$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa File: 11346961-2de6-378c-8b12-1e462e2aa949.roa (raw, json) Hash identifier: W+OcW1BJ/wNuwyjSBJPgR3sT9ylN5dMmTxJpGX082so= Subject key identifier: 63:90:5C:EF:24:E9:04:48:D7:4F:22:91:76:16:96:7F:5E:DC:73:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584973DEDC7395DC696A68A40E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dc:73:95:dc:69:6a:68:a4:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=5d744983-40c0-4e99-88cb-f91a091550fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:75:2a:ce:42:c8:29:2c:66:22:f7:63:17: 25:2e:ef:05:61:b1:78:ef:dd:6f:69:91:78:2a:8b: 8c:9e:eb:6a:69:f0:a4:84:dc:44:35:44:bc:a4:17: bd:98:24:55:3c:1b:08:f7:c9:ab:4b:42:7d:f7:5e: 13:f3:49:da:e1:70:1e:fd:65:a1:b8:36:95:c1:5f: 7e:76:46:08:2b:3e:08:1c:c3:7a:07:3c:8a:31:1e: 07:01:78:41:73:ff:3c:b9:f9:38:63:f6:fd:c8:a6: 6e:46:35:dc:9f:27:36:79:e1:55:2d:0f:92:1e:87: 94:76:ed:0b:16:48:d0:32:14:65:7f:18:9f:26:c5: b1:7e:a1:e5:84:f7:06:c0:92:f7:04:e2:57:14:1a: 76:0c:4e:ec:a4:da:a3:af:81:26:c5:16:b5:b5:07: 61:89:d2:a3:e0:91:ac:47:71:2c:11:6f:2f:2a:f4: 5f:c1:e5:44:84:6c:39:cc:76:db:04:d8:14:fe:43: 30:61:9c:07:fc:18:5b:82:a5:97:62:f1:e6:43:dc: ba:a8:e3:cf:37:2c:28:c1:30:3f:77:e0:50:8a:f1: 3a:fd:69:0a:2f:0c:99:c7:fc:3a:0b:6d:69:44:28: 2a:db:7f:f9:bd:96:c2:90:55:d2:45:5c:1c:1e:13: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:90:5C:EF:24:E9:04:48:D7:4F:22:91:76:16:96:7F:5E:DC:73:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11346961-2de6-378c-8b12-1e462e2aa949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6f:5e:f5:e1:d5:1a:cb:b6:5c:ea:ce:e1:80:2d:db:7f:e5: 16:36:d4:20:7c:16:1c:de:d8:51:e1:53:f1:0b:ce:fd:f2:cc: fb:93:a5:ce:97:5b:95:c1:a0:31:be:2d:03:72:8f:92:fc:3f: 03:5b:a4:f9:72:d2:c9:e1:1f:4f:27:4d:2f:90:55:4f:c4:0d: 28:e3:40:1d:ea:90:3d:39:8b:5b:8d:a4:a4:9e:03:8d:ce:7b: 93:7e:8b:54:f6:c5:91:3b:1c:9b:ca:0d:6c:35:43:e5:ee:7e: 42:b2:f6:4f:64:29:28:b9:67:08:8d:db:eb:c5:f9:a5:64:cc: d7:0b:9e:5d:b8:42:f0:99:14:b6:44:63:b7:7c:99:9a:39:b2: 27:0d:7e:16:4b:96:8d:17:07:f9:21:28:bb:74:f7:53:8d:9b: b4:e2:be:92:bc:e4:f3:92:41:22:31:6b:bd:70:53:42:4d:df: 22:ee:06:a8:89:be:db:3e:1f:f0:84:17:ca:33:f4:73:55:b8: 42:6b:3b:cb:03:10:bc:c1:56:0b:9d:46:b1:e1:52:5c:3c:32: 56:81:43:6f:89:be:38:3d:74:f4:67:da:9c:95:7c:3a:41:73: 7a:78:c3:aa:6d:02:d2:36:9e:64:85:b0:25:f8:7d:f8:77:b6: c4:80:c0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3txzldxpamikDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NWQ3NDQ5ODMtNDBjMC00ZTk5LTg4Y2ItZjkxYTA5MTU1MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk51Ks5CyCksZiL3YxclLu8FYbF4791vaZF4 KouMnutqafCkhNxENUS8pBe9mCRVPBsI98mrS0J9914T80na4XAe/WWhuDaVwV9+ dkYIKz4IHMN6BzyKMR4HAXhBc/88ufk4Y/b9yKZuRjXcnyc2eeFVLQ+SHoeUdu0L FkjQMhRlfxifJsWxfqHlhPcGwJL3BOJXFBp2DE7spNqjr4EmxRa1tQdhidKj4JGs R3EsEW8vKvRfweVEhGw5zHbbBNgU/kMwYZwH/BhbgqWXYvHmQ9y6qOPPNywowTA/ d+BQivE6/WkKLwyZx/w6C21pRCgq23/5vZbCkFXSRVwcHhNyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOQXO8k6QRI108ikXYWln9e3HN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTEzNDY5NjEtMmRlNi0z NzhjLThiMTItMWU0NjJlMmFhOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJvXvXh1RrLtlzqzuGALdt/5RY21CB8Fhze2FHhU/ELzv3yzPuTpc6X W5XBoDG+LQNyj5L8PwNbpPly0snhH08nTS+QVU/EDSjjQB3qkD05i1uNpKSeA43O e5N+i1T2xZE7HJvKDWw1Q+XufkKy9k9kKSi5ZwiN2+vF+aVkzNcLnl24QvCZFLZE Y7d8mZo5sicNfhZLlo0XB/khKLt091ONm7TivpK85POSQSIxa71wU0JN3yLuBqiJ vts+H/CEF8oz9HNVuEJrO8sDELzBVgudRrHhUlw8MlaBQ2+Jvjg9dPRn2pyVfDpB c3p4w6ptAtI2nmSFsCX4ffh3tsSAwD0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:01:28 2025 by rpki-client