$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08012231-1352-363f-a7bd-d8ea97b882ac.roa File: 08012231-1352-363f-a7bd-d8ea97b882ac.roa (raw, json) Hash identifier: LFw0zYg6x/y3jLEvy9x1O2p8eI1n/NY5DtxpZ67jJ1M= Subject key identifier: BA:17:5A:62:97:DF:E1:59:D1:3E:39:30:27:B4:89:D6:E4:73:2D:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93944D777127151C8EFA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08012231-1352-363f-a7bd-d8ea97b882ac.roa Signing time: Thu 06 Feb 2025 18:13:20 +0000 ROA not before: Thu 06 Feb 2025 18:13:20 +0000 ROA not after: Wed 07 May 2025 17:13:20 +0000 asID: 7029 IP address blocks: 173.184.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:94:4d:77:71:27:15:1c:8e:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:20 2025 GMT Not After : May 7 17:13:20 2025 GMT Subject: CN=0376b6fd-2871-463c-84d6-6b331cccd1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:b8:ad:25:c4:05:a2:32:e4:e5:4b:7f:53: 91:51:23:8f:49:1a:b0:c1:34:8b:e3:c8:3d:16:3d: c1:b6:88:7f:6f:87:aa:12:5a:fc:fd:cf:80:31:e0: 6e:e2:b0:cf:23:aa:18:bd:87:80:3d:10:9f:a1:82: 87:6e:17:3b:6e:88:eb:09:d4:aa:43:20:6e:23:5e: 00:d4:96:c3:06:55:0c:04:62:02:a7:44:96:ae:04: b2:d7:d6:27:4f:92:fc:9f:36:1e:0c:49:88:a6:63: d3:38:e8:b6:92:40:c3:79:3e:0f:3a:48:6c:c6:b0: 2f:4f:b9:d3:c3:8f:eb:19:97:4d:1f:29:b8:95:66: 1f:a1:70:e3:eb:4b:7f:d5:9c:b7:30:3e:6b:7b:4f: e3:29:1f:98:63:d6:e2:ca:97:f8:b4:9c:70:db:59: 8c:41:ff:6c:8c:0d:b0:ad:41:f2:19:03:1a:9e:eb: 5d:b5:7f:83:b4:f5:ee:2a:3c:0e:96:2f:3f:8a:32: 53:61:cb:0a:d9:78:96:24:f6:b1:9e:a7:33:61:c7: 93:90:5a:21:25:32:2f:9e:6e:30:d2:94:5b:a2:54: 71:d6:36:d9:43:8a:6b:06:cb:cf:53:52:ca:b0:24: f3:93:1d:96:cb:f1:f1:ca:4e:f0:d3:ec:03:e0:97: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:17:5A:62:97:DF:E1:59:D1:3E:39:30:27:B4:89:D6:E4:73:2D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08012231-1352-363f-a7bd-d8ea97b882ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2b:f7:e1:61:c2:cf:6d:dc:f1:8b:95:42:52:e0:35:13:db: f9:4c:9a:32:5e:2d:5f:85:a6:6a:a5:5e:ae:f8:fb:23:6d:e9: bd:fa:53:81:7c:b6:ce:31:20:6c:41:ae:2e:16:92:92:ed:b5: fb:4f:26:14:c7:8d:e7:4b:32:d5:cb:84:4e:62:d2:ea:a8:8c: 2f:4d:43:00:85:af:ee:5a:9e:74:e8:a3:15:18:25:0b:fd:c2: 87:66:77:34:9c:e2:fc:cd:4c:f3:39:88:c5:a1:3b:d5:54:51: 7f:ba:64:93:0a:4c:1f:5b:74:dd:66:be:a9:14:fb:53:0f:20: 0e:20:8d:9e:ea:c2:3d:4d:5f:c4:67:00:dc:60:92:7c:ce:3f: 61:35:43:08:a8:85:a3:9e:54:22:6d:6c:8e:f3:75:01:41:0d: 50:ad:a4:36:ee:43:7a:f6:ba:61:e6:c6:22:f3:68:e9:45:31: 49:03:38:58:7d:96:30:0a:d9:63:c6:1c:f2:3c:42:59:e4:4c: ad:3c:f4:7e:22:d3:41:a4:90:6b:ee:f2:9e:46:d5:e2:d1:f4: 22:2c:9c:64:21:4f:f7:18:3f:19:6f:0b:ba:aa:d1:44:ab:b7: a3:6a:5d:6a:e2:97:0b:5b:f9:7c:d6:c6:73:24:0c:e8:29:68: ef:5b:ab:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk5RNd3EnFRyO+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTMyMFoXDTI1MDUwNzE3MTMyMFowLzEtMCsGA1UEAxMk MDM3NmI2ZmQtMjg3MS00NjNjLTg0ZDYtNmIzMzFjY2NkMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOa4rSXEBaIy5OVLf1ORUSOPSRqwwTSL48g9 Fj3Btoh/b4eqElr8/c+AMeBu4rDPI6oYvYeAPRCfoYKHbhc7bojrCdSqQyBuI14A 1JbDBlUMBGICp0SWrgSy19YnT5L8nzYeDEmIpmPTOOi2kkDDeT4POkhsxrAvT7nT w4/rGZdNHym4lWYfoXDj60t/1Zy3MD5re0/jKR+YY9biypf4tJxw21mMQf9sjA2w rUHyGQManutdtX+DtPXuKjwOli8/ijJTYcsK2XiWJPaxnqczYceTkFohJTIvnm4w 0pRbolRx1jbZQ4prBsvPU1LKsCTzkx2Wy/Hxyk7w0+wD4JcGlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoXWmKX3+FZ0T45MCe0idbkcy3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDgwMTIyMzEtMTM1Mi0z NjNmLWE3YmQtZDhlYTk3Yjg4MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwr9+Fhws9t3PGLlUJS4DUT2/lMmjJeLV+FpmqlXq74+yNt6b36U4F8 ts4xIGxBri4WkpLttftPJhTHjedLMtXLhE5i0uqojC9NQwCFr+5annTooxUYJQv9 wodmdzSc4vzNTPM5iMWhO9VUUX+6ZJMKTB9bdN1mvqkU+1MPIA4gjZ7qwj1NX8Rn ANxgknzOP2E1QwiohaOeVCJtbI7zdQFBDVCtpDbuQ3r2umHmxiLzaOlFMUkDOFh9 ljAK2WPGHPI8QlnkTK089H4i00GkkGvu8p5G1eLR9CIsnGQhT/cYPxlvC7qq0USr t6NqXWrilwtb+XzWxnMkDOgpaO9bq5g= -----END CERTIFICATE-----Generated at Sat Apr 5 21:44:39 2025 by rpki-client