$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: mRIg4kcBTih1kjdIp3pm1DkE6w0KYgIYDnogQVPJlnA= Subject key identifier: 73:5B:FA:34:F7:F2:B6:88:A0:AF:BD:BB:33:C2:43:9B:02:0C:17:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA9366298EAD52BC6A7700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Thu 20 Feb 2025 18:16:12 +0000 ROA not before: Thu 20 Feb 2025 18:16:12 +0000 ROA not after: Wed 21 May 2025 17:16:12 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:93:66:29:8e:ad:52:bc:6a:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:12 2025 GMT Not After : May 21 17:16:12 2025 GMT Subject: CN=c7a103ef-4b34-45d1-ae48-b7468bda6129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2e:27:bf:e8:35:eb:5d:1c:bd:a0:4a:93:9d: 4a:61:d1:77:7d:18:a5:a0:8d:38:8a:cc:57:74:fb: f2:23:68:68:4f:41:90:c5:18:79:2d:2e:a9:03:7e: 0d:66:15:f2:81:e4:07:34:0d:9c:a7:6e:94:d2:d1: 00:81:be:de:0c:a3:8f:f0:de:ee:34:1b:4c:a3:93: 5d:7e:d4:30:bf:91:8a:b1:2d:ac:e8:e6:8c:b5:6e: 84:f3:ab:b2:8f:5f:21:65:97:31:cd:de:3e:17:ce: 19:62:1c:4a:61:f8:3d:d6:a5:30:09:71:b4:0c:54: 9f:96:3f:e5:1a:d8:87:db:6b:8b:ee:34:8b:7f:ac: e4:b3:9d:b3:e5:4a:86:01:c8:8e:8f:e8:f9:33:f1: 84:6b:17:d2:a8:70:f9:9a:ff:eb:11:44:c1:eb:44: 5b:c5:0e:fc:e5:81:bd:c0:f4:02:04:bf:38:4e:87: e6:ac:b8:76:ec:c4:2c:7f:22:30:88:03:bc:41:a9: 74:75:0d:41:29:28:ac:df:59:f3:4a:17:8c:fb:f9: 82:ca:91:62:3e:d3:b7:c3:f2:63:fa:76:ad:bc:3b: 14:90:e1:4a:34:ff:55:1e:bf:0b:ac:01:52:56:fc: 21:f7:31:d2:ee:64:98:c9:d5:ce:2a:ba:7a:87:ea: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5B:FA:34:F7:F2:B6:88:A0:AF:BD:BB:33:C2:43:9B:02:0C:17:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:61:83:84:73:55:f2:04:b0:f7:86:7d:32:4d:b8:80:9e:c4: 54:b0:76:eb:7d:ac:9e:4d:16:6a:92:5d:49:63:43:b7:b2:57: 0d:97:80:d6:bf:a2:5a:5f:97:19:7c:66:18:e0:07:7c:a5:64: ce:e1:aa:c3:21:db:59:8d:69:51:7d:56:54:2c:41:b1:75:d1: f0:65:97:f1:40:02:db:c0:88:43:62:b4:c9:eb:66:90:5b:a6: cf:07:e7:6c:cb:70:63:bb:6c:70:50:53:25:c1:25:6a:f2:4d: 82:20:d9:0d:05:a8:48:2f:ff:e7:bc:66:3e:d9:c4:3a:84:42: 1c:7a:51:c0:8d:95:9e:3a:39:e3:23:af:c8:41:6f:c3:04:ba: 67:ee:da:57:69:61:3c:08:f7:64:10:bb:2f:a0:d0:d2:df:a6: 1e:ba:e1:4d:37:d1:5c:4d:bb:cf:71:86:09:fd:78:98:ef:c5: c8:a0:0d:eb:c0:b2:b3:35:1d:5b:92:a8:29:7e:44:47:52:cf: 0f:b1:14:96:e8:b9:74:06:03:f5:01:c4:b1:ce:53:c0:f1:a9: 0f:f8:91:03:d2:7f:db:8c:30:a9:cd:a9:b9:09:e0:34:05:99: f9:1d:64:33:d9:0c:cb:fe:6b:c4:a5:b7:9d:7c:c9:69:0a:a3: ce:d8:c1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqpNmKY6tUrxqdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYxMloXDTI1MDUyMTE3MTYxMlowLzEtMCsGA1UEAxMk YzdhMTAzZWYtNGIzNC00NWQxLWFlNDgtYjc0NjhiZGE2MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC4nv+g1610cvaBKk51KYdF3fRiloI04isxX dPvyI2hoT0GQxRh5LS6pA34NZhXygeQHNA2cp26U0tEAgb7eDKOP8N7uNBtMo5Nd ftQwv5GKsS2s6OaMtW6E86uyj18hZZcxzd4+F84ZYhxKYfg91qUwCXG0DFSflj/l GtiH22uL7jSLf6zks52z5UqGAciOj+j5M/GEaxfSqHD5mv/rEUTB60RbxQ785YG9 wPQCBL84TofmrLh27MQsfyIwiAO8Qal0dQ1BKSis31nzSheM+/mCypFiPtO3w/Jj +natvDsUkOFKNP9VHr8LrAFSVvwh9zHS7mSYydXOKrp6h+rGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNb+jT38raIoK+9uzPCQ5sCDBfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1hg4RzVfIEsPeGfTJNuICexFSwdut9rJ5NFmqSXUljQ7eyVw2XgNa/ olpflxl8ZhjgB3ylZM7hqsMh21mNaVF9VlQsQbF10fBll/FAAtvAiENitMnrZpBb ps8H52zLcGO7bHBQUyXBJWryTYIg2Q0FqEgv/+e8Zj7ZxDqEQhx6UcCNlZ46OeMj r8hBb8MEumfu2ldpYTwI92QQuy+g0NLfph664U030VxNu89xhgn9eJjvxcigDevA srM1HVuSqCl+REdSzw+xFJbouXQGA/UBxLHOU8DxqQ/4kQPSf9uMMKnNqbkJ4DQF mfkdZDPZDMv+a8Slt518yWkKo87YwQ0= -----END CERTIFICATE-----Generated at Fri May 2 06:38:38 2025 by rpki-client