$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa File: 0192393b-339b-3f38-9f75-d4f7994dce0e.roa (raw, json) Hash identifier: yFUaA2jaobBe7lw0/tDWgtCKKXFL1ZVjUOxGQpgu/Pc= Subject key identifier: 00:82:58:D1:10:0D:A1:FD:2F:BB:77:AA:F3:B2:8C:3D:9F:CC:F6:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099BAD57CAC92EF0EAC080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 173.189.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9b:ad:57:ca:c9:2e:f0:ea:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=ef6b6cc5-2aac-41f1-a4bb-a8c360e2ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:69:b2:26:32:1a:0e:ee:97:a9:73:c5:ea: d7:60:8d:02:e4:57:d1:0e:6c:b2:27:90:ae:b1:41: db:a3:48:d6:be:7f:81:25:23:dd:32:c2:78:18:d5: 42:58:89:86:71:f1:31:84:e5:c8:84:44:d5:9a:50: 3c:ee:24:d2:0d:98:a3:6d:e2:11:c5:05:05:0d:51: cf:ba:25:8b:13:b9:6e:be:c7:6b:67:39:95:fe:2b: 53:4f:9e:c1:56:12:a3:4e:2f:2a:72:e4:19:2f:a7: be:d7:b8:61:2b:27:4a:96:aa:41:55:89:d3:ff:3c: f6:05:66:07:f2:37:31:92:de:29:3a:be:c0:d0:5d: 74:29:31:f9:ca:44:87:20:62:0f:d1:3e:e8:8d:70: c5:e4:40:d8:da:08:4e:45:ec:8b:03:58:61:13:1d: 9d:5b:ba:07:4b:61:08:86:16:c7:78:e2:13:94:c2: d9:a2:44:b7:54:da:62:4e:e0:89:1e:da:5e:1e:07: 43:41:27:0c:39:0a:2f:12:be:21:9c:53:37:d8:f7: 8d:06:78:fb:3c:00:2a:85:de:0d:fd:d4:4c:be:4e: d0:a0:06:b3:35:70:5c:fd:73:8e:cd:65:66:1f:99: 4e:c2:1e:cd:18:46:bd:aa:f1:32:94:b7:48:88:27: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:82:58:D1:10:0D:A1:FD:2F:BB:77:AA:F3:B2:8C:3D:9F:CC:F6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0192393b-339b-3f38-9f75-d4f7994dce0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:9f:5d:96:b9:ca:4c:8c:03:aa:a6:a2:23:1f:91:d8:bd:61: c4:4d:e7:95:36:b9:e9:29:ac:e8:83:5b:96:1d:94:8b:13:41: b2:7f:c2:b1:e5:b4:95:b5:94:99:11:ba:b4:4a:48:dd:ce:3d: 66:23:f8:b9:8b:33:55:33:4f:16:d4:69:15:c8:17:ba:5d:64: 56:6b:8f:a9:50:15:d4:4a:3e:c7:1a:72:f5:78:f7:bf:42:9c: d9:38:54:fc:b4:3d:df:ea:ff:b8:59:46:fd:0a:eb:3a:81:71: 64:3b:18:86:ce:71:99:5c:25:a0:c1:e6:0b:23:06:1b:ae:37: 50:cd:6c:c2:f1:b4:93:74:a3:93:f8:bf:ea:cc:6e:aa:4d:07: 4f:f3:39:90:08:3c:dc:d8:94:c5:3c:e3:b1:d8:a2:83:9a:d8: 3f:5c:a5:be:f2:7d:cf:2e:0e:07:83:e9:73:85:c0:44:22:ed: 3b:ed:e1:19:eb:b4:1b:5e:b6:37:0e:f1:3c:6c:29:d1:9e:77: 90:04:7e:30:bf:ae:79:e8:df:7f:31:b4:84:ae:c1:33:57:3f: 50:30:82:15:a9:f5:9d:59:df:08:72:9c:65:92:0d:db:7f:90: e8:d2:06:e9:09:08:06:33:69:5d:0c:cc:a4:a3:f9:29:6f:4d: a8:42:a0:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZutV8rJLvDqwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZWY2YjZjYzUtMmFhYy00MWYxLWE0YmItYThjMzYwZTJiYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD5psiYyGg7ul6lzxerXYI0C5FfRDmyyJ5Cu sUHbo0jWvn+BJSPdMsJ4GNVCWImGcfExhOXIhETVmlA87iTSDZijbeIRxQUFDVHP uiWLE7luvsdrZzmV/itTT57BVhKjTi8qcuQZL6e+17hhKydKlqpBVYnT/zz2BWYH 8jcxkt4pOr7A0F10KTH5ykSHIGIP0T7ojXDF5EDY2ghOReyLA1hhEx2dW7oHS2EI hhbHeOITlMLZokS3VNpiTuCJHtpeHgdDQScMOQovEr4hnFM32PeNBnj7PAAqhd4N /dRMvk7QoAazNXBc/XOOzWVmH5lOwh7NGEa9qvEylLdIiCcRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACCWNEQDaH9L7t3qvOyjD2fzPbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDE5MjM5M2ItMzM5Yi0z ZjM4LTlmNzUtZDRmNzk5NGRjZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFafXZa5ykyMA6qmoiMfkdi9YcRN55U2uekprOiDW5YdlIsTQbJ/wrHl tJW1lJkRurRKSN3OPWYj+LmLM1UzTxbUaRXIF7pdZFZrj6lQFdRKPscacvV4979C nNk4VPy0Pd/q/7hZRv0K6zqBcWQ7GIbOcZlcJaDB5gsjBhuuN1DNbMLxtJN0o5P4 v+rMbqpNB0/zOZAIPNzYlMU847HYooOa2D9cpb7yfc8uDgeD6XOFwEQi7Tvt4Rnr tBtetjcO8TxsKdGed5AEfjC/rnno338xtISuwTNXP1AwghWp9Z1Z3whynGWSDdt/ kOjSBukJCAYzaV0MzKSj+SlvTahCoCY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:09 2025 by rpki-client