$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa File: 51103c09-b130-39f4-ab32-0e03b2d423bf.roa (raw, json) Hash identifier: qJA5eW0BOmCEC3ocU4kpN430euyaVuFeYEpw2noFCoU= Subject key identifier: 17:69:6C:D7:2C:42:39:0A:B4:BE:E4:F9:EC:BC:0D:B1:9F:12:44:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A155188ED268F9FFDDB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.191.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:15:51:88:ed:26:8f:9f:fd:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=6651dbd7-53c6-4515-94da-595272d8f1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ac:0c:fc:8d:0e:b0:16:03:73:14:df:67:02: f4:fa:4e:4a:c5:8a:77:9e:ae:25:33:1a:8c:08:76: 0e:32:a5:63:ed:8f:d6:4d:3d:8f:53:a7:77:c2:75: e5:ca:64:16:ac:ca:ed:10:4d:7d:4f:c0:77:5e:e9: d5:da:a8:93:23:c7:98:4d:b6:a3:d1:af:96:01:5a: f8:de:7b:08:10:63:17:dd:68:ac:d6:20:9a:6c:5c: cd:64:fc:44:63:ab:70:98:2a:54:10:42:3a:99:7a: 04:79:fe:6e:5a:d9:35:8f:cd:a7:be:b9:ae:02:3b: ba:ec:18:e3:25:5f:ae:89:f3:bd:9f:ac:b2:ca:96: 3c:36:d1:45:db:d7:97:0b:1e:eb:9b:ea:ba:93:5e: e1:95:b4:fe:be:78:cf:55:05:33:f9:69:97:fa:2a: c5:72:b3:45:cb:2b:3b:05:de:54:95:32:d0:94:d1: 95:94:c2:d5:62:13:b5:81:d2:36:d8:70:a9:8b:b7: a4:ab:72:c4:c2:24:8d:24:d2:2a:a0:41:df:4e:c9: 03:ed:a0:26:e9:86:b6:99:c3:e8:05:13:6e:12:8e: 22:a5:1f:26:6a:4a:5d:f4:fe:2d:b3:1a:54:19:89: 85:33:5f:7d:dd:1b:67:4d:98:b7:1d:f3:82:74:f4: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:69:6C:D7:2C:42:39:0A:B4:BE:E4:F9:EC:BC:0D:B1:9F:12:44:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/51103c09-b130-39f4-ab32-0e03b2d423bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:81:d0:c6:a2:cc:e9:f5:77:f1:69:a4:8f:f7:58:5b:8f:9d: 74:25:f5:3c:ee:92:07:4b:c4:ed:09:c2:3e:a4:f9:33:7a:b5: 9c:2f:81:9d:31:7d:88:c5:c7:b0:1a:a5:79:c5:3f:e0:2f:91: ed:47:a1:1f:7f:72:d8:94:a7:a5:ea:8a:ef:91:0d:9e:f4:d6: d6:40:30:60:2f:ea:84:22:62:ed:c1:0e:01:70:be:9e:cd:9e: 68:2d:91:bc:2d:94:41:d5:f0:e3:ca:74:ff:fa:43:57:25:8d: 6c:8e:a2:30:cd:09:95:17:e6:f6:52:cd:20:19:5d:bc:db:43: b7:08:b3:f4:e5:b9:df:cb:33:a8:38:a1:f6:ec:ad:32:81:fa: 96:56:c7:f6:76:57:17:89:1e:b8:e3:0a:df:f0:67:0a:5f:0a: d2:c4:45:fe:69:ba:8a:e8:bc:01:96:25:c9:3e:b1:b3:f8:da: e2:70:20:64:c1:e8:4b:8d:9f:3a:94:f8:14:c8:20:97:85:5a: ea:29:00:e3:93:0e:12:6a:d9:a1:61:a2:10:f8:54:1c:6c:22: cd:9c:bf:b9:1a:3f:9c:b1:cf:f8:52:03:cc:f2:de:ff:14:52: 1a:a7:ec:3a:0c:53:99:e6:2f:e5:b9:5d:9e:51:96:79:b7:fa: 22:0a:3c:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhVRiO0mj5/924AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NjY1MWRiZDctNTNjNi00NTE1LTk0ZGEtNTk1MjcyZDhmMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36wM/I0OsBYDcxTfZwL0+k5KxYp3nq4lMxqM CHYOMqVj7Y/WTT2PU6d3wnXlymQWrMrtEE19T8B3XunV2qiTI8eYTbaj0a+WAVr4 3nsIEGMX3Wis1iCabFzNZPxEY6twmCpUEEI6mXoEef5uWtk1j82nvrmuAju67Bjj JV+uifO9n6yyypY8NtFF29eXCx7rm+q6k17hlbT+vnjPVQUz+WmX+irFcrNFyys7 Bd5UlTLQlNGVlMLVYhO1gdI22HCpi7ekq3LEwiSNJNIqoEHfTskD7aAm6Ya2mcPo BRNuEo4ipR8makpd9P4tsxpUGYmFM1993RtnTZi3HfOCdPRlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdpbNcsQjkKtL7k+ey8DbGfEkQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTExMDNjMDktYjEzMC0z OWY0LWFiMzItMGUwM2IyZDQyM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSB0MaizOn1d/FppI/3WFuPnXQl9TzukgdLxO0Jwj6k+TN6tZwvgZ0x fYjFx7AapXnFP+Avke1HoR9/ctiUp6Xqiu+RDZ701tZAMGAv6oQiYu3BDgFwvp7N nmgtkbwtlEHV8OPKdP/6Q1cljWyOojDNCZUX5vZSzSAZXbzbQ7cIs/Tlud/LM6g4 ofbsrTKB+pZWx/Z2VxeJHrjjCt/wZwpfCtLERf5puorovAGWJck+sbP42uJwIGTB 6EuNnzqU+BTIIJeFWuopAOOTDhJq2aFhohD4VBxsIs2cv7kaP5yxz/hSA8zy3v8U Uhqn7DoMU5nmL+W5XZ5Rlnm3+iIKPE8= -----END CERTIFICATE-----Generated at Mon Apr 28 17:36:55 2025 by rpki-client