$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa File: 3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa (raw, json) Hash identifier: m+Prx4EYmfjeXKtR4oCriTjxbsstwHp16msdXByMPeM= Subject key identifier: 35:FA:DB:13:C3:88:C2:A4:64:33:CF:A4:89:69:D9:8B:F1:CF:80:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24BAAB7505E6477648C100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.188.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ba:ab:75:05:e6:47:76:48:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d4fb55b6-c72d-4ad1-9b2d-247bd3635757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:bf:b7:63:ef:80:49:75:e8:2f:16:01:a0: 43:5b:38:4f:e9:f4:34:79:7a:bf:3f:0a:2c:e0:fb: 6f:eb:00:0f:c7:95:60:d8:0c:e1:51:e8:61:ca:97: 21:00:a8:96:cc:3b:1b:a4:4f:0a:4d:fc:44:ef:f6: 73:8f:8b:59:9c:23:3e:2c:ac:bd:28:f8:d8:36:1b: e5:7f:7d:60:59:ba:93:fd:39:ab:a0:46:a8:bf:b0: fc:3d:4f:ec:0a:30:34:a5:9c:a1:33:e3:b2:d4:17: f0:00:be:c7:5a:67:1b:20:57:dc:68:5e:c5:c5:47: f4:67:c9:f3:f6:e8:8f:7a:9c:96:f7:2e:09:bd:ec: 8a:73:85:26:c1:9d:b2:5f:a8:72:a2:16:4a:24:aa: b2:4a:08:72:99:09:6b:4e:36:8d:1e:ff:24:76:09: 5a:17:a7:4c:e5:3c:e4:3f:a3:bb:ed:76:24:bd:65: 2f:8f:aa:cf:bd:7d:20:cb:73:a0:5c:96:f6:de:e2: c0:34:de:92:85:c4:0f:bd:12:0d:ae:20:92:fa:c3: eb:af:54:35:f4:e0:a8:1d:c9:24:37:a3:da:0d:d7: 07:f5:c1:96:50:97:3b:4f:38:ec:fc:3c:f0:df:53: f4:15:b2:f0:f3:07:bb:0f:b4:24:91:b4:37:4a:f0: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FA:DB:13:C3:88:C2:A4:64:33:CF:A4:89:69:D9:8B:F1:CF:80:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:36:ab:33:2f:af:58:ab:ed:2c:b0:6d:6c:1e:5f:e1:fc:d3: 17:a6:53:2e:69:2c:ce:ad:62:d0:de:7b:3f:d6:c3:51:70:c6: 97:20:f6:14:af:b2:a7:e2:7d:da:e4:fb:52:63:f8:8c:89:ee: 4d:37:3c:23:93:67:71:6b:a0:3f:db:00:b5:a8:61:b3:46:6e: c3:05:19:de:c8:f5:31:63:5c:39:e6:c7:9b:e7:9e:c0:02:77: 02:03:64:da:35:6a:dc:10:a9:3d:a2:02:f8:da:25:4a:d0:19: bc:fc:86:52:1f:d5:33:7c:80:bc:e9:1e:fe:93:70:f4:43:94: 88:b5:3a:fb:b4:ce:0b:ec:83:32:ef:ee:f4:bd:31:23:88:70: 4d:25:c1:12:ad:11:a2:96:d5:33:82:cf:6f:9b:70:7d:c0:fd: 93:55:48:d5:c8:58:59:17:9a:94:16:2c:a1:be:ae:3b:61:89: 27:89:3a:00:8a:1b:bb:e6:e7:c0:3b:8c:9a:fc:9f:03:00:f2: 38:87:2d:43:b1:5e:bb:17:b3:7e:ca:1a:03:09:f1:81:ae:be: 64:55:bc:92:3e:7f:83:f8:d3:5b:94:08:28:92:82:c4:e6:fd: 6c:e1:91:fa:45:5e:eb:67:10:8f:0f:e3:29:d3:52:de:70:00: 16:ce:6c:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLqrdQXmR3ZIwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDRmYjU1YjYtYzcyZC00YWQxLTliMmQtMjQ3YmQzNjM1NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9m/t2PvgEl16C8WAaBDWzhP6fQ0eXq/Pwos 4Ptv6wAPx5Vg2AzhUehhypchAKiWzDsbpE8KTfxE7/Zzj4tZnCM+LKy9KPjYNhvl f31gWbqT/TmroEaov7D8PU/sCjA0pZyhM+Oy1BfwAL7HWmcbIFfcaF7FxUf0Z8nz 9uiPepyW9y4JveyKc4UmwZ2yX6hyohZKJKqySghymQlrTjaNHv8kdglaF6dM5Tzk P6O77XYkvWUvj6rPvX0gy3OgXJb23uLANN6ShcQPvRINriCS+sPrr1Q19OCoHckk N6PaDdcH9cGWUJc7Tzjs/Dzw31P0FbLw8we7D7QkkbQ3SvAevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX62xPDiMKkZDPPpIlp2Yvxz4DrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2RhODI0ZWItYzQ4YS0z YjU4LThlMjUtYzFlNWYwNjRhMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM2qzMvr1ir7SywbWweX+H80xemUy5pLM6tYtDeez/Ww1Fwxpcg9hSv sqfifdrk+1Jj+IyJ7k03PCOTZ3FroD/bALWoYbNGbsMFGd7I9TFjXDnmx5vnnsAC dwIDZNo1atwQqT2iAvjaJUrQGbz8hlIf1TN8gLzpHv6TcPRDlIi1Ovu0zgvsgzLv 7vS9MSOIcE0lwRKtEaKW1TOCz2+bcH3A/ZNVSNXIWFkXmpQWLKG+rjthiSeJOgCK G7vm58A7jJr8nwMA8jiHLUOxXrsXs37KGgMJ8YGuvmRVvJI+f4P401uUCCiSgsTm /WzhkfpFXutnEI8P4ynTUt5wABbObD0= -----END CERTIFICATE-----Generated at Mon Apr 28 19:40:08 2025 by rpki-client