$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/590ce2bf-8078-3b6b-8e12-d5ec340dd8f8.roa File: 590ce2bf-8078-3b6b-8e12-d5ec340dd8f8.roa (raw, json) Hash identifier: K6bVAY3HHhsJt7y3avgxanHM1oAQ2oOSZM6RtiOqAt0= Subject key identifier: 75:65:22:10:2F:BC:3C:65:1C:5F:98:C4:D6:B0:B5:A7:4B:60:89:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B934898EDAC2427FD0E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/590ce2bf-8078-3b6b-8e12-d5ec340dd8f8.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 166.82.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b9:34:89:8e:da:c2:42:7f:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=efd30fe0-a8bd-42c3-a52d-cc4b3f596653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:68:1e:c2:aa:4b:28:5c:f2:42:24:d2:fd: f7:8a:73:3a:92:8d:74:a3:77:9d:c5:3e:91:bb:f3: 81:2d:a9:47:e5:39:67:fe:0c:fe:62:1b:f0:c2:9e: 7f:ff:cd:3b:37:f5:29:56:01:da:ae:d7:31:34:55: 21:ec:a9:83:16:b8:64:a8:6d:13:83:90:55:4e:e2: 81:c7:91:e8:5a:04:9c:24:4b:60:89:a7:fb:87:3c: 41:7c:1a:81:18:73:fa:23:dc:d6:99:e4:b0:97:65: 6e:f2:cc:39:67:04:77:34:ab:42:48:74:1f:f5:80: 88:14:2e:ba:36:30:fd:4f:d5:f8:6d:63:6f:e4:75: 91:04:dc:62:bd:65:65:d3:7e:57:74:d6:28:d0:6b: d3:7e:26:15:44:af:9e:43:5a:ff:5c:74:df:d6:09: 9d:84:f6:b4:80:54:61:9f:3b:4e:49:bc:44:5f:3b: bb:b8:a1:38:4d:2a:70:a7:1c:98:a7:7c:a4:5e:8b: 1c:21:e1:ae:e8:2d:64:aa:a8:cc:d4:1d:5a:f1:8d: 49:4d:d7:85:dd:d2:24:da:80:02:e1:0d:05:d0:23: 51:f8:b5:4b:43:03:99:1d:b2:0e:ac:af:77:1e:76: d1:dc:5a:70:2f:d4:8c:38:de:36:47:08:2a:23:f0: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:65:22:10:2F:BC:3C:65:1C:5F:98:C4:D6:B0:B5:A7:4B:60:89:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/590ce2bf-8078-3b6b-8e12-d5ec340dd8f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f8:81:32:78:0c:1b:b3:80:f9:8e:d5:b8:dd:e6:9f:f9:e7: 24:1a:68:9d:2c:f8:83:04:60:1d:d4:b6:2f:0c:c2:af:72:ef: 0b:30:af:03:df:8a:72:49:1e:54:dd:d6:a7:86:b8:f4:ae:68: 8f:b1:1a:2b:dc:c2:6e:fa:c8:0b:cd:7e:bc:2f:81:ba:32:f6: db:8b:81:f3:c2:26:26:d0:68:7f:f9:cd:f1:77:53:56:e2:b5: 97:b2:d9:16:59:41:57:f7:d4:87:f8:ea:19:4f:26:b5:fa:3b: 33:a7:b8:95:c2:c8:63:44:9b:69:1a:c1:00:84:5c:f4:c6:5c: f2:2f:82:9b:fc:08:5b:8d:b4:a4:d5:9c:6a:c1:8c:94:9c:35: 19:4b:de:21:70:fd:18:05:14:bb:33:69:68:e2:e1:ce:6d:6d: 5e:7f:7c:9e:37:59:64:1e:87:f0:9d:79:98:da:a0:f7:30:af: 27:08:e8:25:26:55:55:2f:10:23:df:02:25:8c:e4:13:ac:18: 00:da:1f:51:6e:0c:08:ce:60:93:d4:ae:6a:eb:69:f2:14:2b: 5d:6b:37:64:44:2a:d4:08:95:a2:f7:f8:c6:04:1a:4b:24:96: ba:0c:a9:6d:90:23:a6:0e:81:63:e0:a6:fa:c5:eb:15:be:6c: 04:af:29:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbk0iY7awkJ/0OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZWZkMzBmZTAtYThiZC00MmMzLWE1MmQtY2M0YjNmNTk2NjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFoHsKqSyhc8kIk0v33inM6ko10o3edxT6R u/OBLalH5Tln/gz+Yhvwwp5//807N/UpVgHartcxNFUh7KmDFrhkqG0Tg5BVTuKB x5HoWgScJEtgiaf7hzxBfBqBGHP6I9zWmeSwl2Vu8sw5ZwR3NKtCSHQf9YCIFC66 NjD9T9X4bWNv5HWRBNxivWVl035XdNYo0GvTfiYVRK+eQ1r/XHTf1gmdhPa0gFRh nztOSbxEXzu7uKE4TSpwpxyYp3ykXoscIeGu6C1kqqjM1B1a8Y1JTdeF3dIk2oAC 4Q0F0CNR+LVLQwOZHbIOrK93HnbR3FpwL9SMON42RwgqI/Ba7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVlIhAvvDxlHF+YxNawtadLYInwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTkwY2UyYmYtODA3OC0z YjZiLThlMTItZDVlYzM0MGRkOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj4gTJ4DBuzgPmO1bjd5p/55yQaaJ0s+IMEYB3Uti8Mwq9y7wswrwPf inJJHlTd1qeGuPSuaI+xGivcwm76yAvNfrwvgboy9tuLgfPCJibQaH/5zfF3U1bi tZey2RZZQVf31If46hlPJrX6OzOnuJXCyGNEm2kawQCEXPTGXPIvgpv8CFuNtKTV nGrBjJScNRlL3iFw/RgFFLszaWji4c5tbV5/fJ43WWQeh/CdeZjaoPcwrycI6CUm VVUvECPfAiWM5BOsGADaH1FuDAjOYJPUrmrrafIUK11rN2REKtQIlaL3+MYEGksk lroMqW2QI6YOgWPgpvrF6xW+bASvKRg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:19 2025 by rpki-client