6f: 10:e7:a8:99:5c:1b:1f:4d:38:1f:17:09:52:6d:9a:61:04:70: 17:a6:74:7d:33:ee:16:84:11:ac:3b:59:a1:ec:72:94:12:e6: 2e:9b:f7:c6:e0:c3:a1:c6:b9:75:5c:55:29:ff:72:ce:4a:32: 95:8b:0b:00:36:47:f1:18:e6:c4:b0:05:09:c5:da:3c:77:68: 59:dc:0d:a6:ea:69:fc:30:d0:3a:53:e9:57:fc:e6:83:68:13: 47:b9:ad:4a:ee:bf:28:b7:79:2b:bf:5f:99:c6:12:1f:64:83: f2:69:d4:9f:17:bb:e4:6b:39:3c:06:8a:a6:4d:fa:97:96:32: 5a:c9:60:d5:66:f7:e9:48:19:45:43:0f:d5:6b:83:dd:f3:62: 98:0e:e9:6e:f8:e8:5e:19:00:7f:0c:02:ee:74:e1:19:6a:10: 30:3e:8f:bd:b8:7c:cf:b8:00:c8:9b:68:e0:ec:ea:b4:79:62: 59:13:17:21:32:4d:58:40:d3:77:fc:78:b9:5e:ac:c3:a3:35: 8d:e1:c5:1a:e4:44:b9:72:65:38:94:c7:40:30:a0:92:a6:c4: c0:b7:cf:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESUOl8P2QKXPcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODIzN2Y4OWEtOGY4Zi00ODViLTk3OTItYzQ3NGRjNTRmNmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj/z3tyYiy6TIJN2zHB25vswROM7t7U1e8ei Opp3HOPEB/CHHNSYE7vhOR9ttHuFIoi5un2rIw0AYAdyrBr5GBiwHJPHEjyjb7Ck //1y/UwgzV6tHo2OdT36hmt7r37XiiZr+XYLbI8y+b8vnMaaHUpJaM4rqPkxnKSS 5r/RF9ZycZlTueQdnkonOi1SNlqW0VYBZqlUgTHVRMhX0Ih5yGupd/KyQNslpGYV 5rxr3yXMb5OfyIrfkACTAVRbR+b51Z2AUDJ2aYuXez/t+htjOLPGG+PEwJ7oYKoF HQ/WaKjfhhW70beJUnAG8lWyLh/okCOw+UcHY288yI+gWdJ7uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyK3cAWCuNQMPGzLxP4FdZIuoQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRjYmQ1ODUtODMwZS0z MTEwLWE4MGEtODQyNzY3NDNjMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzvWmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoLZyb99v7L39GTBnZ5iwc4mggjAJqs2bEDDGKR6DQVOax9bxDnqJlc Gx9NOB8XCVJtmmEEcBemdH0z7haEEaw7WaHscpQS5i6b98bgw6HGuXVcVSn/cs5K MpWLCwA2R/EY5sSwBQnF2jx3aFncDabqafww0DpT6Vf85oNoE0e5rUruvyi3eSu/ X5nGEh9kg/Jp1J8Xu+RrOTwGiqZN+peWMlrJYNVm9+lIGUVDD9Vrg93zYpgO6W74 6F4ZAH8MAu504RlqEDA+j724fM+4AMibaODs6rR5YlkTFyEyTVhA03f8eLlerMOj NY3hxRrkRLlyZTiUx0AwoJKmxMC3z98= -----END CERTIFICATE-----Generated at Sat Apr 5 18:40:05 2025 by rpki-client