$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa File: b87596fa-17c1-38ef-93cf-20e32fc601db.roa (raw, json) Hash identifier: aZ/lBLCfl5VjPDswslztvW1R9vEKmVb+RhB81jmckp4= Subject key identifier: 0A:ED:0F:FC:06:E0:77:44:6F:EE:75:B4:7F:91:88:68:54:F2:99:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F4A59BB0639FBC4AE9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 166.102.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f4:a5:9b:b0:63:9f:bc:4a:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=02645e22-c23e-48d8-b7ac-7879710962ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3b:b2:c6:97:d0:72:2f:d2:ce:6d:05:f9:94: e2:1c:a0:4d:cb:95:cb:bf:7a:de:2f:d5:91:9b:79: 0b:01:32:39:1a:84:a7:42:ac:c5:aa:73:c7:2d:dc: 6e:93:12:0f:2c:bb:c3:3e:67:d2:bc:d1:97:d1:d6: 12:c1:5d:92:30:34:6f:20:c9:cd:a8:72:1e:aa:4e: b5:18:2f:1b:e6:9c:56:c8:04:c8:84:ea:c3:df:21: f4:5f:f8:f8:29:cd:1f:fd:6a:d0:1c:84:e9:d0:23: 3f:95:4f:f4:cb:99:57:4f:92:f3:9e:91:f2:ce:ad: 58:59:42:7e:47:6b:8f:2e:28:4b:11:55:27:8b:ec: d0:cc:2f:b6:47:c9:6c:a1:19:e5:70:49:65:9e:2e: 5b:da:e9:ba:e9:51:90:91:14:b4:39:9d:13:88:3b: 5b:2d:23:9d:c9:c3:82:7a:14:a8:43:6b:3e:c0:02: bd:dc:29:c4:1a:54:76:d3:28:fb:b2:26:4f:05:e7: f6:20:f7:f3:b9:a0:9b:d8:6e:09:6b:f9:22:6b:50: 97:d1:b3:9b:b1:5e:76:e6:f3:04:96:ca:6e:a4:8c: d5:72:99:22:d2:31:c2:74:46:68:d8:52:77:36:32: 01:5f:2d:e3:e5:82:a3:a6:54:86:3c:ce:b4:17:e0: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:ED:0F:FC:06:E0:77:44:6F:EE:75:B4:7F:91:88:68:54:F2:99:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87596fa-17c1-38ef-93cf-20e32fc601db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:af:e8:11:41:40:a8:89:fe:7d:fe:9b:e4:4d:aa:21:38:8a: 53:24:98:be:69:cf:9c:71:e5:cc:a2:b2:0f:93:06:1c:94:81: a9:17:6d:be:ea:49:e6:4c:3d:4e:02:31:b5:49:93:52:f3:76: 52:ee:bb:21:2b:bc:4b:0c:8b:2f:ed:a9:82:b6:8b:4b:f7:07: 96:18:3c:d0:37:82:e1:64:32:6b:25:06:bf:5b:53:e8:74:b7: 7a:be:2b:9d:24:0b:7f:ef:83:a8:ae:71:c5:7b:90:88:2a:dd: 8e:cc:09:98:06:ab:44:a8:ce:78:18:ad:a7:ce:37:33:6c:8a: 52:63:06:22:f6:9f:85:80:ad:ca:bb:82:ef:6c:fa:e2:6c:10: cf:32:b5:46:92:5c:87:98:20:66:fb:5c:63:17:c6:16:97:7c: 42:9f:92:fa:dc:28:4d:4f:7f:50:cc:bc:e0:c5:77:1c:db:23: 59:a4:8c:47:6b:33:f2:67:dd:d0:53:ec:5d:48:d6:ee:8f:75: 83:a3:06:2d:34:10:06:ec:41:00:a7:dc:45:46:81:4c:a4:fd: a1:d8:41:7f:f7:1f:87:4d:6d:80:2c:19:25:1a:70:2d:56:b5: d7:fc:32:97:42:11:cf:aa:6e:59:68:25:4f:42:61:0b:97:68: d1:66:70:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPSlm7Bjn7xK6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDI2NDVlMjItYzIzZS00OGQ4LWI3YWMtNzg3OTcxMDk2MmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjuyxpfQci/Szm0F+ZTiHKBNy5XLv3reL9WR m3kLATI5GoSnQqzFqnPHLdxukxIPLLvDPmfSvNGX0dYSwV2SMDRvIMnNqHIeqk61 GC8b5pxWyATIhOrD3yH0X/j4Kc0f/WrQHITp0CM/lU/0y5lXT5LznpHyzq1YWUJ+ R2uPLihLEVUni+zQzC+2R8lsoRnlcEllni5b2um66VGQkRS0OZ0TiDtbLSOdycOC ehSoQ2s+wAK93CnEGlR20yj7siZPBef2IPfzuaCb2G4Ja/kia1CX0bObsV525vME lspupIzVcpki0jHCdEZo2FJ3NjIBXy3j5YKjplSGPM60F+B8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArtD/wG4HdEb+51tH+RiGhU8pkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3NTk2ZmEtMTdjMS0z OGVmLTkzY2YtMjBlMzJmYzYwMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpmbEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWv6BFBQKiJ/n3+m+RNqiE4ilMkmL5pz5xx5cyisg+TBhyUgakXbb7q SeZMPU4CMbVJk1LzdlLuuyErvEsMiy/tqYK2i0v3B5YYPNA3guFkMmslBr9bU+h0 t3q+K50kC3/vg6iuccV7kIgq3Y7MCZgGq0SozngYrafONzNsilJjBiL2n4WArcq7 gu9s+uJsEM8ytUaSXIeYIGb7XGMXxhaXfEKfkvrcKE1Pf1DMvODFdxzbI1mkjEdr M/Jn3dBT7F1I1u6PdYOjBi00EAbsQQCn3EVGgUyk/aHYQX/3H4dNbYAsGSUacC1W tdf8MpdCEc+qblloJU9CYQuXaNFmcDo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:40 2025 by rpki-client