$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa File: d242c1a2-0bf3-3976-88e9-20789a846b33.roa (raw, json) Hash identifier: 1e8aYrK30Yhh0YyPGyN2GQqs3/LDbeCbfkxVh2qhD/g= Subject key identifier: AC:EA:7A:80:9D:A2:A5:5B:9C:37:08:6F:20:DF:F0:A6:B6:F2:54:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B66999D272541EBD9A88 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 166.82.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b6:69:99:d2:72:54:1e:bd:9a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=5d39b16e-e824-4c77-ba48-ff055f3c140a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:33:50:bc:bd:f1:a9:1c:b2:49:5e:16:55: 59:d0:2f:85:83:19:30:f1:21:84:40:a7:f2:07:fa: cc:55:76:4c:42:a9:7d:fd:d7:ef:24:a5:07:60:9f: 51:6b:a1:10:39:85:95:8a:37:87:e6:04:73:81:98: 9d:08:b8:e3:39:35:44:fe:86:42:5d:5f:74:3b:fe: a4:c6:8c:c4:de:e1:aa:27:b6:67:bb:82:0a:83:9a: ca:71:3e:ff:0f:16:67:ac:d9:6b:72:c5:f4:2e:ef: 99:57:57:f6:10:8d:95:8d:30:84:23:69:4f:fb:0f: b8:d0:10:e1:bc:d7:fe:bc:dc:0b:ab:12:5a:fb:de: e5:1b:f8:af:48:5a:60:9f:9d:38:a2:40:80:55:37: f7:87:75:d3:53:48:6a:94:ee:2a:9b:9e:a3:7d:35: f6:68:5f:ef:5c:d5:ed:86:ed:74:c8:ca:5d:29:74: 35:5c:80:6a:df:b2:fb:72:52:7f:f2:1b:bb:4c:bf: 1f:9e:69:1c:7c:67:5b:06:57:2c:4a:d5:ae:e1:83: c8:20:5e:69:ed:2b:9a:45:65:e7:fc:da:6e:80:15: d0:bf:94:08:99:9c:80:1e:91:55:db:44:30:98:91: 4f:b8:e8:48:21:06:12:1a:9a:d4:29:48:23:ff:3e: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EA:7A:80:9D:A2:A5:5B:9C:37:08:6F:20:DF:F0:A6:B6:F2:54:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d242c1a2-0bf3-3976-88e9-20789a846b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.82.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8b:5a:71:d2:92:67:89:b4:0a:57:3c:1f:65:9d:a0:76:d3: 50:1c:7c:f1:e3:c4:41:fd:1d:62:c3:08:3c:83:c6:b4:5b:50: 00:e1:f0:c2:75:d7:33:88:1d:a5:a4:62:9a:48:59:cb:ca:1b: a8:ae:a3:22:72:91:51:4e:5d:8d:9d:a4:e4:da:af:a4:99:70: 30:4e:72:dc:69:ba:e3:1a:bb:37:bf:13:7a:22:46:e1:90:a8: 2a:63:47:da:d0:9a:b9:35:4a:ac:c3:ae:74:50:e9:91:eb:34: db:e9:f5:27:b2:62:d1:cc:68:8b:02:c4:8a:ef:a7:f3:eb:3d: c0:39:df:8e:d0:f8:5c:dc:92:f6:06:4f:00:60:4c:ed:01:15: 3b:cb:9d:b8:eb:3f:8f:6f:5c:9a:6a:85:7a:6c:b5:5a:32:fe: 8e:df:78:2d:31:54:6c:75:02:b7:fb:31:8a:f7:06:af:14:ed: f8:31:84:a1:af:2f:6c:f2:1c:0e:12:8d:17:2d:cc:5c:bf:0c: b7:24:84:68:59:87:34:83:db:bc:8f:33:86:a7:13:c2:28:8f: 8a:34:b9:39:d6:47:4b:0d:70:a8:ba:a4:46:38:17:dc:af:64: 38:83:91:40:a1:41:d2:e5:2f:dd:3e:4c:63:7e:5d:40:32:a7: 31:89:3a:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LZpmdJyVB69mogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NWQzOWIxNmUtZTgyNC00Yzc3LWJhNDgtZmYwNTVmM2MxNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFgzULy98akcskleFlVZ0C+Fgxkw8SGEQKfy B/rMVXZMQql9/dfvJKUHYJ9Ra6EQOYWVijeH5gRzgZidCLjjOTVE/oZCXV90O/6k xozE3uGqJ7Znu4IKg5rKcT7/DxZnrNlrcsX0Lu+ZV1f2EI2VjTCEI2lP+w+40BDh vNf+vNwLqxJa+97lG/ivSFpgn504okCAVTf3h3XTU0hqlO4qm56jfTX2aF/vXNXt hu10yMpdKXQ1XIBq37L7clJ/8hu7TL8fnmkcfGdbBlcsStWu4YPIIF5p7SuaRWXn /NpugBXQv5QImZyAHpFV20QwmJFPuOhIIQYSGprUKUgj/z7ewQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzqeoCdoqVbnDcIbyDf8Ka28lRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MmMxYTItMGJmMy0z OTc2LTg4ZTktMjA3ODlhODQ2YjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCplKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyLWnHSkmeJtApXPB9lnaB201AcfPHjxEH9HWLDCDyDxrRbUADh8MJ1 1zOIHaWkYppIWcvKG6iuoyJykVFOXY2dpOTar6SZcDBOctxpuuMauze/E3oiRuGQ qCpjR9rQmrk1SqzDrnRQ6ZHrNNvp9SeyYtHMaIsCxIrvp/PrPcA5347Q+FzckvYG TwBgTO0BFTvLnbjrP49vXJpqhXpstVoy/o7feC0xVGx1Arf7MYr3Bq8U7fgxhKGv L2zyHA4SjRctzFy/DLckhGhZhzSD27yPM4anE8Ioj4o0uTnWR0sNcKi6pEY4F9yv ZDiDkUChQdLlL90+TGN+XUAypzGJOqI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:39 2025 by rpki-client