$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json) Hash identifier: 9mS6t5Kgs/79em19BEhgERMAhtp9hETKsPGFQkCiXus= Subject key identifier: EA:F9:9D:06:71:61:A8:EA:36:01:7B:D7:B5:40:02:4F:06:3D:C1:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A13F09C90AC636926AA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:13:f0:9c:90:ac:63:69:26:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=8afafbec-f263-47ed-9c76-8a09f79e61b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:e5:b0:9a:03:18:e8:ce:7a:cb:4a:f7:61: 68:57:ce:32:a9:cc:7e:4c:2f:10:2a:83:3a:54:6e: b5:ae:15:b7:19:40:d3:b8:e8:1e:fc:26:c9:0c:26: d5:b9:64:a9:25:fe:da:e6:6a:0e:b5:a0:02:c4:29: 54:d7:19:af:8a:ae:a3:cc:5d:76:64:fd:57:86:2e: ee:c8:91:63:ac:1a:3c:e0:52:cf:63:21:1b:c1:b5: ec:a7:bc:4b:47:d4:b0:72:25:6f:50:21:98:df:08: d9:bf:94:70:43:1f:a5:54:e9:3a:d7:51:fc:2d:2d: c1:2f:d2:38:88:8f:ff:12:c5:7b:fa:19:18:0d:50: 6e:84:bf:82:57:1e:0a:8c:6b:24:e1:84:22:26:a6: e2:7c:1c:60:0d:e9:5e:3e:e2:15:ea:9d:ba:19:bc: cd:4c:09:61:44:23:a4:b4:2e:83:98:40:ba:57:7b: cd:5e:58:70:8e:43:83:9d:e1:76:e1:d6:c3:ef:86: 5c:14:ef:2d:9f:55:93:3a:23:30:79:a4:46:02:8b: 90:1b:bb:0e:51:16:82:9b:f3:43:7a:ea:3f:d9:1a: bb:96:6b:bb:81:b7:42:c0:62:6d:5d:02:fd:1c:fc: 04:9b:a8:4f:e2:d5:8b:c5:99:ed:84:35:15:36:f0: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:9D:06:71:61:A8:EA:36:01:7B:D7:B5:40:02:4F:06:3D:C1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:fa:95:17:14:b1:3b:56:c7:c2:dd:b1:1b:b5:c5:91:28: c7:61:19:ce:ab:93:44:4a:aa:be:5d:0b:78:5b:6a:44:02:3c: c2:49:fe:a9:91:1f:5b:5f:21:77:a6:62:66:1b:8b:9d:61:30: cd:37:04:60:c0:31:fc:23:d6:88:bc:45:06:fb:f8:41:ee:45: 6a:45:89:68:4f:4e:47:77:52:a3:12:13:cd:0b:4d:e0:2d:b3: c1:ff:b6:e1:53:1f:34:16:14:e8:f2:1f:63:50:ae:c8:71:ec: 3e:56:ef:95:14:d5:64:1a:32:bf:a1:49:e9:9a:c8:37:0b:b1: 1a:9d:cd:17:51:72:28:14:d3:c6:d2:aa:6f:ff:42:87:ff:c5: 90:8f:92:86:84:8f:48:f3:6a:63:e8:ea:95:67:f4:4a:47:0e: bf:3f:49:48:37:28:ea:93:ac:1e:a1:a6:18:ad:80:ff:5c:31: 79:ed:49:80:ad:e5:31:ce:b3:2a:34:1d:78:25:df:42:a4:31: 69:2b:42:45:34:86:5b:80:8f:f3:b3:c0:4c:72:19:95:5b:41: f2:62:fc:ea:4b:d1:1b:3a:06:59:94:61:80:3e:62:20:b7:1d: 47:81:2c:41:05:39:74:7c:64:04:15:30:42:cc:9d:f5:82:98: 35:9a:f2:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhPwnJCsY2kmqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OGFmYWZiZWMtZjI2My00N2VkLTljNzYtOGEwOWY3OWU2MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDTlsJoDGOjOestK92FoV84yqcx+TC8QKoM6 VG61rhW3GUDTuOge/CbJDCbVuWSpJf7a5moOtaACxClU1xmviq6jzF12ZP1Xhi7u yJFjrBo84FLPYyEbwbXsp7xLR9SwciVvUCGY3wjZv5RwQx+lVOk611H8LS3BL9I4 iI//EsV7+hkYDVBuhL+CVx4KjGsk4YQiJqbifBxgDelePuIV6p26GbzNTAlhRCOk tC6DmEC6V3vNXlhwjkODneF24dbD74ZcFO8tn1WTOiMweaRGAouQG7sOURaCm/ND euo/2Rq7lmu7gbdCwGJtXQL9HPwEm6hP4tWLxZnthDUVNvC8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr5nQZxYajqNgF717VAAk8GPcHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUzNTYzNjctNjI1Zi0z NWYxLWEzNzgtODZjYmI4OWMyMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAW+pUXFLE7VsfC3bEbtcWRKMdhGc6rk0RKqr5dC3hbakQCPMJJ/qmR H1tfIXemYmYbi51hMM03BGDAMfwj1oi8RQb7+EHuRWpFiWhPTkd3UqMSE80LTeAt s8H/tuFTHzQWFOjyH2NQrshx7D5W75UU1WQaMr+hSemayDcLsRqdzRdRcigU08bS qm//Qof/xZCPkoaEj0jzamPo6pVn9EpHDr8/SUg3KOqTrB6hphitgP9cMXntSYCt 5THOsyo0HXgl30KkMWkrQkU0hluAj/OzwExyGZVbQfJi/OpL0Rs6BlmUYYA+YiC3 HUeBLEEFOXR8ZAQVMELMnfWCmDWa8tI= -----END CERTIFICATE-----Generated at Mon Apr 28 23:57:26 2025 by rpki-client