$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa File: 28977606-a719-313f-8175-4fb62757958c.roa (raw, json) Hash identifier: sLDDoclZqeXygylAnjR9s2gi+lLF2kPMoOTj9wJ3nVA= Subject key identifier: E6:2A:9D:03:5A:01:8A:76:4E:57:94:EC:A6:F6:17:6D:2B:49:A7:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21103EF0F02D48651306580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 29877 IP address blocks: 66.163.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:03:ef:0f:02:d4:86:51:30:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f2344a8d-8e6b-4a4a-8d05-d6fc3f2e861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:08:2d:3c:ed:5c:6b:34:b8:db:7b:a5:cb: 0f:95:5d:ab:67:0e:a6:77:cf:06:fc:cf:fb:da:63: 53:1c:71:97:b4:48:43:8c:84:c7:06:1d:25:ba:4e: 0f:c6:56:68:6c:0a:f9:89:26:9b:7e:fc:e3:b1:99: d4:87:12:71:9b:39:21:30:19:1b:7b:b8:c3:b9:25: 52:ca:85:6d:b8:d3:23:cc:ef:36:7c:06:5b:8c:67: 06:5b:35:b9:85:3b:7e:32:3d:47:6c:92:0b:4b:e6: eb:19:d6:1f:21:79:e5:80:26:71:e9:46:ba:eb:1a: c0:ea:5b:63:d4:c3:a1:9e:23:b0:51:18:58:f5:f6: ee:52:7e:80:c1:22:65:e9:77:26:04:01:f5:52:59: 8f:74:d1:aa:26:99:33:d5:06:97:44:5b:ef:f7:ef: 08:c9:9f:0c:a6:78:22:98:5e:0d:f2:18:01:c5:0f: df:39:00:1e:70:b0:83:be:02:b7:eb:e4:2d:f7:b2: b6:7b:03:35:c5:5c:b8:1d:23:84:ba:98:27:88:43: f1:c2:3d:64:82:0a:dc:e1:ce:ad:f3:56:73:1a:b3: 2a:d2:c4:52:5c:a7:a9:51:78:95:7e:28:9b:3a:67: 4a:2c:8a:bb:4d:14:2a:c0:e0:f1:57:56:4d:1a:5a: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2A:9D:03:5A:01:8A:76:4E:57:94:EC:A6:F6:17:6D:2B:49:A7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28977606-a719-313f-8175-4fb62757958c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.163.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b8:8a:64:f4:9f:c6:61:71:20:45:75:f2:67:66:6f:25:1f: 90:e9:3b:71:d5:cb:e2:16:63:0c:a1:d1:ce:5a:5c:ec:d1:dd: 36:52:a1:d0:7e:f0:42:fa:9a:a9:c8:ba:59:ae:8d:fd:6f:0d: cb:1d:09:1b:c1:7a:58:ce:ee:2a:76:5e:56:e3:ba:6b:70:6b: 28:bc:bc:c0:f7:f2:67:e1:d1:bc:ed:92:8e:80:57:8d:7b:89: aa:12:17:c2:72:f6:16:5b:e6:f4:c3:cf:13:70:47:f3:27:6b: e1:78:7a:a7:d7:a6:1f:60:df:2c:0b:02:3c:5a:32:dc:45:eb: 40:33:7d:30:f4:62:36:6d:14:d4:80:66:f6:3c:c0:9d:ca:d0: 0b:21:0a:81:11:cd:ec:5f:a1:5a:d8:f7:1d:ec:31:47:26:a6: 31:7e:57:14:10:aa:45:51:fe:6a:99:80:45:0a:a6:89:f5:df: dd:5b:f6:cb:36:0e:ea:0a:f4:fb:19:5b:6d:6c:89:1d:3b:87: 24:a7:8a:0a:9c:b5:29:53:70:ee:be:b7:40:f8:13:63:58:83: d5:22:3f:c3:27:9f:cc:95:7f:03:b3:a7:7f:b8:61:9e:fc:66: 63:90:aa:8d:9a:e4:95:e8:09:1f:51:01:13:ef:1e:22:54:53: 86:0c:b7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQPvDwLUhlEwZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjIzNDRhOGQtOGU2Yi00YTRhLThkMDUtZDZmYzNmMmU4NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IQILTztXGs0uNt7pcsPlV2rZw6md88G/M/7 2mNTHHGXtEhDjITHBh0luk4PxlZobAr5iSabfvzjsZnUhxJxmzkhMBkbe7jDuSVS yoVtuNMjzO82fAZbjGcGWzW5hTt+Mj1HbJILS+brGdYfIXnlgCZx6Ua66xrA6ltj 1MOhniOwURhY9fbuUn6AwSJl6XcmBAH1UlmPdNGqJpkz1QaXRFvv9+8IyZ8Mpngi mF4N8hgBxQ/fOQAecLCDvgK36+Qt97K2ewM1xVy4HSOEupgniEPxwj1kggrc4c6t 81ZzGrMq0sRSXKepUXiVfiibOmdKLIq7TRQqwODxV1ZNGlqIewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYqnQNaAYp2TleU7Kb2F20rSaesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjg5Nzc2MDYtYTcxOS0z MTNmLTgxNzUtNGZiNjI3NTc5NThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQqNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG64imT0n8ZhcSBFdfJnZm8lH5DpO3HVy+IWYwyh0c5aXOzR3TZSodB+ 8EL6mqnIulmujf1vDcsdCRvBeljO7ip2Xlbjumtwayi8vMD38mfh0bztko6AV417 iaoSF8Jy9hZb5vTDzxNwR/Mna+F4eqfXph9g3ywLAjxaMtxF60AzfTD0YjZtFNSA ZvY8wJ3K0AshCoERzexfoVrY9x3sMUcmpjF+VxQQqkVR/mqZgEUKpon1391b9ss2 DuoK9PsZW21siR07hySnigqctSlTcO6+t0D4E2NYg9UiP8Mnn8yVfwOzp3+4YZ78 ZmOQqo2a5JXoCR9RARPvHiJUU4YMt08= -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:56 2025 by rpki-client