$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa File: 45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa (raw, json) Hash identifier: +KHWTihb3z7k7+lXEyjIW7lbS76OGxxIrH8wfk4aZ34= Subject key identifier: D3:E9:EC:33:E7:55:71:87:5A:A9:B3:32:7B:66:42:C1:8D:3D:AC:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099C98106F386671A1EC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 173.189.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9c:98:10:6f:38:66:71:a1:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=8b589ef4-222d-4dd0-b4aa-4f0cb5f11584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:47:fc:63:e4:65:37:14:d9:f5:6c:e6:1a: 06:30:33:de:ef:7b:ae:6c:06:1c:02:7d:77:99:da: ee:fe:0f:01:fa:7e:ef:ae:76:33:61:dc:9e:f0:ea: 4e:cf:cb:bb:93:0a:74:94:6a:e5:54:05:a4:72:ad: 50:39:92:c3:52:2f:e6:05:e1:71:66:1b:c4:74:cb: f8:d1:18:15:5e:bf:3c:ca:7e:b6:8e:bc:1b:d0:15: 54:d9:e7:16:2e:b8:d1:ef:86:91:f5:79:13:98:30: e0:5a:3a:98:65:46:c2:86:68:92:35:87:e5:cb:9f: 0b:15:8b:01:86:65:14:9c:4e:ad:82:9e:67:b5:70: c7:79:7c:a0:a0:cf:84:61:ba:69:91:a1:a6:a8:4b: d6:02:1c:1d:94:58:d3:c5:ca:a6:df:91:2f:48:b1: ba:89:45:5f:ea:d4:e0:46:97:60:c5:da:08:96:85: dc:8a:ba:e3:f2:bc:ee:3d:24:e3:76:56:fe:0e:d0: df:62:2b:9e:4d:e3:9c:83:5b:a6:bb:9b:cc:43:55: d1:b3:7c:4c:1c:35:b6:d3:14:68:df:07:9b:ff:63: 75:df:13:91:66:7a:ff:c3:7a:f5:c1:9b:17:80:f0: 4b:52:2f:2e:76:ab:06:93:e6:d2:af:bb:cd:9d:d5: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:EC:33:E7:55:71:87:5A:A9:B3:32:7B:66:42:C1:8D:3D:AC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c0:14:c3:8b:e9:95:09:36:83:64:a6:ae:67:fd:d1:a2:f7: 7c:49:10:2c:d7:14:7e:cc:8a:a7:84:56:69:16:89:3f:e9:7b: 78:4e:45:38:4c:eb:eb:90:9e:3e:86:c7:66:bb:34:3a:be:07: 75:9a:7d:a9:53:0f:f5:79:85:47:22:c6:92:7a:e4:25:1e:12: 40:0b:06:3b:d7:60:a0:72:2b:72:c8:1f:b2:9e:d3:8f:9d:8e: 6a:b0:d8:bb:74:f5:28:41:19:3c:7e:64:af:af:cb:05:b0:f2: 88:1d:3e:82:ae:cd:4e:16:30:0b:c5:15:d0:48:e9:78:de:b7: bf:2b:bf:96:de:77:b4:8e:b9:80:d0:ed:de:a7:bf:75:69:fb: 9d:fb:ac:65:1f:d0:17:f5:5f:a8:4c:fa:07:c0:fa:0d:83:e6: 3d:60:73:48:40:da:f2:c5:a4:db:b6:e2:b0:0a:00:ce:ef:d0: f4:7e:b9:88:ca:c3:1a:47:b5:1e:d1:35:0a:d9:55:3d:25:4a: 49:6a:10:0b:c7:96:54:24:da:cf:fa:07:be:6a:db:1d:3f:c6: 7b:35:ea:91:89:77:8e:e6:84:9e:bf:54:e3:2b:cc:b9:5e:0f: 9e:73:9b:ed:be:ca:8c:95:d9:f1:ed:63:c4:d3:84:7f:aa:2a: 7c:27:9e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZyYEG84ZnGh7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk OGI1ODllZjQtMjIyZC00ZGQwLWI0YWEtNGYwY2I1ZjExNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fFH/GPkZTcU2fVs5hoGMDPe73uubAYcAn13 mdru/g8B+n7vrnYzYdye8OpOz8u7kwp0lGrlVAWkcq1QOZLDUi/mBeFxZhvEdMv4 0RgVXr88yn62jrwb0BVU2ecWLrjR74aR9XkTmDDgWjqYZUbChmiSNYfly58LFYsB hmUUnE6tgp5ntXDHeXygoM+EYbppkaGmqEvWAhwdlFjTxcqm35EvSLG6iUVf6tTg RpdgxdoIloXcirrj8rzuPSTjdlb+DtDfYiueTeOcg1umu5vMQ1XRs3xMHDW20xRo 3web/2N13xORZnr/w3r1wZsXgPBLUi8udqsGk+bSr7vNndWfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPp7DPnVXGHWqmzMntmQsGNPayoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlNDc5NzQtOWMwMy0z NmZiLWJjZjMtYTUzMTVmOGY2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/AFMOL6ZUJNoNkpq5n/dGi93xJECzXFH7MiqeEVmkWiT/pe3hORThM 6+uQnj6Gx2a7NDq+B3WafalTD/V5hUcixpJ65CUeEkALBjvXYKByK3LIH7Ke04+d jmqw2Lt09ShBGTx+ZK+vywWw8ogdPoKuzU4WMAvFFdBI6Xjet78rv5bed7SOuYDQ 7d6nv3Vp+537rGUf0Bf1X6hM+gfA+g2D5j1gc0hA2vLFpNu24rAKAM7v0PR+uYjK wxpHtR7RNQrZVT0lSklqEAvHllQk2s/6B75q2x0/xns16pGJd47mhJ6/VOMrzLle D55zm+2+yoyV2fHtY8TThH+qKnwnniU= -----END CERTIFICATE-----Generated at Sun Apr 27 22:38:50 2025 by rpki-client