$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa File: b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa (raw, json) Hash identifier: ILALWRRTiBBMNrNGk8eFp6fGBuL14A38sCDxxbxJxHs= Subject key identifier: 92:3F:01:F2:DF:93:C5:2B:E6:62:DA:97:9D:91:66:19:61:55:B5:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858482D5A9F17A3C7505CFB593740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa Signing time: Thu 12 Dec 2024 02:00:38 +0000 ROA not before: Thu 12 Dec 2024 02:00:38 +0000 ROA not after: Wed 12 Mar 2025 01:00:38 +0000 asID: 7029 IP address blocks: 66.19.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2d:5a:9f:17:a3:c7:50:5c:fb:59:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 12 02:00:38 2024 GMT Not After : Mar 12 01:00:38 2025 GMT Subject: CN=2b44e59b-20dc-4a6d-8477-2479236d5231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e6:5d:22:b7:55:a7:94:5c:5d:8d:0c:08:38: 36:b2:1c:fd:29:6a:91:b3:2b:67:32:23:c9:14:92: fe:2b:9e:59:42:13:2f:c1:2f:95:5c:bc:d2:b4:4f: e8:ef:aa:46:33:2d:74:9d:7e:41:3f:a2:34:c9:d7: 03:dd:a5:a1:d5:73:61:9e:5f:42:0c:4d:78:ea:60: 4d:c0:0b:d2:3e:35:e4:3f:26:a1:4e:78:08:c1:5e: 78:b4:a3:ef:59:8d:99:7a:2c:6c:33:cd:db:61:bd: 21:53:1e:26:65:0f:be:22:1a:31:00:2f:00:24:1b: fb:9b:fa:a3:04:10:32:4d:4c:17:7c:96:49:2a:33: 27:75:6e:d7:a3:4e:fe:36:d8:3e:84:4a:01:20:27: c7:25:79:69:98:05:c7:de:af:4d:54:38:b9:16:5f: da:a0:11:95:c6:0b:62:96:9f:50:d6:4b:f9:9b:a8: c0:fe:b6:e8:be:d4:66:65:e3:7b:40:82:4b:0d:bf: 90:90:b3:0d:91:bc:99:5a:9d:8e:b0:bb:33:5d:49: a2:90:40:3f:f2:2c:4f:d8:da:92:39:14:51:b0:ef: 32:0f:84:9c:61:a8:dc:9c:26:b5:e7:10:be:68:f1: b9:01:a7:d3:28:bd:28:16:3a:f4:06:31:83:3e:98: 41:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:01:F2:DF:93:C5:2B:E6:62:DA:97:9D:91:66:19:61:55:B5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b76a72ad-8f1b-3e54-bad4-8b1f74c4044c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.19.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:de:4b:b6:3f:00:9e:db:62:34:7b:a4:d5:e3:a6:6e:6b:c2: b7:c5:1a:fb:fa:38:9e:79:95:64:86:e0:95:31:fc:3f:a2:bd: 64:dd:8b:ff:5c:c1:74:40:88:32:d9:5e:5e:37:f2:b1:7e:20: 0b:75:a7:7c:d6:37:94:d2:98:96:6a:bd:23:24:8a:a7:78:c5: 10:11:e5:fe:16:f7:dd:cd:87:32:42:5a:90:1d:06:75:67:3f: ef:04:73:7c:87:e8:09:df:ba:1f:0c:73:d8:b8:c0:f3:0e:63: 5a:32:32:e5:1d:89:aa:fa:3d:90:de:1e:d8:9a:7a:d8:96:f7: 7a:92:64:29:ac:01:c0:32:2b:54:89:27:1a:2f:49:12:46:3d: 95:45:fb:a6:51:68:98:0b:15:70:d2:e8:a2:e1:fa:60:05:09: ea:19:0a:4f:0e:c0:f5:9b:22:b3:2b:34:e3:7c:36:e5:ae:73: 9b:99:92:bc:b1:ff:f6:f3:ea:5b:65:20:fa:c1:67:e4:7e:70: 80:60:de:0b:59:8e:19:ed:d3:cc:16:3d:a2:31:fa:45:27:ff: 78:e1:8a:18:85:c6:b3:17:88:28:21:78:20:cf:98:f0:9f:58: 73:cb:50:20:34:e1:ad:45:4f:e7:00:34:9a:36:07:fd:11:3d: 1a:34:be:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgtWp8Xo8dQXPtZN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxMjAyMDAzOFoXDTI1MDMxMjAxMDAzOFowLzEtMCsGA1UEAxMk MmI0NGU1OWItMjBkYy00YTZkLTg0NzctMjQ3OTIzNmQ1MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ZdIrdVp5RcXY0MCDg2shz9KWqRsytnMiPJ FJL+K55ZQhMvwS+VXLzStE/o76pGMy10nX5BP6I0ydcD3aWh1XNhnl9CDE146mBN wAvSPjXkPyahTngIwV54tKPvWY2ZeixsM83bYb0hUx4mZQ++IhoxAC8AJBv7m/qj BBAyTUwXfJZJKjMndW7Xo07+Ntg+hEoBICfHJXlpmAXH3q9NVDi5Fl/aoBGVxgti lp9Q1kv5m6jA/rbovtRmZeN7QIJLDb+QkLMNkbyZWp2OsLszXUmikEA/8ixP2NqS ORRRsO8yD4ScYajcnCa15xC+aPG5AafTKL0oFjr0BjGDPphBtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI/AfLfk8Ur5mLal52RZhlhVbU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc2YTcyYWQtOGYxYi0z ZTU0LWJhZDQtOGIxZjc0YzQwNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQhOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzeS7Y/AJ7bYjR7pNXjpm5rwrfFGvv6OJ55lWSG4JUx/D+ivWTdi/9c wXRAiDLZXl438rF+IAt1p3zWN5TSmJZqvSMkiqd4xRAR5f4W993NhzJCWpAdBnVn P+8Ec3yH6Anfuh8Mc9i4wPMOY1oyMuUdiar6PZDeHtiaetiW93qSZCmsAcAyK1SJ JxovSRJGPZVF+6ZRaJgLFXDS6KLh+mAFCeoZCk8OwPWbIrMrNON8NuWuc5uZkryx //bz6ltlIPrBZ+R+cIBg3gtZjhnt08wWPaIx+kUn/3jhihiFxrMXiCgheCDPmPCf WHPLUCA04a1FT+cANJo2B/0RPRo0vvg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:58 2025 by rpki-client