$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa File: 2179d489-f203-397d-af9f-bd189ff4ec92.roa (raw, json) Hash identifier: 6xMfDCWdSQmD0fEhFE8guVpMH+FPPrJ3PX8b0huUgqc= Subject key identifier: 36:0E:E6:A0:D6:49:7D:DA:41:D3:C0:A5:C2:0A:25:52:F2:EC:79:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24BABA9D1E1FD6E79DB740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.188.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ba:ba:9d:1e:1f:d6:e7:9d:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=642ead72-550c-4ea6-ab83-c9ed13e20fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:98:58:59:98:69:ed:b2:df:d1:f5:25:fe: 76:fc:45:a6:7a:5f:32:14:50:f0:b6:94:57:92:27: 24:f2:f0:67:36:e6:0d:85:33:ce:05:c3:78:03:61: 9a:c2:7b:5b:de:5c:91:14:04:f8:c2:b1:ad:a3:cc: d8:39:34:aa:bf:b4:74:85:64:40:9b:54:48:3a:15: 65:1e:b8:bc:6e:d4:f8:40:5f:cf:7e:23:e3:96:be: d9:59:fa:21:14:c4:b8:36:11:ac:c8:c6:30:46:99: 32:ba:7d:b1:cb:79:c9:6a:31:1b:fd:0b:af:a7:fd: 75:42:8a:08:01:27:fc:49:77:b8:2b:5f:d6:55:fd: 17:52:86:fb:72:fb:5d:0b:d7:e8:f5:fa:57:2d:7e: 01:1e:a9:b3:d8:30:fa:8a:38:04:b2:1f:bf:3f:81: 76:65:54:6a:93:71:e3:f8:fd:81:77:0b:be:77:e1: 69:91:dd:ab:75:fb:78:72:80:62:0e:6b:74:92:49: 70:86:81:b0:fe:11:75:94:ad:2a:61:11:30:6a:2b: fb:c2:96:a8:f5:9d:e0:c0:ba:a5:6d:b4:a6:1a:71: be:21:df:ad:65:19:e3:5f:ee:b2:3e:f6:6b:79:55: 30:80:62:0c:d8:d4:fa:68:84:69:2e:67:00:1e:30: ee:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0E:E6:A0:D6:49:7D:DA:41:D3:C0:A5:C2:0A:25:52:F2:EC:79:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:44:4b:7f:36:45:4a:24:43:71:22:c9:66:4d:3a:14:5a:d7: 3e:20:58:f1:d4:94:6f:fc:45:2f:c2:d9:c0:78:10:40:3b:b6: c1:05:10:c3:b4:91:d2:46:b1:c4:df:2e:87:ef:e8:a2:29:42: f7:4b:47:e4:0e:53:1b:aa:b8:7e:66:23:81:c7:15:28:5a:93: d7:20:e7:c2:4b:24:35:75:49:6b:5a:c5:f7:45:e7:c6:cd:8b: 73:18:88:44:57:a5:a6:a2:0a:78:31:b3:fa:03:12:67:91:b7: f6:1d:42:64:25:98:ce:e8:9a:d1:e6:d9:b9:5d:8f:46:3c:ce: 36:68:91:52:3f:fb:9c:70:07:b6:f6:a2:a9:76:ef:49:2e:08: c7:72:f8:95:e2:c7:fd:1a:71:4d:47:ff:90:06:1e:15:b1:a5: e3:c7:89:9b:b3:75:7b:78:ca:50:f5:99:b7:67:d6:5e:1a:88: 63:27:13:69:be:88:21:d6:ca:82:db:98:82:40:f4:03:c3:6c: 11:c9:8d:d4:81:0e:34:2b:d9:61:6e:7e:f8:af:96:01:6a:15: 93:eb:5e:00:84:ad:4f:d4:fb:56:37:48:7b:98:69:cb:db:35: 22:11:0d:7d:7b:78:d8:d3:ae:0b:5b:0a:83:89:ad:f3:7f:07: af:8b:af:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLq6nR4f1uedt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjQyZWFkNzItNTUwYy00ZWE2LWFiODMtYzllZDEzZTIwZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy22YWFmYae2y39H1Jf52/EWmel8yFFDwtpRX kick8vBnNuYNhTPOBcN4A2Gawntb3lyRFAT4wrGto8zYOTSqv7R0hWRAm1RIOhVl Hri8btT4QF/PfiPjlr7ZWfohFMS4NhGsyMYwRpkyun2xy3nJajEb/Quvp/11QooI ASf8SXe4K1/WVf0XUob7cvtdC9fo9fpXLX4BHqmz2DD6ijgEsh+/P4F2ZVRqk3Hj +P2Bdwu+d+Fpkd2rdft4coBiDmt0kklwhoGw/hF1lK0qYREwaiv7wpao9Z3gwLql bbSmGnG+Id+tZRnjX+6yPvZreVUwgGIM2NT6aIRpLmcAHjDuuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYO5qDWSX3aQdPApcIKJVLy7HlUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3OWQ0ODktZjIwMy0z OTdkLWFmOWYtYmQxODlmZjRlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVES382RUokQ3EiyWZNOhRa1z4gWPHUlG/8RS/C2cB4EEA7tsEFEMO0 kdJGscTfLofv6KIpQvdLR+QOUxuquH5mI4HHFShak9cg58JLJDV1SWtaxfdF58bN i3MYiERXpaaiCngxs/oDEmeRt/YdQmQlmM7omtHm2bldj0Y8zjZokVI/+5xwB7b2 oql270kuCMdy+JXix/0acU1H/5AGHhWxpePHiZuzdXt4ylD1mbdn1l4aiGMnE2m+ iCHWyoLbmIJA9APDbBHJjdSBDjQr2WFufvivlgFqFZPrXgCErU/U+1Y3SHuYacvb NSIRDX17eNjTrgtbCoOJrfN/B6+Lr2Y= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:12 2025 by rpki-client