$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa File: 8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa (raw, json) Hash identifier: u2SzDzmJyU23TH6n1OshjIgPg1Y/G7dndY24Q2XenII= Subject key identifier: 95:7C:B4:39:03:86:C1:05:EA:83:6B:13:89:CE:AA:A0:09:0B:E1:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B90564F51D7CD613A000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 166.82.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b9:05:64:f5:1d:7c:d6:13:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=a108fe58-6949-40a8-b898-0d9feecbf41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:db:80:7f:5c:47:be:2a:94:53:e8:e4:b2: 2f:ae:51:35:f8:17:c9:fd:a0:f7:1c:85:12:7c:a9: c5:b4:6b:c3:89:a0:cc:59:c4:d4:2d:23:75:cc:8d: 8f:41:0b:26:6f:56:e0:11:e3:4c:a4:91:cc:2a:cf: 23:31:96:3f:db:97:0b:5e:4f:da:ba:7a:d9:4f:29: ca:8e:dc:ca:eb:cb:7c:23:d9:5d:4d:6b:61:ab:8c: ed:21:5b:62:96:29:98:8b:b4:44:51:15:92:ab:0c: 9f:00:b9:18:5e:fa:39:ad:aa:2e:f5:91:d6:32:d3: 2c:7d:61:bf:86:be:06:dc:c8:bb:63:9a:1c:97:d0: 32:e0:60:8b:66:9a:64:0e:0b:01:71:63:d3:35:32: d3:fc:48:cb:5d:72:8e:9b:4d:59:ab:53:82:f3:9d: 58:63:6b:84:83:05:de:15:f0:c4:54:e0:39:4d:65: bf:de:7c:38:1d:9f:2b:4e:76:f3:ee:9c:28:73:db: 5a:3b:6b:9c:14:d5:7b:80:e8:39:22:3a:9e:f5:d9: 9b:fb:19:c4:3c:ea:ad:21:e1:d1:43:59:96:59:b8: e4:c3:dc:ac:be:88:28:e8:24:95:36:ef:41:52:a3: dd:03:f5:23:af:b4:83:e6:04:6d:58:8d:1b:7e:03: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:B4:39:03:86:C1:05:EA:83:6B:13:89:CE:AA:A0:09:0B:E1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e81ce99-7052-3d5a-a1c6-f58aa22a3e8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b5:5e:3a:25:ff:87:e5:91:21:0f:76:f4:eb:45:53:91:68: 43:5e:cf:4e:4f:b7:c5:74:1c:6b:3b:18:56:4c:2b:61:db:32: e7:3e:d1:37:7b:6a:32:39:ff:bb:dc:8a:ec:65:fc:39:c7:8b: db:1b:4e:e8:78:c1:c3:0e:cc:5b:4a:79:e1:c6:a6:35:e6:b8: 74:a7:59:82:f7:bf:10:11:50:40:f2:d1:0e:d4:51:4a:b7:eb: f0:a7:a7:f8:01:18:b4:f0:10:f0:5d:5a:c4:1e:48:0b:b1:bb: d8:a4:92:55:c8:f0:83:58:76:a1:72:7e:2c:bb:a3:bc:69:ef: de:e0:ef:86:3d:74:3c:9b:1c:1a:90:59:7e:ad:55:be:f5:2e: de:e1:27:f8:d5:32:5b:6b:95:33:5e:77:50:4c:8c:2e:5a:8b: 26:57:65:d6:18:6c:85:0d:05:e1:b1:09:58:59:e9:27:f4:c2: e3:8c:a8:75:26:a0:21:42:d3:a1:33:38:38:0b:ef:3e:ec:8d: 22:70:31:3a:bf:c1:d8:b3:f2:a6:e5:a8:52:5a:5f:1a:f1:29: 5c:61:0c:68:f4:f2:50:62:dd:17:ba:2c:23:d0:2e:c8:fc:b3: e6:c6:7b:d1:79:e4:c3:8a:ab:48:8e:d6:d6:34:7a:ec:ee:98: e5:89:ef:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbkFZPUdfNYToAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YTEwOGZlNTgtNjk0OS00MGE4LWI4OTgtMGQ5ZmVlY2JmNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO7bgH9cR74qlFPo5LIvrlE1+BfJ/aD3HIUS fKnFtGvDiaDMWcTULSN1zI2PQQsmb1bgEeNMpJHMKs8jMZY/25cLXk/aunrZTynK jtzK68t8I9ldTWthq4ztIVtilimYi7REURWSqwyfALkYXvo5raou9ZHWMtMsfWG/ hr4G3Mi7Y5ocl9Ay4GCLZppkDgsBcWPTNTLT/EjLXXKOm01Zq1OC851YY2uEgwXe FfDEVOA5TWW/3nw4HZ8rTnbz7pwoc9taO2ucFNV7gOg5Ijqe9dmb+xnEPOqtIeHR Q1mWWbjkw9ysvogo6CSVNu9BUqPdA/Ujr7SD5gRtWI0bfgOpnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV8tDkDhsEF6oNrE4nOqqAJC+GgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGU4MWNlOTktNzA1Mi0z ZDVhLWExYzYtZjU4YWEyMmEzZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplI4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD21Xjol/4flkSEPdvTrRVORaENez05Pt8V0HGs7GFZMK2HbMuc+0Td7 ajI5/7vciuxl/DnHi9sbTuh4wcMOzFtKeeHGpjXmuHSnWYL3vxARUEDy0Q7UUUq3 6/Cnp/gBGLTwEPBdWsQeSAuxu9ikklXI8INYdqFyfiy7o7xp797g74Y9dDybHBqQ WX6tVb71Lt7hJ/jVMltrlTNed1BMjC5aiyZXZdYYbIUNBeGxCVhZ6Sf0wuOMqHUm oCFC06EzODgL7z7sjSJwMTq/wdiz8qblqFJaXxrxKVxhDGj08lBi3Re6LCPQLsj8 s+bGe9F55MOKq0iO1tY0euzumOWJ75s= -----END CERTIFICATE-----Generated at Sat Apr 5 20:41:31 2025 by rpki-client