$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa File: 96d06c84-b559-3558-9143-54febd856d0b.roa (raw, json) Hash identifier: hsSpECrfM/IhxqesWlG2isb8h1kflj75lk9S5aDvFHs= Subject key identifier: 75:38:97:BF:CA:BC:E8:15:74:1F:61:83:20:8F:36:F8:01:CA:C0:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112D8F1C404406E2FA9540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 22944 IP address blocks: 173.191.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2d:8f:1c:40:44:06:e2:fa:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0a0ed734-b0f0-4c85-a3ec-50414aa455b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:9b:1b:ac:c1:84:3c:a8:01:34:5a:fd:ea: dd:1e:c8:a3:05:fa:02:4c:eb:d6:ac:97:ab:ca:99: a2:0a:12:01:b5:f0:a1:f1:83:ff:0c:2b:4e:35:0f: 29:da:96:f0:74:77:45:0a:9f:1b:3f:bb:c9:23:25: 16:ef:46:16:7f:d2:be:6c:f1:55:ca:5a:25:f8:50: d8:7a:7f:12:a3:ba:4d:5b:57:be:c2:79:07:de:34: d7:67:e4:4b:04:4c:f4:d5:91:d3:8c:cb:bb:62:fd: 9f:21:9d:f0:fd:c9:05:b5:44:4a:71:13:6c:3e:2b: 3e:74:e1:ac:20:ba:0e:4e:71:56:a4:39:09:f2:b8: ac:08:21:cc:07:f9:86:fc:5a:3b:83:7f:3c:fd:32: 85:66:4c:7a:60:c6:2f:1a:7a:1f:75:aa:e9:14:c2: ae:ee:dd:83:60:30:02:b5:97:ab:6e:31:76:81:ee: 73:bf:ed:10:5f:c2:17:2f:92:7f:e2:9d:65:c2:d0: 0f:19:10:58:3c:58:bc:b1:db:84:fa:00:5b:60:51: 82:45:b2:ed:a7:96:dd:db:20:76:8a:d1:96:21:e6: 57:25:eb:ce:3b:1a:8c:0c:1e:2b:6d:bc:0a:32:0a: ad:e4:25:d9:df:d1:ce:c0:52:85:25:3c:e9:5a:8e: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:38:97:BF:CA:BC:E8:15:74:1F:61:83:20:8F:36:F8:01:CA:C0:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96d06c84-b559-3558-9143-54febd856d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:31:5b:f4:43:77:c0:43:3d:16:d6:0d:7d:92:c5:04:01:65: 24:28:7b:08:ab:f1:1c:9e:0b:c8:11:b2:67:9d:3e:ee:e2:fc: 7c:e5:2a:46:ac:42:78:75:84:31:8c:43:2d:40:74:d1:10:2c: 10:7a:46:f8:a9:74:07:06:55:e9:e1:a4:9b:bf:35:e1:a7:eb: cf:a8:e3:03:9b:61:52:9e:2a:12:ea:0d:6c:b0:53:57:b1:82: 22:49:90:ab:65:13:ad:cb:6f:42:ce:db:8c:61:93:85:da:00: 39:cb:42:e9:8b:f5:d9:e9:00:3e:ae:e8:18:b3:88:d4:0c:89: c0:1c:42:47:0a:80:07:4f:09:ac:20:24:fe:d8:76:4b:5d:a1: 0a:7d:8f:be:34:a9:38:d6:35:d3:b9:6f:cb:d2:3f:8a:e6:67: ec:12:40:39:db:0e:f3:4d:2a:00:28:2d:e0:24:fa:7f:b8:17: 25:1b:d6:d9:26:0c:19:97:bf:aa:d2:d4:ee:2f:40:06:14:93: 4d:b5:53:22:6a:19:85:1b:7e:0e:76:6e:93:9e:a4:3c:fd:d8: ba:6b:be:78:96:09:33:67:5d:4e:60:98:de:bb:e4:45:cc:2c: a0:66:26:9d:83:29:c6:65:00:8e:d9:93:f2:f3:bd:f1:b0:4d: d6:04:64:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES2PHEBEBuL6lUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGEwZWQ3MzQtYjBmMC00Yzg1LWEzZWMtNTA0MTRhYTQ1NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WKbG6zBhDyoATRa/erdHsijBfoCTOvWrJer ypmiChIBtfCh8YP/DCtONQ8p2pbwdHdFCp8bP7vJIyUW70YWf9K+bPFVylol+FDY en8So7pNW1e+wnkH3jTXZ+RLBEz01ZHTjMu7Yv2fIZ3w/ckFtURKcRNsPis+dOGs ILoOTnFWpDkJ8risCCHMB/mG/Fo7g388/TKFZkx6YMYvGnofdarpFMKu7t2DYDAC tZerbjF2ge5zv+0QX8IXL5J/4p1lwtAPGRBYPFi8sduE+gBbYFGCRbLtp5bd2yB2 itGWIeZXJevOOxqMDB4rbbwKMgqt5CXZ39HOwFKFJTzpWo6UvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU4l7/KvOgVdB9hgyCPNvgBysD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTZkMDZjODQtYjU1OS0z NTU4LTkxNDMtNTRmZWJkODU2ZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0xW/RDd8BDPRbWDX2SxQQBZSQoewir8RyeC8gRsmedPu7i/HzlKkas Qnh1hDGMQy1AdNEQLBB6RvipdAcGVenhpJu/NeGn68+o4wObYVKeKhLqDWywU1ex giJJkKtlE63Lb0LO24xhk4XaADnLQumL9dnpAD6u6BiziNQMicAcQkcKgAdPCawg JP7YdktdoQp9j740qTjWNdO5b8vSP4rmZ+wSQDnbDvNNKgAoLeAk+n+4FyUb1tkm DBmXv6rS1O4vQAYUk021UyJqGYUbfg52bpOepDz92LprvniWCTNnXU5gmN675EXM LKBmJp2DKcZlAI7Zk/LzvfGwTdYEZFc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:28 2025 by rpki-client