$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa File: aa95e6bd-2010-3425-a8ae-10940c333c97.roa (raw, json) Hash identifier: GUzkrc/4rD/RJ4ICu4h7aRxTc0IU2mbpZXCeZ0MLbvM= Subject key identifier: 34:81:CE:B5:B4:FA:4F:D9:82:53:26:34:A2:0F:AB:92:D6:AF:DB:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483E1AC07181BF9C702E487180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 7029 IP address blocks: 76.161.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:c0:71:81:bf:9c:70:2e:48:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=54b52a4c-7186-4d3b-a822-35dd472e544a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9c:04:df:d2:ab:b2:01:75:45:9b:25:8e:65: 25:f1:c2:71:01:45:08:c1:55:de:46:62:81:e4:de: 0e:31:cd:dd:e3:8a:4c:f1:de:e9:db:66:65:de:9a: a3:88:ff:1b:68:7c:a1:75:4a:73:7b:c1:2d:2f:de: 5c:2b:0b:2e:61:98:64:4a:fa:6a:96:b0:e0:8d:8a: b1:e0:9e:25:46:06:03:a5:81:56:a7:b1:57:57:72: 5a:47:b5:ad:bc:df:98:b0:90:52:74:fc:b2:4e:c7: bf:03:fa:aa:1f:48:c1:6d:c4:06:6a:11:5e:e0:50: 97:83:1c:60:40:2a:5f:96:52:00:b3:36:9b:4f:06: 3c:2a:c7:bd:72:6a:7b:94:c8:24:c0:c4:17:71:41: ab:ea:ec:f3:ed:8f:d4:96:13:ee:51:52:39:f3:0c: ef:47:26:be:d5:ac:13:19:de:9c:0a:b2:12:85:23: 45:73:11:85:cd:e4:4f:17:59:e9:42:09:9f:b1:16: af:f5:4d:ca:b4:e4:ed:2d:dd:b9:8b:8f:5a:df:d5: 1e:7c:8c:ba:d0:a2:4d:e8:63:b0:84:3a:f7:b0:df: 07:2b:ff:80:cd:59:9b:18:2d:b8:bf:e2:a6:3e:69: a9:e9:6f:38:94:a5:e1:9e:4c:6a:ff:71:9b:76:f9: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:81:CE:B5:B4:FA:4F:D9:82:53:26:34:A2:0F:AB:92:D6:AF:DB:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 76.161.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c2:57:4e:a2:a8:2e:d2:e2:dc:bb:dc:9f:9b:34:dc:44:3c: 0f:c9:b6:1e:e4:f2:ad:a3:42:83:82:2c:cb:41:fb:9b:91:3d: 71:c2:06:69:e8:c4:dc:df:2e:41:03:49:02:b9:5e:cb:01:dc: 6c:45:bc:a5:2d:9b:3d:84:99:87:16:b4:55:3f:00:90:9d:b5: 28:18:5f:e9:a0:7f:41:4a:ac:ca:74:bf:b6:f0:35:62:ee:f4: 9e:7a:ca:51:a5:5e:31:aa:80:94:13:8e:55:c3:9f:53:3c:35: 0a:d3:34:93:0c:00:a8:4d:54:b1:73:c4:9c:1d:b6:6a:b7:d1: 9d:6a:7c:92:5f:bc:a5:05:52:5b:90:87:33:67:82:26:47:bc: 9d:28:3a:30:99:0a:cc:53:e7:e3:3e:e2:fc:81:80:53:b9:93: cc:4b:42:cb:40:4b:4f:bc:31:69:98:62:7d:ee:b2:a6:07:f4: e1:71:f1:ce:35:aa:44:4c:f2:58:e5:20:58:3c:0e:4b:e9:52: d0:eb:23:07:74:48:a6:9f:78:dd:17:3e:d8:0c:2c:ac:e6:bf: 21:ff:03:2a:63:5d:6d:a2:78:16:65:52:f2:48:c5:0d:6c:7b: 71:a3:2b:3f:58:37:5f:00:7a:d5:bc:b2:3c:fe:97:c3:f7:58: 61:0c:05:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GsBxgb+ccC5IcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NTRiNTJhNGMtNzE4Ni00ZDNiLWE4MjItMzVkZDQ3MmU1NDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35wE39KrsgF1RZsljmUl8cJxAUUIwVXeRmKB 5N4OMc3d44pM8d7p22Zl3pqjiP8baHyhdUpze8EtL95cKwsuYZhkSvpqlrDgjYqx 4J4lRgYDpYFWp7FXV3JaR7WtvN+YsJBSdPyyTse/A/qqH0jBbcQGahFe4FCXgxxg QCpfllIAszabTwY8Kse9cmp7lMgkwMQXcUGr6uzz7Y/UlhPuUVI58wzvRya+1awT Gd6cCrIShSNFcxGFzeRPF1npQgmfsRav9U3KtOTtLd25i49a39UefIy60KJN6GOw hDr3sN8HK/+AzVmbGC24v+KmPmmp6W84lKXhnkxq/3Gbdvl2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSBzrW0+k/ZglMmNKIPq5LWr9s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NWU2YmQtMjAxMC0z NDI1LWE4YWUtMTA5NDBjMzMzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLCV06iqC7S4ty73J+bNNxEPA/Jth7k8q2jQoOCLMtB+5uRPXHCBmno xNzfLkEDSQK5XssB3GxFvKUtmz2EmYcWtFU/AJCdtSgYX+mgf0FKrMp0v7bwNWLu 9J56ylGlXjGqgJQTjlXDn1M8NQrTNJMMAKhNVLFzxJwdtmq30Z1qfJJfvKUFUluQ hzNngiZHvJ0oOjCZCsxT5+M+4vyBgFO5k8xLQstAS0+8MWmYYn3usqYH9OFx8c41 qkRM8ljlIFg8DkvpUtDrIwd0SKafeN0XPtgMLKzmvyH/AypjXW2ieBZlUvJIxQ1s e3GjKz9YN18AetW8sjz+l8P3WGEMBfk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:02 2025 by rpki-client