$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa File: 1359896e-50e4-34a1-9043-424e4c0414c3.roa (raw, json) Hash identifier: X72y9IPc3M4KysAS+4UjnoNLc4nTyCnhEanW/UgdU64= Subject key identifier: 46:DC:68:40:A1:1C:CC:F8:D2:2A:34:65:9F:55:DD:E1:F8:ED:37:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA8436BD2B0ECAC497E380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa Signing time: Thu 20 Feb 2025 18:16:05 +0000 ROA not before: Thu 20 Feb 2025 18:16:05 +0000 ROA not after: Wed 21 May 2025 17:16:05 +0000 asID: 7029 IP address blocks: 173.187.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:84:36:bd:2b:0e:ca:c4:97:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:05 2025 GMT Not After : May 21 17:16:05 2025 GMT Subject: CN=fff94e07-d5dc-415c-93bd-665ac6bd5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:91:6c:1c:7d:01:01:0e:25:07:70:af:32:88: 99:e6:04:3a:12:46:db:00:1f:05:ed:53:b2:66:cd: 5e:82:3b:1a:da:29:7d:58:c3:d9:11:65:c7:98:4b: 09:40:57:44:c6:31:ec:a4:82:36:39:d2:6d:5e:15: b6:5d:71:40:63:34:db:5f:1a:30:57:ae:a5:71:04: f4:2b:2c:63:9c:84:fc:b2:4f:ec:0e:f7:f7:21:d2: 72:c1:ca:5b:fa:a9:5b:d8:62:96:39:f4:f9:09:3a: 75:90:06:b6:e1:67:29:08:1f:a6:6a:6d:b0:1a:78: 99:34:7f:57:61:46:91:0a:b2:9c:3c:33:89:26:c7: d0:79:2d:56:c0:61:89:72:e2:b4:bc:9f:f8:12:1d: fd:28:f2:43:41:cb:3a:89:10:3d:54:c2:1b:f4:ba: fa:c3:87:24:ea:82:20:60:5a:43:43:22:1a:1e:eb: 05:10:6c:2e:b0:d5:52:ab:96:84:23:ae:58:48:5d: 6a:72:a8:56:4d:63:f3:dc:b8:35:9d:0a:68:8f:92: 3b:65:bd:a2:55:fb:e9:0f:76:a9:b6:4a:8f:38:09: 30:ab:e0:38:74:d0:b6:c5:e6:4c:49:4e:e2:a0:96: 47:0e:04:1a:f1:9b:44:7d:27:97:2b:75:6c:a7:f4: 7f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:68:40:A1:1C:CC:F8:D2:2A:34:65:9F:55:DD:E1:F8:ED:37:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1359896e-50e4-34a1-9043-424e4c0414c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3c:16:52:db:87:a3:1b:76:a9:1c:70:27:cc:a1:5e:9d:79: eb:17:a6:f4:5a:81:f2:be:fb:9b:10:8a:e1:34:e3:c3:46:af: bf:28:98:66:24:ce:d8:65:fe:6c:5e:98:39:de:cb:22:32:1d: 05:e7:09:a7:e3:c7:c0:18:fa:a7:80:a7:e9:c8:29:8b:88:f5: c5:a5:be:a2:46:45:04:60:1e:89:9b:bb:a2:e9:b4:19:37:7d: ff:93:61:2f:af:83:56:49:1e:43:37:bc:22:05:4b:39:c1:72: e8:3b:26:78:71:e6:6f:88:10:79:ce:f0:01:f5:3e:7e:ec:5a: 55:cd:4a:66:b1:3b:ac:ce:58:71:de:15:4d:9d:2a:37:d3:ed: cc:65:c2:0a:23:d8:11:33:82:ec:43:3b:74:47:15:c1:c3:9a: 35:cf:88:3d:af:1c:b7:28:ec:4e:93:e7:7c:b8:43:b3:5c:25: df:96:2c:e3:22:a1:1b:81:0a:6b:d3:0c:70:23:95:1c:40:83: ba:06:18:cf:c0:f2:00:df:93:78:27:c1:01:3f:9f:74:73:b5: ba:c8:7e:aa:d4:ca:48:77:13:6a:61:c7:b1:16:6d:46:78:bf: 22:21:b9:8c:d9:f5:25:99:a2:9d:2f:e6:85:52:ce:ba:d1:57: 81:07:b0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqoQ2vSsOysSX44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYwNVoXDTI1MDUyMTE3MTYwNVowLzEtMCsGA1UEAxMk ZmZmOTRlMDctZDVkYy00MTVjLTkzYmQtNjY1YWM2YmQ1YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZFsHH0BAQ4lB3CvMoiZ5gQ6EkbbAB8F7VOy Zs1egjsa2il9WMPZEWXHmEsJQFdExjHspII2OdJtXhW2XXFAYzTbXxowV66lcQT0 KyxjnIT8sk/sDvf3IdJywcpb+qlb2GKWOfT5CTp1kAa24WcpCB+mam2wGniZNH9X YUaRCrKcPDOJJsfQeS1WwGGJcuK0vJ/4Eh39KPJDQcs6iRA9VMIb9Lr6w4ck6oIg YFpDQyIaHusFEGwusNVSq5aEI65YSF1qcqhWTWPz3Lg1nQpoj5I7Zb2iVfvpD3ap tkqPOAkwq+A4dNC2xeZMSU7ioJZHDgQa8ZtEfSeXK3Vsp/R/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbcaEChHMz40io0ZZ9V3eH47Tc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTM1OTg5NmUtNTBlNC0z NGExLTkwNDMtNDI0ZTRjMDQxNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI8FlLbh6MbdqkccCfMoV6deesXpvRagfK++5sQiuE048NGr78omGYk zthl/mxemDneyyIyHQXnCafjx8AY+qeAp+nIKYuI9cWlvqJGRQRgHombu6LptBk3 ff+TYS+vg1ZJHkM3vCIFSznBcug7Jnhx5m+IEHnO8AH1Pn7sWlXNSmaxO6zOWHHe FU2dKjfT7cxlwgoj2BEzguxDO3RHFcHDmjXPiD2vHLco7E6T53y4Q7NcJd+WLOMi oRuBCmvTDHAjlRxAg7oGGM/A8gDfk3gnwQE/n3RztbrIfqrUykh3E2phx7EWbUZ4 vyIhuYzZ9SWZop0v5oVSzrrRV4EHsNg= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:21 2025 by rpki-client