$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b462b5d1-a815-3003-aefb-386607acfd8a.roa File: b462b5d1-a815-3003-aefb-386607acfd8a.roa (raw, json) Hash identifier: 22OoQWCLA8D4SnuIkhiO/x+PpZgjII4CA3Stl7YymFM= Subject key identifier: DA:DE:95:23:85:4F:39:B0:14:67:73:63:27:1A:5B:1C:2A:DF:E4:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858490E16CE363C697E73BEA722A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b462b5d1-a815-3003-aefb-386607acfd8a.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 76.161.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:ce:36:3c:69:7e:73:be:a7:22:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=b210fc17-9c7c-49cb-9891-7fc77315d845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:a4:ff:85:22:1b:53:ef:81:cb:cb:9f:53: 5f:80:e4:76:53:97:db:c4:12:1b:92:af:a9:83:e3: 98:d6:a7:78:dd:54:84:c5:01:84:23:7e:5c:42:95: af:7c:bc:47:e6:d2:ae:d5:3e:17:7d:c2:e0:af:06: d9:4c:a9:12:8c:31:71:07:f5:07:60:a7:67:f9:5f: 99:36:ac:33:d6:aa:90:2b:c8:8a:67:ac:a0:ed:ed: 58:e5:5a:a7:c9:e8:e9:58:56:58:f3:03:11:5e:ed: 41:f3:7c:4d:70:2a:5d:62:a0:7d:75:55:20:26:b0: 6e:07:02:dc:ae:23:6e:d6:47:97:bf:c9:e1:ae:ef: b7:73:f8:1d:b1:c3:03:89:88:cd:ae:36:66:2f:36: 16:5f:f1:06:a9:9d:fc:bc:1c:2f:df:aa:32:2a:95: 08:76:5c:e5:b1:0e:a9:9b:29:0a:bd:6f:27:cd:c3: ca:96:a6:47:39:21:6f:57:e2:6d:70:5f:ea:e5:d7: 58:67:47:d1:5d:b3:c1:df:2c:de:27:0a:63:e9:42: be:08:59:44:c3:41:d2:74:d4:77:a5:88:57:42:97: 8a:be:72:09:9a:76:88:f8:99:4b:7b:e7:71:f0:11: a6:52:8a:86:24:8e:07:82:7c:44:c7:3e:ee:8a:31: 18:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DE:95:23:85:4F:39:B0:14:67:73:63:27:1A:5B:1C:2A:DF:E4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b462b5d1-a815-3003-aefb-386607acfd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 76.161.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:51:2a:88:1c:55:44:ab:61:a9:6b:5e:d6:42:52:b9:83:a0: 1c:99:9c:09:2e:2c:97:9a:b9:d4:14:cf:73:a6:25:a4:6a:30: da:21:7d:fc:ab:b7:9e:8a:43:3a:72:ef:84:14:ea:a7:0a:8e: e0:d6:5d:6f:5e:76:03:d4:f5:bb:c4:2c:84:7f:fe:18:96:12: 5d:26:5d:5e:25:09:c3:94:55:ec:e2:e2:91:54:a0:22:66:88: 96:92:07:8b:2a:50:40:68:db:e0:59:01:af:33:a5:db:f2:0e: 88:50:33:24:a5:3a:b5:3c:1c:61:38:3e:5c:b8:e9:ad:9d:7f: fd:ed:0d:55:7b:81:eb:06:bd:c5:0f:0a:eb:1a:c5:8f:76:0b: 10:81:1e:65:7b:5a:5a:52:b7:45:7f:69:9c:0e:ad:89:28:ae: e4:1d:71:13:2c:81:54:53:34:15:67:74:15:89:a3:39:b2:00: 68:7b:81:88:e9:b0:17:85:4a:90:df:d1:db:8f:a0:da:63:66: 09:e2:d7:81:75:d7:99:e4:76:cb:e5:20:7f:48:b1:3f:7a:e5: da:1c:d8:70:5f:4b:9f:84:bc:06:5c:71:cb:bd:b3:3c:57:e8: 89:2d:db:d6:71:2e:1e:6b:75:4e:66:b5:13:63:6e:92:ba:e7: db:5b:a7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFs42PGl+c76nIqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk YjIxMGZjMTctOWM3Yy00OWNiLTk4OTEtN2ZjNzczMTVkODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtWk/4UiG1PvgcvLn1NfgOR2U5fbxBIbkq+p g+OY1qd43VSExQGEI35cQpWvfLxH5tKu1T4XfcLgrwbZTKkSjDFxB/UHYKdn+V+Z Nqwz1qqQK8iKZ6yg7e1Y5VqnyejpWFZY8wMRXu1B83xNcCpdYqB9dVUgJrBuBwLc riNu1keXv8nhru+3c/gdscMDiYjNrjZmLzYWX/EGqZ38vBwv36oyKpUIdlzlsQ6p mykKvW8nzcPKlqZHOSFvV+JtcF/q5ddYZ0fRXbPB3yzeJwpj6UK+CFlEw0HSdNR3 pYhXQpeKvnIJmnaI+JlLe+dx8BGmUoqGJI4HgnxExz7uijEYAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrelSOFTzmwFGdzYycaWxwq3+S6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ2MmI1ZDEtYTgxNS0z MDAzLWFlZmItMzg2NjA3YWNmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFRKogcVUSrYalrXtZCUrmDoByZnAkuLJeaudQUz3OmJaRqMNohffyr t56KQzpy74QU6qcKjuDWXW9edgPU9bvELIR//hiWEl0mXV4lCcOUVezi4pFUoCJm iJaSB4sqUEBo2+BZAa8zpdvyDohQMySlOrU8HGE4Ply46a2df/3tDVV7gesGvcUP CusaxY92CxCBHmV7WlpSt0V/aZwOrYkoruQdcRMsgVRTNBVndBWJozmyAGh7gYjp sBeFSpDf0duPoNpjZgni14F115nkdsvlIH9IsT965doc2HBfS5+EvAZcccu9szxX 6Ikt29ZxLh5rdU5mtRNjbpK659tbp7Q= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:30 2025 by rpki-client