$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa File: 12f832c3-109c-3d9b-b69b-2fab2a90e816.roa (raw, json) Hash identifier: f/Ts+ZLYhwp9kDdvB7hBgjHVfAsF0UDqqB0JzsmyGMA= Subject key identifier: 81:11:24:E6:5B:A2:22:AF:8B:D7:9D:A2:C4:00:86:01:66:45:07:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB9399E974569A93C4F539E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa Signing time: Thu 06 Feb 2025 18:13:23 +0000 ROA not before: Thu 06 Feb 2025 18:13:23 +0000 ROA not after: Wed 07 May 2025 17:13:23 +0000 asID: 7029 IP address blocks: 173.191.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:99:e9:74:56:9a:93:c4:f5:39:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:23 2025 GMT Not After : May 7 17:13:23 2025 GMT Subject: CN=dcc5ece6-b096-4582-8148-cdf88bb736e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:68:e1:5f:0b:90:90:91:aa:e7:ee:c5:47:ac: 86:34:d2:7d:08:0f:12:ac:db:2e:b8:f1:73:79:7a: 2d:b0:2c:aa:aa:1d:23:6a:4a:18:8f:44:3c:98:2b: 08:9e:1b:b9:41:71:51:7b:0c:6d:19:2c:02:3c:c4: 9b:8b:e9:74:08:0c:e1:1b:b4:bb:30:06:e5:18:af: c0:62:d2:d5:e9:4b:38:ce:9b:26:bd:1e:b7:b0:7f: ea:59:d9:56:a5:c8:8f:84:05:5c:2d:e5:02:8c:be: fa:00:63:62:5e:b7:24:c1:7e:70:8e:2f:46:c0:2a: ec:d6:46:f4:c8:3f:7f:b0:99:73:de:00:d9:e4:ef: 5f:97:76:fc:bf:54:72:6e:3a:dc:8b:cf:ea:1e:a2: 3d:b2:a8:bc:ec:3d:4f:12:e6:e7:8f:0d:bc:84:e7: 8f:ac:00:8a:c7:18:e6:d7:fc:bb:d9:05:4b:f4:70: 49:42:87:63:19:2b:ad:86:8f:00:c4:f9:b1:dc:cf: 3b:b7:91:c4:18:f6:ed:23:70:8c:91:0c:37:e0:b7: ec:98:e9:e5:10:b5:8f:56:96:35:13:b4:ef:c3:1b: 13:c7:9f:9e:a4:5f:af:5c:68:c3:4d:76:84:1e:57: ab:4d:95:96:17:c1:f9:71:5a:85:1e:89:13:0f:3e: 7b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:24:E6:5B:A2:22:AF:8B:D7:9D:A2:C4:00:86:01:66:45:07:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:76:5b:c6:71:f5:79:0d:e0:b6:d9:48:aa:1a:9e:30:e2:03: f1:68:b2:0f:32:20:1d:7b:7f:d2:82:aa:60:17:79:2a:0a:80: 92:ec:16:92:17:97:ed:58:a7:8e:07:65:2f:8c:44:68:5c:36: ca:f7:7e:75:34:f2:99:95:bf:ce:50:a4:b3:f6:e5:80:dc:a3: 1a:b7:22:b8:ea:c6:94:3e:8f:b5:71:ab:db:76:5f:8d:49:ea: b7:a8:e9:45:41:94:ae:97:ff:3b:51:c4:45:11:d5:8b:29:7f: 49:8c:d5:63:31:fe:35:23:f9:5e:a1:0a:27:25:7b:62:cf:2f: 93:8b:f4:e9:2b:0e:71:b5:df:70:72:4c:13:30:cf:c6:59:e1: 63:4f:11:dd:1c:13:0b:78:2f:02:a0:b9:8c:4c:16:1a:c2:d8: 62:e3:c8:90:10:e8:27:16:d1:60:a8:48:80:eb:bd:0e:b5:ee: 84:31:f7:56:76:54:14:83:60:12:02:c9:7d:93:2c:41:e1:ce: 17:9f:e2:01:a0:f9:01:7f:46:76:1c:80:1a:c8:83:9d:5d:a2: ad:9d:19:56:6e:b0:2c:ac:b5:8d:fe:d1:9f:c1:b5:9b:e8:97: 1c:3d:b0:44:18:2d:8c:79:33:a2:17:3f:bf:65:5b:0e:87:b5: 71:61:4a:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk5npdFaak8T1OeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTMyM1oXDTI1MDUwNzE3MTMyM1owLzEtMCsGA1UEAxMk ZGNjNWVjZTYtYjA5Ni00NTgyLTgxNDgtY2RmODhiYjczNmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2jhXwuQkJGq5+7FR6yGNNJ9CA8SrNsuuPFz eXotsCyqqh0jakoYj0Q8mCsInhu5QXFRewxtGSwCPMSbi+l0CAzhG7S7MAblGK/A YtLV6Us4zpsmvR63sH/qWdlWpciPhAVcLeUCjL76AGNiXrckwX5wji9GwCrs1kb0 yD9/sJlz3gDZ5O9fl3b8v1Rybjrci8/qHqI9sqi87D1PEubnjw28hOePrACKxxjm 1/y72QVL9HBJQodjGSutho8AxPmx3M87t5HEGPbtI3CMkQw34LfsmOnlELWPVpY1 E7TvwxsTx5+epF+vXGjDTXaEHlerTZWWF8H5cVqFHokTDz571wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIERJOZboiKvi9edosQAhgFmRQf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmODMyYzMtMTA5Yy0z ZDliLWI2OWItMmZhYjJhOTBlODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH12W8Zx9XkN4LbZSKoanjDiA/Fosg8yIB17f9KCqmAXeSoKgJLsFpIX l+1Yp44HZS+MRGhcNsr3fnU08pmVv85QpLP25YDcoxq3IrjqxpQ+j7Vxq9t2X41J 6reo6UVBlK6X/ztRxEUR1Yspf0mM1WMx/jUj+V6hCicle2LPL5OL9OkrDnG133By TBMwz8ZZ4WNPEd0cEwt4LwKguYxMFhrC2GLjyJAQ6CcW0WCoSIDrvQ617oQx91Z2 VBSDYBICyX2TLEHhzhef4gGg+QF/RnYcgBrIg51doq2dGVZusCystY3+0Z/BtZvo lxw9sEQYLYx5M6IXP79lWw6HtXFhSpA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:16:59 2025 by rpki-client