$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa File: 3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa (raw, json) Hash identifier: HYCvF79p13TW5kwtJlXyxErvr5Iyx9JQCypdwV9olyw= Subject key identifier: 59:06:53:D6:00:A0:B2:2E:C2:40:0A:1D:9E:0A:BE:28:AB:9C:4F:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848530B0950A0E060C0788C5960 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 209.255.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0b:09:50:a0:e0:60:c0:78:8c:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=0334e929-594a-48c8-8299-4a05352cd50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:2d:74:6e:19:77:cc:bc:3a:21:bb:05:1f: fb:6d:dc:28:e9:c6:de:38:e7:88:df:f1:5f:e3:83: f2:3a:10:52:34:96:a7:1e:1e:0a:b5:e9:63:49:cc: 35:c5:77:ae:1c:4a:59:0e:0a:d9:7a:df:f2:49:9b: 73:27:97:00:84:f7:a1:be:9e:55:2d:a2:59:26:7f: 7e:94:0b:aa:87:a6:61:b9:2c:b8:a1:2f:4b:f3:8b: 2a:11:ba:0c:f7:8c:3b:25:14:1a:0f:7d:ad:29:29: fb:76:ae:a6:6e:f4:30:b6:81:48:0d:7f:f0:40:c3: a4:95:87:bd:35:ce:a7:59:c6:2f:21:e9:52:90:c7: 38:4e:18:00:05:a5:00:da:3a:bd:01:88:6c:5c:f4: f6:ef:84:c3:cb:fb:0e:37:78:0b:65:cb:9b:f9:05: 81:3e:49:d5:c8:65:8d:35:11:2f:5b:5b:57:96:9d: 48:26:3a:1e:15:ff:c3:0c:01:5d:55:6f:f3:97:b1: 8d:7f:e9:0f:d1:a8:ab:e9:a1:af:54:90:74:54:c2: 1c:fd:b6:d4:b7:f0:71:e3:a7:dd:40:e8:f7:34:55: f7:a0:ac:dc:75:c3:43:41:ab:cf:74:dc:94:58:69: d9:7f:90:77:9f:c3:24:4d:ed:7f:4e:11:1d:23:db: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:53:D6:00:A0:B2:2E:C2:40:0A:1D:9E:0A:BE:28:AB:9C:4F:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d8:92:bd:31:64:20:4c:bf:db:93:66:38:de:7b:49:b3:ef: fa:c5:04:a0:dd:fd:7c:d3:b2:50:cc:54:5e:05:31:86:94:10: 15:9b:8b:d4:41:5a:09:39:a2:bb:65:a6:58:76:c2:74:d2:61: ca:68:88:c0:de:05:10:59:33:02:a7:33:8a:d7:3a:27:46:d9: b6:34:7f:57:43:c8:c8:f1:3a:d9:da:30:86:2c:d1:5a:1f:5f: 34:2d:50:03:46:3b:bb:3f:d7:4d:ec:e1:b5:d5:0c:21:61:88: 85:4a:0e:16:00:56:ff:26:07:88:68:60:e6:ef:d8:4e:3a:a1: 15:fd:7d:ba:ba:6d:53:73:ec:b5:03:cd:41:71:62:f8:77:87: e6:2f:bf:84:32:41:7e:c8:d1:6a:f7:4c:2f:8e:f9:8c:22:1f: 17:34:af:90:6a:49:b2:83:dc:1d:92:97:95:d3:a8:0a:65:ef: 2e:76:f9:c5:f9:d2:70:e1:66:63:94:3d:ad:59:ef:d3:e8:d7: db:ef:e8:9b:59:e2:d3:cd:37:b3:d7:32:e5:94:af:10:ae:b3: 26:49:40:c6:b2:58:e8:d0:fb:5b:bd:e8:05:13:2e:8b:7d:57: a0:a8:00:0a:01:55:c0:14:8e:ae:b3:1c:69:be:a5:28:a1:53: 0f:1d:9a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCwlQoOBgwHiMWWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDMzNGU5MjktNTk0YS00OGM4LTgyOTktNGEwNTM1MmNkNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi8tdG4Zd8y8OiG7BR/7bdwo6cbeOOeI3/Ff 44PyOhBSNJanHh4KteljScw1xXeuHEpZDgrZet/ySZtzJ5cAhPehvp5VLaJZJn9+ lAuqh6ZhuSy4oS9L84sqEboM94w7JRQaD32tKSn7dq6mbvQwtoFIDX/wQMOklYe9 Nc6nWcYvIelSkMc4ThgABaUA2jq9AYhsXPT274TDy/sON3gLZcub+QWBPknVyGWN NREvW1tXlp1IJjoeFf/DDAFdVW/zl7GNf+kP0air6aGvVJB0VMIc/bbUt/Bx46fd QOj3NFX3oKzcdcNDQavPdNyUWGnZf5B3n8MkTe1/ThEdI9v14QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkGU9YAoLIuwkAKHZ4KviirnE+pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ExNTZlZDYtZGNkZi0z MjU4LWE3ZjMtZGQ1OWEwMGIxYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXYkr0xZCBMv9uTZjjee0mz7/rFBKDd/XzTslDMVF4FMYaUEBWbi9RB Wgk5ortlplh2wnTSYcpoiMDeBRBZMwKnM4rXOidG2bY0f1dDyMjxOtnaMIYs0Vof XzQtUANGO7s/103s4bXVDCFhiIVKDhYAVv8mB4hoYObv2E46oRX9fbq6bVNz7LUD zUFxYvh3h+Yvv4QyQX7I0Wr3TC+O+YwiHxc0r5BqSbKD3B2Sl5XTqApl7y52+cX5 0nDhZmOUPa1Z79Po19vv6JtZ4tPNN7PXMuWUrxCusyZJQMayWOjQ+1u96AUTLot9 V6CoAAoBVcAUjq6zHGm+pSihUw8dmlU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:28 2025 by rpki-client