$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa File: 0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa (raw, json) Hash identifier: iXeMDCr+QRN+wDe2f5YlF6sPHRDc9sxRc397CuGo1d4= Subject key identifier: 96:1A:7A:D0:B6:39:B3:D0:0E:3D:F6:5B:A7:09:17:E2:D4:9C:C2:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849780F1F955729525EEC247F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.186.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1f:95:57:29:52:5e:ec:24:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=9b1f5ab5-e5a2-45b9-99d7-affd117e6c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:99:55:ae:8c:cc:dc:d6:94:41:d7:d7:83: d8:a8:42:ad:17:89:ef:f1:d7:41:a6:32:66:a0:9c: a6:6c:ba:f8:61:e6:51:59:7c:35:c6:6d:7c:aa:e2: 71:35:63:65:27:58:fb:c8:a9:6d:22:e6:3b:7e:38: 77:8a:2f:e9:21:41:e1:6e:b4:7b:bc:a0:14:61:6c: 90:64:fd:e6:57:4a:61:71:20:be:ee:5b:7a:f9:92: 5b:30:ac:84:59:9d:03:2c:59:56:43:72:c1:e3:17: f9:1d:43:a8:34:02:2f:37:9d:fb:67:e3:f7:27:88: d3:62:91:5c:c1:7f:ee:71:7f:2c:d8:87:fb:07:b6: 5c:8c:5d:9c:ca:e1:76:a4:81:c6:03:25:93:bc:60: bd:63:96:de:18:3c:b3:62:6f:7c:f0:ef:79:9c:6f: 40:d3:b1:e0:72:2a:64:cb:ba:96:0e:e6:59:b0:e4: 95:01:37:b1:09:8b:5a:96:71:c7:d0:5a:ed:d3:5b: 74:7a:3c:77:a4:d8:9d:a8:9b:cb:32:5c:35:10:15: ac:86:ef:06:bb:ab:51:d0:86:4b:1d:2d:db:da:57: 18:f6:f0:0e:67:c0:d7:94:4f:1d:b9:61:11:1c:74: 8a:76:ae:47:4b:2e:3d:e6:26:81:79:8a:e5:4a:88: 6a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1A:7A:D0:B6:39:B3:D0:0E:3D:F6:5B:A7:09:17:E2:D4:9C:C2:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:59:b8:5e:87:10:96:3f:d1:3b:89:a6:8e:79:cc:7e:b0:3e: 21:0e:df:1e:1f:87:db:b1:98:27:01:81:55:fc:5a:14:4b:15: f4:ed:e1:b6:af:f4:69:37:75:4c:29:fa:86:c9:f4:d8:28:eb: 0d:ef:7a:b8:76:2a:01:5e:bf:5f:06:66:98:79:44:21:5f:e0: 35:2a:56:19:3a:2d:b9:9b:49:e3:bd:30:33:3e:5f:87:6e:e1: 67:72:39:63:91:58:c7:19:d5:be:07:81:bb:9e:c2:67:99:f2: d9:1d:76:f1:7b:41:68:cd:92:62:a1:4e:11:70:94:e5:6d:7c: ca:bd:02:55:37:31:50:fc:b1:9e:76:83:44:02:1f:8f:ab:3d: 5d:9d:ce:7b:78:d6:2d:d2:c3:fa:27:5a:25:aa:32:2f:85:ec: 36:4c:f4:ff:c7:f2:c1:11:18:64:93:d3:7b:80:0b:d2:5f:f3: 52:e3:22:78:a9:ff:c9:4b:cf:4a:97:70:11:03:7f:71:b0:f9: f7:9c:d7:6c:03:f7:18:72:17:8c:92:f4:c1:4f:2e:9c:39:d3: 33:0b:5d:be:aa:f8:29:01:f8:d4:48:d1:97:c3:24:30:72:5f: 3a:78:aa:1d:5d:44:c8:82:0f:ed:82:d4:18:a4:9f:b6:44:20: 9b:75:4f:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dx+VVylSXuwkfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk OWIxZjVhYjUtZTVhMi00NWI5LTk5ZDctYWZmZDExN2U2YzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcSZVa6MzNzWlEHX14PYqEKtF4nv8ddBpjJm oJymbLr4YeZRWXw1xm18quJxNWNlJ1j7yKltIuY7fjh3ii/pIUHhbrR7vKAUYWyQ ZP3mV0phcSC+7lt6+ZJbMKyEWZ0DLFlWQ3LB4xf5HUOoNAIvN537Z+P3J4jTYpFc wX/ucX8s2If7B7ZcjF2cyuF2pIHGAyWTvGC9Y5beGDyzYm988O95nG9A07Hgcipk y7qWDuZZsOSVATexCYtalnHH0Frt01t0ejx3pNidqJvLMlw1EBWshu8Gu6tR0IZL HS3b2lcY9vAOZ8DXlE8duWERHHSKdq5HSy495iaBeYrlSohqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYaetC2ObPQDj32W6cJF+LUnMIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2MzliMjUtZjUzNC0z ZjU4LWExZjgtNTdmZGRiMDJhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtZuF6HEJY/0TuJpo55zH6wPiEO3x4fh9uxmCcBgVX8WhRLFfTt4bav 9Gk3dUwp+obJ9Ngo6w3verh2KgFev18GZph5RCFf4DUqVhk6LbmbSeO9MDM+X4du 4WdyOWORWMcZ1b4HgbuewmeZ8tkddvF7QWjNkmKhThFwlOVtfMq9AlU3MVD8sZ52 g0QCH4+rPV2dznt41i3Sw/onWiWqMi+F7DZM9P/H8sERGGST03uAC9Jf81LjInip /8lLz0qXcBEDf3Gw+fec12wD9xhyF4yS9MFPLpw50zMLXb6q+CkB+NRI0ZfDJDBy Xzp4qh1dRMiCD+2C1Bikn7ZEIJt1T94= -----END CERTIFICATE-----Generated at Sun Apr 27 01:07:29 2025 by rpki-client