$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa File: a085d050-8d43-326a-814c-9d1beb3b7df3.roa (raw, json) Hash identifier: tUWzM3mbg1Fv5ZJdzZ4/x0/Q9HxyJurjDSycLxOKBQU= Subject key identifier: CD:C6:2D:1E:31:EB:70:BF:25:AC:D9:9E:45:4F:C5:F0:CE:E1:7A:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2405600FDD692264B600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 22773 IP address blocks: 166.102.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:24:05:60:0f:dd:69:22:64:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8b41d012-7f4d-473f-b356-a50311c904c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:d4:f0:44:7b:e0:75:2b:ef:f3:ff:ed:8e: 8f:29:b0:96:19:29:51:1c:1a:7b:6a:91:58:7b:9a: 4a:5e:64:29:29:a7:dd:62:88:a0:5d:3e:50:10:ee: 97:49:f8:ac:48:83:fb:ae:17:fb:91:bf:d1:08:49: 45:53:e4:06:d6:ac:37:43:07:f6:7f:a8:1a:22:84: df:d4:59:ec:c3:f2:64:03:ce:05:7c:bf:a6:7d:f3: 9f:df:3d:25:b7:50:86:f9:b3:40:39:a5:ba:4e:89: 9d:2c:60:bb:e6:86:59:0e:5f:9e:25:b2:09:39:6e: 68:3b:e6:b2:98:68:cf:8c:bb:3d:d4:8f:97:19:ea: 86:2b:19:96:9e:92:48:e7:79:22:6b:76:b3:fb:1d: 63:a2:42:ce:8e:cb:b0:83:81:34:3c:0c:40:c7:80: 7e:83:d6:28:bb:fb:cb:5f:6c:a4:87:f1:04:25:e8: c5:45:1b:48:f0:90:2c:a5:b4:00:a6:65:fd:6d:f5: 80:b1:98:6a:5b:be:cd:d2:8c:fe:f4:c5:8c:1c:e4: 69:00:cf:50:de:4f:3a:b4:0b:55:9d:4f:fc:dc:33: e3:f4:60:e9:0b:92:de:90:ef:23:06:5c:c4:d7:77: 38:41:23:12:84:73:67:a1:35:fa:28:a9:55:02:87: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C6:2D:1E:31:EB:70:BF:25:AC:D9:9E:45:4F:C5:F0:CE:E1:7A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a085d050-8d43-326a-814c-9d1beb3b7df3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:14:54:9b:c3:64:1b:37:de:a4:b7:c3:a3:e3:b1:43:04:07: 5a:1d:5c:35:7f:2b:04:5d:61:66:d3:5b:47:23:99:74:d4:ef: 38:4c:df:f8:12:09:34:25:1b:24:c5:d2:5b:fe:49:68:43:d8: 73:aa:2d:c0:7d:76:eb:db:0e:bc:70:d5:57:9e:6c:f8:c0:22: 25:ae:34:26:ba:72:be:bb:af:7d:00:af:d5:a0:e8:0e:2c:95: 4a:84:50:4a:1f:45:16:74:ec:a3:27:56:cf:03:89:38:51:01: eb:ca:7f:2f:9f:cc:5f:f4:25:a9:04:1c:7a:e6:14:33:42:01: 4f:3c:89:27:85:41:fe:19:cb:4c:4b:e6:66:38:f2:87:ff:54: 7b:c5:22:4a:0e:64:67:8b:3e:94:49:85:69:6a:e0:e0:94:65: 76:57:b4:48:f9:d8:83:dd:e4:ce:bf:93:a2:31:07:c3:4b:8c: 1c:55:f5:78:c6:ea:4f:8f:f6:37:fe:48:62:ae:67:e3:c9:2c: 60:d0:42:94:b5:fa:b8:3d:e7:22:70:56:71:51:4b:f3:8a:33: 7f:82:cc:de:d4:fb:fc:7b:12:be:6e:0e:ab:cb:cd:fc:23:5f: 2a:12:cf:74:63:9f:d6:fa:46:13:5c:9c:26:82:d1:95:8e:50: 72:f4:b8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiQFYA/daSJktgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGI0MWQwMTItN2Y0ZC00NzNmLWIzNTYtYTUwMzExYzkwNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc3U8ER74HUr7/P/7Y6PKbCWGSlRHBp7apFY e5pKXmQpKafdYoigXT5QEO6XSfisSIP7rhf7kb/RCElFU+QG1qw3Qwf2f6gaIoTf 1Fnsw/JkA84FfL+mffOf3z0lt1CG+bNAOaW6TomdLGC75oZZDl+eJbIJOW5oO+ay mGjPjLs91I+XGeqGKxmWnpJI53kia3az+x1jokLOjsuwg4E0PAxAx4B+g9You/vL X2ykh/EEJejFRRtI8JAspbQApmX9bfWAsZhqW77N0oz+9MWMHORpAM9Q3k86tAtV nU/83DPj9GDpC5LekO8jBlzE13c4QSMShHNnoTX6KKlVAofBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3GLR4x63C/JazZnkVPxfDO4XpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4NWQwNTAtOGQ0My0z MjZhLTgxNGMtOWQxYmViM2I3ZGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApmaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkUVJvDZBs33qS3w6PjsUMEB1odXDV/KwRdYWbTW0cjmXTU7zhM3/gS CTQlGyTF0lv+SWhD2HOqLcB9duvbDrxw1VeebPjAIiWuNCa6cr67r30Ar9Wg6A4s lUqEUEofRRZ07KMnVs8DiThRAevKfy+fzF/0JakEHHrmFDNCAU88iSeFQf4Zy0xL 5mY48of/VHvFIkoOZGeLPpRJhWlq4OCUZXZXtEj52IPd5M6/k6IxB8NLjBxV9XjG 6k+P9jf+SGKuZ+PJLGDQQpS1+rg95yJwVnFRS/OKM3+CzN7U+/x7Er5uDqvLzfwj XyoSz3Rjn9b6RhNcnCaC0ZWOUHL0uEc= -----END CERTIFICATE-----Generated at Sat May 10 13:54:12 2025 by rpki-client