$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa File: 77f536e2-5579-396b-94ea-a0376642301d.roa (raw, json) Hash identifier: Sv98Jg/HMyO3K7SjtmdrqTD5BpzT2lMPNs9QWCd8S38= Subject key identifier: 91:86:7E:4F:3C:B2:28:3C:C5:4A:DD:89:35:43:1F:98:76:DD:D6:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B916BA2CDF42664728A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 166.82.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b9:16:ba:2c:df:42:66:47:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=1762a000-67b7-4986-875e-9f35360c498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b8:d2:4a:b3:fb:12:80:cb:7e:19:99:e7:ad: 2a:ae:06:88:64:52:a5:fc:76:0e:e1:c3:d6:f4:eb: 06:30:7d:ee:29:a1:d7:8c:82:cf:ea:3e:0a:ee:43: fb:fd:b3:d0:0a:2b:a8:e4:3d:03:74:eb:3f:6c:09: 4d:77:fe:cb:aa:76:29:77:25:03:9e:c6:cc:b0:1e: ae:f3:8d:29:66:5a:0f:05:9d:94:f3:24:33:31:ee: c6:06:a4:ad:41:9a:a3:6a:00:7b:4a:59:d3:8d:e3: 5d:13:47:4c:b1:7d:bc:dd:74:88:09:a6:34:b7:fc: 06:c7:4c:d9:d3:6e:de:be:24:73:95:5f:e0:fa:76: 0f:e7:72:d1:a9:e8:80:a9:8a:20:ff:18:91:05:22: b4:a2:11:70:9a:fa:33:2c:c7:ea:74:bd:60:18:c0: 91:fa:03:2d:81:09:95:aa:8c:24:03:31:68:7b:1c: 4e:97:2e:75:dd:42:87:2c:de:34:7e:23:ab:c9:31: 69:1f:ad:08:ee:1e:ce:df:19:b8:9f:b1:c9:50:d1: 31:a9:c1:8c:74:64:9d:b7:34:d0:e9:3a:9a:c2:93: 3a:57:9e:86:b6:3e:fb:82:09:f3:70:8d:64:13:67: 3a:dc:51:ed:ed:b6:b7:05:a5:89:3e:49:b1:2c:cb: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:86:7E:4F:3C:B2:28:3C:C5:4A:DD:89:35:43:1F:98:76:DD:D6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/77f536e2-5579-396b-94ea-a0376642301d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f5:3a:57:85:c1:54:c9:c5:5d:19:45:a0:ca:f3:f2:57:cd: d6:55:0e:ee:7b:82:7d:73:8f:ea:05:f8:87:fb:8a:78:bc:92: 63:28:aa:43:47:53:76:99:33:f7:f2:43:6e:33:e4:f2:71:ec: 95:10:58:2f:94:4e:67:8b:4b:2e:7e:2a:13:e3:61:89:5d:b6: 34:13:8a:7c:2a:bd:f1:f5:75:80:a0:54:37:a0:bd:0b:26:50: c5:e3:be:19:80:f3:65:b0:b7:e5:ce:aa:b7:b4:d4:43:cc:a0: 2a:42:54:51:81:b9:6e:c1:97:60:3a:30:40:8a:25:51:a2:67: 73:f7:cd:45:a0:85:1b:b3:79:59:ff:4a:55:75:c2:4d:27:c3: 58:06:13:fc:3f:ba:bd:8c:a5:d3:b3:a7:0e:55:32:08:c0:3c: a8:86:9d:1d:77:fd:89:a3:1b:a2:5f:b7:aa:f8:18:a6:e6:48: 02:35:4e:5a:55:84:6a:03:68:40:31:2f:ee:f7:47:69:98:8f: 67:b3:d0:00:b9:46:aa:a9:cd:1f:7f:a3:78:49:55:83:99:e4: ff:eb:87:72:8b:be:e9:bf:d9:dc:dc:5f:98:29:11:62:4f:17: 8e:3f:b8:d5:db:6e:aa:fa:62:73:30:f0:59:77:6c:57:93:b8: 61:20:c1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbkWuizfQmZHKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MTc2MmEwMDAtNjdiNy00OTg2LTg3NWUtOWYzNTM2MGM0OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurjSSrP7EoDLfhmZ560qrgaIZFKl/HYO4cPW 9OsGMH3uKaHXjILP6j4K7kP7/bPQCiuo5D0DdOs/bAlNd/7LqnYpdyUDnsbMsB6u 840pZloPBZ2U8yQzMe7GBqStQZqjagB7SlnTjeNdE0dMsX283XSICaY0t/wGx0zZ 027eviRzlV/g+nYP53LRqeiAqYog/xiRBSK0ohFwmvozLMfqdL1gGMCR+gMtgQmV qowkAzFoexxOly513UKHLN40fiOryTFpH60I7h7O3xm4n7HJUNExqcGMdGSdtzTQ 6TqawpM6V56Gtj77ggnzcI1kE2c63FHt7ba3BaWJPkmxLMs9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGGfk88sig8xUrdiTVDH5h23daTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzdmNTM2ZTItNTU3OS0z OTZiLTk0ZWEtYTAzNzY2NDIzMDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj1OleFwVTJxV0ZRaDK8/JXzdZVDu57gn1zj+oF+If7ini8kmMoqkNH U3aZM/fyQ24z5PJx7JUQWC+UTmeLSy5+KhPjYYldtjQTinwqvfH1dYCgVDegvQsm UMXjvhmA82Wwt+XOqre01EPMoCpCVFGBuW7Bl2A6MECKJVGiZ3P3zUWghRuzeVn/ SlV1wk0nw1gGE/w/ur2MpdOzpw5VMgjAPKiGnR13/YmjG6Jft6r4GKbmSAI1TlpV hGoDaEAxL+73R2mYj2ez0AC5RqqpzR9/o3hJVYOZ5P/rh3KLvum/2dzcX5gpEWJP F44/uNXbbqr6YnMw8Fl3bFeTuGEgwf0= -----END CERTIFICATE-----Generated at Sun Apr 6 12:43:32 2025 by rpki-client