$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa File: b38aba09-012f-3d09-87cf-93c71f23adb3.roa (raw, json) Hash identifier: FEpKc6uaHPgI44vzgJYRRZ5MDsd3NVkQkJhTu2rKRxs= Subject key identifier: 9D:2B:D4:0A:5B:E8:D9:8A:76:4A:59:58:CE:44:05:24:50:17:F1:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B999EE7A489700742700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 173.185.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b9:99:ee:7a:48:97:00:74:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=e5872162-542f-4405-a6d3-6b4e5bcfc880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3b:a3:7c:84:5e:1a:ac:6c:dd:ba:c0:8d:37: ab:5c:ed:c3:df:e7:58:b8:40:9c:a9:68:cf:17:c8: 04:7f:bf:9a:04:8f:d9:00:45:3a:4f:9b:1f:f1:16: 04:f4:29:16:28:e6:f7:19:08:be:e3:1e:b7:2a:d1: 4d:60:bc:94:14:56:a8:1e:e1:4f:c5:f1:9a:71:16: 4d:57:d5:15:38:be:97:26:1e:e3:43:cd:85:35:20: 3f:ed:2c:24:e0:a2:23:43:f0:4a:28:3d:6b:71:91: 4c:f9:6a:9b:f2:b2:5b:99:38:1a:8f:d6:5c:29:6a: 6c:40:17:7c:c9:df:fb:20:80:39:81:11:d8:29:42: b7:91:a5:60:a9:29:fc:79:41:67:78:35:bf:84:cd: b1:bf:e5:67:6b:e8:93:aa:88:de:11:26:76:3d:84: 32:27:3f:31:8b:a0:ab:63:ba:94:a1:4d:d2:aa:5e: 6c:a0:de:3d:23:04:2d:00:27:d6:44:81:26:5c:80: 1d:fb:24:26:72:c3:1c:c2:90:44:61:d2:3c:9b:0d: 93:ae:55:71:05:5b:2b:80:5e:69:44:61:59:3f:57: a3:49:fc:75:16:1e:0c:42:dc:25:fb:39:80:f7:a9: 43:c7:2e:29:09:ae:4d:b3:93:53:e5:d4:2a:61:e8: bc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2B:D4:0A:5B:E8:D9:8A:76:4A:59:58:CE:44:05:24:50:17:F1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:18:83:04:bc:19:af:cb:4e:fc:89:41:9b:89:1c:51:be:b2: 73:21:11:01:23:5e:1f:1b:5b:22:19:c5:06:ef:a4:30:02:73: a6:ea:bc:88:72:ed:3d:5e:e2:c8:17:1b:f2:5d:a9:b5:19:50: 1d:13:30:fa:7d:c6:58:f0:fb:16:8f:17:60:80:9e:3f:7e:c2: da:c6:08:c0:11:30:50:4e:a8:6c:01:e6:0a:05:d7:60:d4:6b: 57:e3:5a:3b:97:3a:d3:86:96:ab:54:96:22:2e:d3:40:27:ed: e0:71:81:0c:d6:87:41:b1:2e:e2:72:3c:7c:6c:07:91:17:58: 1a:44:84:a4:fe:27:9e:0c:ba:6a:7a:c9:16:a4:4d:50:bb:f0: 27:32:6b:40:6e:b5:83:3f:fb:ab:51:4c:b9:7e:cf:6a:b9:2f: da:42:7f:50:de:a1:74:74:a2:0f:ad:19:50:27:b6:9e:13:6d: 18:d7:4f:28:48:ee:af:05:f0:8d:8e:23:4d:47:4d:7a:2f:97: 61:22:3d:39:c5:d1:b8:d7:ff:cc:73:65:e1:6c:b6:fb:30:2c: 96:71:03:27:3e:89:17:18:77:b1:ad:ba:ed:3c:88:1e:a1:d5: 45:e7:c6:e9:ab:58:d8:6a:90:45:96:7a:28:d9:b8:85:58:5a: f9:41:db:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbmZ7npIlwB0JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZTU4NzIxNjItNTQyZi00NDA1LWE2ZDMtNmI0ZTViY2ZjODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjujfIReGqxs3brAjTerXO3D3+dYuECcqWjP F8gEf7+aBI/ZAEU6T5sf8RYE9CkWKOb3GQi+4x63KtFNYLyUFFaoHuFPxfGacRZN V9UVOL6XJh7jQ82FNSA/7Swk4KIjQ/BKKD1rcZFM+Wqb8rJbmTgaj9ZcKWpsQBd8 yd/7IIA5gRHYKUK3kaVgqSn8eUFneDW/hM2xv+Vna+iTqojeESZ2PYQyJz8xi6Cr Y7qUoU3Sql5soN49IwQtACfWRIEmXIAd+yQmcsMcwpBEYdI8mw2TrlVxBVsrgF5p RGFZP1ejSfx1Fh4MQtwl+zmA96lDxy4pCa5Ns5NT5dQqYei8nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0r1Apb6NmKdkpZWM5EBSRQF/HhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM4YWJhMDktMDEyZi0z ZDA5LTg3Y2YtOTNjNzFmMjNhZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUYgwS8Ga/LTvyJQZuJHFG+snMhEQEjXh8bWyIZxQbvpDACc6bqvIhy 7T1e4sgXG/JdqbUZUB0TMPp9xljw+xaPF2CAnj9+wtrGCMARMFBOqGwB5goF12DU a1fjWjuXOtOGlqtUliIu00An7eBxgQzWh0GxLuJyPHxsB5EXWBpEhKT+J54Mump6 yRakTVC78Ccya0ButYM/+6tRTLl+z2q5L9pCf1DeoXR0og+tGVAntp4TbRjXTyhI 7q8F8I2OI01HTXovl2EiPTnF0bjX/8xzZeFstvswLJZxAyc+iRcYd7Gtuu08iB6h 1UXnxumrWNhqkEWWeijZuIVYWvlB2zA= -----END CERTIFICATE-----Generated at Mon Apr 28 09:10:27 2025 by rpki-client