$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa File: 0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa (raw, json) Hash identifier: Lzn90258kVgN7eQHutkjtOz5XhkEnl2SDbMKeP0pfTc= Subject key identifier: FF:A6:78:F2:41:D1:B0:CB:69:03:5B:83:2C:23:12:36:D0:4D:A8:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBDA10BA3BA3C24515E900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.188.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:da:10:ba:3b:a3:c2:45:15:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=1bab84bd-b904-41a1-aa25-f84e996caefb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9b:ee:c1:91:12:81:5f:1d:29:42:37:10:e7: 92:d6:42:96:b8:90:ae:48:62:62:74:10:84:a6:b2: d7:fd:0a:30:06:52:e0:9f:28:f5:8c:9e:7c:ea:86: 77:b2:81:56:95:89:fd:bc:cf:c4:d0:06:f2:a1:a6: 6d:c5:36:be:ea:ec:cc:6d:4a:82:ca:10:67:1e:73: 48:f9:a1:91:88:3d:27:c0:14:a3:bb:2e:3a:8a:a5: 7f:d6:37:bd:19:74:dd:41:b3:7f:74:68:ea:55:64: 19:af:62:6c:3d:3b:2c:b0:23:88:c5:09:91:87:0d: 09:87:c5:b6:d5:be:5c:4a:cd:fd:29:3e:f8:31:ab: fe:79:a3:07:8d:98:6a:7e:df:ae:83:7d:57:0d:f0: cd:5f:1a:44:00:4a:4f:bd:8b:21:9e:31:79:6d:7e: 57:23:2e:9a:d4:7b:49:b5:3a:e5:37:34:43:74:9b: 9f:11:d9:e4:3e:e0:cf:1b:3c:33:b9:10:b3:07:de: 41:e3:20:b6:93:18:52:21:97:f3:9a:0a:d1:dd:9d: 17:f3:53:a6:ad:e7:62:9b:9c:f6:77:d4:ed:fb:ee: 05:c3:ff:bb:fe:64:a1:1a:6e:60:5b:48:54:08:eb: c2:65:61:2f:e4:ab:56:6e:6c:de:d8:8d:6b:38:6d: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A6:78:F2:41:D1:B0:CB:69:03:5B:83:2C:23:12:36:D0:4D:A8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ce:47:49:f4:77:25:f2:de:4f:57:d7:8c:a8:58:6f:04:38: d9:7e:07:48:32:80:78:23:98:54:22:98:d0:55:76:81:72:6a: 42:f1:9f:6b:ba:f9:bb:44:e4:ea:04:44:67:0a:8d:55:53:94: 67:85:68:1b:f9:c2:50:a0:fe:78:06:df:2c:d5:b9:26:82:45: 6b:73:78:0e:c6:99:b0:a0:b5:3a:90:de:e3:55:8d:f9:8c:a5: 75:80:6d:60:be:08:28:93:a6:f0:3b:0e:cd:a8:35:de:cc:8d: 11:52:d7:81:ac:aa:62:26:fb:ac:e3:87:91:16:3c:b1:64:98: 1d:29:8d:c7:38:83:be:07:83:db:28:c6:ae:e4:ab:3d:db:04: fc:00:38:00:94:55:69:9f:e6:5b:ff:be:1b:58:51:71:36:36: c3:2d:d6:d8:ab:f4:d1:5d:65:2c:bf:3b:1d:eb:24:06:40:dc: e2:88:00:86:a1:58:dd:4b:bf:04:8c:9b:45:85:1c:1c:49:98: 0c:eb:01:7f:d4:18:7e:cd:6e:b1:ac:5b:89:44:19:79:7d:9c: f1:85:be:26:a4:41:0b:94:72:c0:33:11:d2:75:a0:37:f8:6c: 29:67:94:39:1e:ad:9a:9b:12:0c:ee:a9:dc:2e:78:8c:23:9d: d3:7e:e7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69oQujujwkUV6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MWJhYjg0YmQtYjkwNC00MWExLWFhMjUtZjg0ZTk5NmNhZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpvuwZESgV8dKUI3EOeS1kKWuJCuSGJidBCE prLX/QowBlLgnyj1jJ586oZ3soFWlYn9vM/E0AbyoaZtxTa+6uzMbUqCyhBnHnNI +aGRiD0nwBSjuy46iqV/1je9GXTdQbN/dGjqVWQZr2JsPTsssCOIxQmRhw0Jh8W2 1b5cSs39KT74Mav+eaMHjZhqft+ug31XDfDNXxpEAEpPvYshnjF5bX5XIy6a1HtJ tTrlNzRDdJufEdnkPuDPGzwzuRCzB95B4yC2kxhSIZfzmgrR3Z0X81Omredim5z2 d9Tt++4Fw/+7/mShGm5gW0hUCOvCZWEv5KtWbmze2I1rOG3inQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+mePJB0bDLaQNbgywjEjbQTahbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDk3NjcwMGQtOWRiZi0z YzA1LTkyYmEtYWQ3YjQwYmM5ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDOR0n0dyXy3k9X14yoWG8EONl+B0gygHgjmFQimNBVdoFyakLxn2u6 +btE5OoERGcKjVVTlGeFaBv5wlCg/ngG3yzVuSaCRWtzeA7GmbCgtTqQ3uNVjfmM pXWAbWC+CCiTpvA7Ds2oNd7MjRFS14GsqmIm+6zjh5EWPLFkmB0pjcc4g74Hg9so xq7kqz3bBPwAOACUVWmf5lv/vhtYUXE2NsMt1tir9NFdZSy/Ox3rJAZA3OKIAIah WN1LvwSMm0WFHBxJmAzrAX/UGH7NbrGsW4lEGXl9nPGFviakQQuUcsAzEdJ1oDf4 bClnlDkerZqbEgzuqdwueIwjndN+52s= -----END CERTIFICATE-----Generated at Sat Apr 5 22:32:50 2025 by rpki-client