$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa File: 77f536e2-5579-396b-94ea-a0376642301d.roa (raw, json) Hash identifier: rksybpnCgi6qu8QblBZMm8k0BYh1W8f552Qfe3dHM+g= Subject key identifier: 70:7F:2B:DC:14:28:9E:67:ED:D8:44:E0:E9:12:AE:84:22:C5:D3:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B65DB5BD8EF263835300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 166.82.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b6:5d:b5:bd:8e:f2:63:83:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=38b0db9f-5df4-4519-a134-a1d7ad0785c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:df:22:8f:82:68:a8:bc:d3:64:b4:f4:69: 49:4c:4b:e6:73:36:64:0c:14:4b:fb:8d:3d:e3:af: b7:df:ca:e8:e5:15:fd:a2:a9:82:b2:49:f8:74:41: 70:7b:6d:47:11:0a:e2:4d:5b:51:12:5d:90:06:5e: 0e:0e:63:95:53:ae:79:b1:cc:a3:54:1b:e6:ce:db: e5:08:1e:64:9a:98:d6:c3:1d:f6:2f:8f:1b:60:d0: 97:d1:cd:9b:00:77:de:36:8d:3a:26:31:d3:16:11: 88:39:1b:40:6d:60:47:41:3a:20:2b:ba:0b:35:cc: 9a:91:21:88:70:60:50:d1:28:ce:c2:69:cf:f6:7a: 3c:38:36:ad:30:ce:fd:48:dd:79:b8:cf:71:21:60: 54:85:eb:ff:d0:b6:4f:df:29:02:4f:7a:cf:03:be: 92:a9:a4:e8:f4:1d:89:89:6f:77:f6:b7:ea:90:da: 16:3c:bc:24:a8:56:65:80:19:7d:73:dc:db:d7:b2: 54:61:e1:5c:0d:09:d1:de:a0:59:cf:e0:68:d8:7b: 52:0b:5a:76:d4:5d:bb:aa:67:56:cf:80:00:6e:e1: 29:6c:41:55:6a:ff:9d:d1:54:c6:41:69:2a:25:7a: 69:7b:ea:4c:fc:ea:78:4f:8b:bb:ea:04:ab:c5:95: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:2B:DC:14:28:9E:67:ED:D8:44:E0:E9:12:AE:84:22:C5:D3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c1:6b:cc:37:80:fc:5b:34:3d:fe:b2:47:f7:af:89:60:bd: d0:6d:28:69:2e:d4:b8:59:97:5d:af:b7:12:4b:bc:0a:e8:1f: 55:89:1e:b8:51:0f:e2:7a:06:57:b0:7e:32:a1:b2:14:ba:3a: af:cc:e6:40:53:c8:f7:fe:30:e5:22:fd:4c:03:f0:ca:e4:27: 39:e4:9e:b2:be:5f:e3:22:95:73:c1:5f:8b:30:f5:62:39:0f: 3e:85:97:6c:22:6e:b0:98:85:c3:76:10:00:de:ad:8b:6b:53: df:14:33:4a:f0:27:0e:be:44:fe:7e:2c:fe:5c:71:23:b6:9a: 0d:1b:08:6b:43:66:75:b2:5f:95:6d:92:e1:40:81:1b:f0:04: 33:72:6a:20:8f:9c:f7:05:11:cf:cc:b1:85:58:53:06:3c:fe: 50:2d:b2:c1:a1:02:a4:c4:d4:27:e0:83:03:df:f4:cd:43:e9: b1:f3:1a:1b:27:e9:05:f2:73:14:f5:5c:5d:c0:2f:b0:c9:97: 6d:e6:67:cc:24:27:94:f1:96:b4:71:08:48:b9:88:30:39:61: 48:1c:a0:2d:60:40:fd:0d:95:9e:87:87:76:2b:ff:ad:37:3c: f5:12:81:6f:a6:5e:f4:00:11:93:70:77:d6:bb:61:ba:37:3d: 53:2e:de:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LZdtb2O8mODUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk MzhiMGRiOWYtNWRmNC00NTE5LWExMzQtYTFkN2FkMDc4NWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWLfIo+CaKi802S09GlJTEvmczZkDBRL+409 46+338ro5RX9oqmCskn4dEFwe21HEQriTVtREl2QBl4ODmOVU655scyjVBvmztvl CB5kmpjWwx32L48bYNCX0c2bAHfeNo06JjHTFhGIORtAbWBHQTogK7oLNcyakSGI cGBQ0SjOwmnP9no8ODatMM79SN15uM9xIWBUhev/0LZP3ykCT3rPA76SqaTo9B2J iW939rfqkNoWPLwkqFZlgBl9c9zb17JUYeFcDQnR3qBZz+Bo2HtSC1p21F27qmdW z4AAbuEpbEFVav+d0VTGQWkqJXppe+pM/Op4T4u76gSrxZW+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB/K9wUKJ5n7dhE4OkSroQixdNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzdmNTM2ZTItNTU3OS0z OTZiLTk0ZWEtYTAzNzY2NDIzMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPBa8w3gPxbND3+skf3r4lgvdBtKGku1LhZl12vtxJLvAroH1WJHrhR D+J6BlewfjKhshS6Oq/M5kBTyPf+MOUi/UwD8MrkJznknrK+X+MilXPBX4sw9WI5 Dz6Fl2wibrCYhcN2EADerYtrU98UM0rwJw6+RP5+LP5ccSO2mg0bCGtDZnWyX5Vt kuFAgRvwBDNyaiCPnPcFEc/MsYVYUwY8/lAtssGhAqTE1CfggwPf9M1D6bHzGhsn 6QXycxT1XF3AL7DJl23mZ8wkJ5TxlrRxCEi5iDA5YUgcoC1gQP0NlZ6Hh3Yr/603 PPUSgW+mXvQAEZNwd9a7Ybo3PVMu3jI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:00 2025 by rpki-client