$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa File: 1acc8c5b-1d39-3e1e-886a-120184f0d402.roa (raw, json) Hash identifier: ay9S5tVFxfTn0v2jF9FHK6a5nt4TaVQacSgihyPTwd0= Subject key identifier: 36:C9:C3:BA:AD:0A:94:7E:40:8C:68:C5:8B:48:C4:03:A9:B6:15:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849912F561665F5A9E29DFC9200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 173.187.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:56:16:65:f5:a9:e2:9d:fc:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=ab498ba2-9e04-42d1-8643-d6a19efa0570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0f:3b:df:72:40:1e:92:0a:c3:8b:9f:bf:99: a2:70:66:7f:68:ed:96:3d:77:18:dc:95:a8:cf:5f: c7:92:7c:3b:0a:7c:8f:fe:3b:e9:bb:ff:78:87:33: b9:85:b7:8b:8d:57:c0:94:86:90:2f:5c:6b:f0:ba: 93:50:7e:8e:4f:df:4b:12:8a:66:cc:00:ae:78:af: 44:08:9e:c4:25:1d:a8:6a:9f:20:f6:cd:2a:de:cb: 83:ba:a5:68:d7:78:b4:3b:0c:90:30:a9:cc:f6:30: 6d:6e:f1:9e:06:3b:bb:6c:1c:1c:ea:f9:f7:07:10: de:26:9d:40:68:4c:80:47:a2:bf:36:01:72:9d:4f: 5c:c6:44:4d:9b:14:0a:40:4a:de:52:5a:2b:94:3d: 33:e4:02:9c:50:35:92:cf:e8:7d:e2:5b:88:37:b5: d4:56:7d:e0:3b:33:e8:2c:7c:74:3a:80:29:3f:97: 1c:a6:9d:18:c8:c8:c5:83:68:40:5c:55:45:fc:c5: 05:75:e1:4c:9a:72:82:90:33:d9:a8:12:9d:87:c3: 3b:59:db:3f:07:2e:ef:5c:84:e4:e9:78:54:a3:e5: 59:fe:f7:e5:4c:91:12:84:e2:ec:e9:bc:08:cd:c5: ca:75:3c:a7:d1:04:40:75:cc:7f:d3:d9:ed:51:98: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C9:C3:BA:AD:0A:94:7E:40:8C:68:C5:8B:48:C4:03:A9:B6:15:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1acc8c5b-1d39-3e1e-886a-120184f0d402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ca:93:4f:53:b5:c0:1f:89:d3:ac:e3:7b:e0:92:2d:e0:c4: b4:24:da:96:a5:3a:87:17:f2:8c:3e:e0:ef:4b:26:ac:ab:17: d5:76:a1:de:13:ef:6d:60:a8:0c:36:47:1f:5e:02:a1:c3:1c: 24:64:48:f3:53:fe:e5:e3:a1:be:64:ad:f4:87:42:8f:8a:57: 36:47:53:7c:88:19:3a:b2:44:5d:db:eb:69:39:c6:ee:61:c4: e6:a6:42:2e:50:19:55:a0:b4:2f:bd:70:e3:c4:5f:6f:33:22: 4a:69:b3:1f:01:36:c2:6a:64:12:54:db:c8:e9:dd:65:14:8c: f5:b8:fe:94:ea:97:23:42:bb:84:75:18:b9:ac:64:13:16:ca: 65:7a:92:20:dd:b1:4e:58:a3:51:c1:64:4f:0a:d8:fb:1f:2c: 0a:05:4a:be:90:01:52:5e:2f:e1:13:8d:68:e3:ce:0b:92:d9: a2:40:b4:0e:c6:a8:3d:5d:2c:29:ef:b0:06:31:cf:40:64:2e: 2c:59:ce:05:fb:48:69:8c:ad:58:6f:70:b9:1b:84:d5:8c:12: 18:e8:b2:ce:a2:f8:db:9c:1a:b8:8c:47:3b:7d:b5:83:1d:54: 4d:97:47:fa:5a:ee:e2:82:aa:55:21:c8:04:d1:41:7f:76:da: c8:9a:8b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1YWZfWp4p38kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk YWI0OThiYTItOWUwNC00MmQxLTg2NDMtZDZhMTllZmEwNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9g8733JAHpIKw4ufv5micGZ/aO2WPXcY3JWo z1/Hknw7CnyP/jvpu/94hzO5hbeLjVfAlIaQL1xr8LqTUH6OT99LEopmzACueK9E CJ7EJR2oap8g9s0q3suDuqVo13i0OwyQMKnM9jBtbvGeBju7bBwc6vn3BxDeJp1A aEyAR6K/NgFynU9cxkRNmxQKQEreUlorlD0z5AKcUDWSz+h94luIN7XUVn3gOzPo LHx0OoApP5ccpp0YyMjFg2hAXFVF/MUFdeFMmnKCkDPZqBKdh8M7Wds/By7vXITk 6XhUo+VZ/vflTJEShOLs6bwIzcXKdTyn0QRAdcx/09ntUZjx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbJw7qtCpR+QIxoxYtIxAOpthWPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFjYzhjNWItMWQzOS0z ZTFlLTg4NmEtMTIwMTg0ZjBkNDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Kk09TtcAfidOs43vgki3gxLQk2palOocX8ow+4O9LJqyrF9V2od4T 721gqAw2Rx9eAqHDHCRkSPNT/uXjob5krfSHQo+KVzZHU3yIGTqyRF3b62k5xu5h xOamQi5QGVWgtC+9cOPEX28zIkppsx8BNsJqZBJU28jp3WUUjPW4/pTqlyNCu4R1 GLmsZBMWymV6kiDdsU5Yo1HBZE8K2PsfLAoFSr6QAVJeL+ETjWjjzguS2aJAtA7G qD1dLCnvsAYxz0BkLixZzgX7SGmMrVhvcLkbhNWMEhjoss6i+NucGriMRzt9tYMd VE2XR/pa7uKCqlUhyATRQX922siaizA= -----END CERTIFICATE-----Generated at Sun Apr 27 02:40:44 2025 by rpki-client