$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa File: d2433854-214e-306a-aa7b-b7c29e45e7ce.roa (raw, json) Hash identifier: QfMHyITpA38vav0FevIhC1IoZMFtmYV6vOh2O6OQg1k= Subject key identifier: 27:AE:76:7E:F9:0A:E5:3F:BF:09:C2:51:DD:F4:F4:00:2E:05:AA:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB9557FA5BC7160856640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 151.213.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b9:55:7f:a5:bc:71:60:85:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=f1872bbd-8aa4-487f-b4b1-0cce37e71fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:92:5e:ca:85:8a:8b:4e:6c:38:2a:8a:e8: 20:ad:5b:9f:dd:de:8e:76:96:1c:a4:32:91:f3:cd: 33:14:cd:8c:f1:46:b1:e4:64:14:c3:7c:5b:ac:64: e3:6d:96:74:e1:87:5c:71:04:ea:03:27:f0:d6:3c: 6e:cd:70:fc:ac:23:92:d4:dc:f0:07:f2:a3:9a:49: 16:37:33:08:13:5f:85:aa:1b:59:b5:ad:a7:74:78: b9:82:44:29:34:cc:b8:d6:d4:9f:e1:6c:53:f6:71: 1f:5d:96:1b:ab:f8:6b:04:a7:d7:4c:a1:e9:db:f0: c6:43:ec:79:c7:a2:69:a3:cb:f8:d1:2e:8d:f7:1e: bb:ab:4c:76:48:ac:c8:05:ef:01:62:0d:a0:cf:e0: e5:cf:ca:ea:8b:16:5a:14:82:2a:c5:c3:b6:07:99: 22:1e:80:77:c3:74:00:af:67:bc:d6:00:23:bf:8e: a4:18:eb:f3:25:9c:98:c1:b0:85:ca:6e:9b:08:09: 0f:68:ba:ba:f0:80:a7:ff:96:00:b0:20:39:5a:30: cd:16:c7:73:a5:62:8d:c2:d2:34:7b:c0:c7:f1:d2: 8a:75:ac:7b:ea:40:06:32:1f:c4:51:df:fd:75:77: 96:62:07:5c:0a:8b:1d:de:5f:cd:6e:b8:ea:13:fd: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:76:7E:F9:0A:E5:3F:BF:09:C2:51:DD:F4:F4:00:2E:05:AA:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:87:8f:df:9a:8b:97:7d:0e:94:2d:39:e5:50:12:54:aa:65: 87:46:d8:4e:00:14:5f:e2:e2:00:65:02:9e:c2:21:6f:01:a0: 48:25:d5:c1:22:05:c8:ed:e0:67:5a:12:66:3e:ae:95:49:91: fa:9b:ac:57:1c:bc:b9:e7:70:65:64:3a:07:76:f7:18:5b:e5: 85:ed:d4:83:88:22:97:99:19:b7:cc:84:18:2f:b0:f2:a9:df: 63:f5:da:3e:3c:94:6a:4b:a8:cd:e6:6b:55:6e:fe:72:89:97: 39:09:75:6b:9e:be:b9:66:f6:3f:c6:a0:4c:3a:4e:7b:25:21: 11:ab:ef:25:a2:a0:94:b5:a1:8f:a5:d8:fb:98:4b:82:27:8a: d0:73:ba:e9:f4:62:fe:68:ce:04:46:02:76:0f:bb:5b:10:34: 28:95:69:70:ed:32:9b:c1:51:a6:97:aa:ab:43:fb:7f:64:dd: 43:7a:ae:25:40:d2:0b:a0:d0:99:4e:0a:8d:4c:63:8e:38:25: 89:61:44:cd:34:a3:27:e8:83:d2:62:db:16:eb:94:04:89:17: 80:db:36:af:7b:6d:7a:f4:4c:a1:f6:f6:69:e3:7d:8e:31:ab: 38:e9:5d:54:de:c4:c3:a5:4d:aa:73:75:5e:87:4f:45:4d:a0: 3b:bd:a3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7lVf6W8cWCFZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk ZjE4NzJiYmQtOGFhNC00ODdmLWI0YjEtMGNjZTM3ZTcxZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ2SXsqFiotObDgqiuggrVuf3d6OdpYcpDKR 880zFM2M8Uax5GQUw3xbrGTjbZZ04YdccQTqAyfw1jxuzXD8rCOS1NzwB/KjmkkW NzMIE1+FqhtZta2ndHi5gkQpNMy41tSf4WxT9nEfXZYbq/hrBKfXTKHp2/DGQ+x5 x6Jpo8v40S6N9x67q0x2SKzIBe8BYg2gz+Dlz8rqixZaFIIqxcO2B5kiHoB3w3QA r2e81gAjv46kGOvzJZyYwbCFym6bCAkPaLq68ICn/5YAsCA5WjDNFsdzpWKNwtI0 e8DH8dKKdax76kAGMh/EUd/9dXeWYgdcCosd3l/NbrjqE/1K4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeudn75CuU/vwnCUd309AAuBaqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MzM4NTQtMjE0ZS0z MDZhLWFhN2ItYjdjMjllNDVlN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9WgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeHj9+ai5d9DpQtOeVQElSqZYdG2E4AFF/i4gBlAp7CIW8BoEgl1cEi Bcjt4GdaEmY+rpVJkfqbrFccvLnncGVkOgd29xhb5YXt1IOIIpeZGbfMhBgvsPKp 32P12j48lGpLqM3ma1Vu/nKJlzkJdWuevrlm9j/GoEw6TnslIRGr7yWioJS1oY+l 2PuYS4InitBzuun0Yv5ozgRGAnYPu1sQNCiVaXDtMpvBUaaXqqtD+39k3UN6riVA 0gug0JlOCo1MY444JYlhRM00oyfog9Ji2xbrlASJF4DbNq97bXr0TKH29mnjfY4x qzjpXVTexMOlTapzdV6HT0VNoDu9o7g= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:00 2025 by rpki-client