$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa File: 173f706b-4656-32a0-91a1-5138081207a9.roa (raw, json) Hash identifier: HUwC5pbfr5sxFqMYhGso4WjpbjQnJNmadq3hpwiv9FQ= Subject key identifier: 97:0F:9E:0C:C3:A0:2E:C7:0D:61:A7:20:89:F4:AB:B9:14:C8:1D:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7163FD05D0A05A45279080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.189.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:fd:05:d0:a0:5a:45:27:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=35e7730b-babd-45c3-873b-6779c82a0ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:d9:d8:c0:73:a8:ab:a1:b5:64:d6:c4:77: 88:85:0d:c6:34:0a:14:c4:0e:cf:0c:c7:39:80:54: d3:88:85:54:29:b0:48:cc:77:54:27:0c:70:a7:0e: e5:00:71:39:f0:85:ac:f2:23:1a:40:5d:e4:9c:a1: 42:00:42:d1:70:11:73:de:76:a1:42:cf:44:19:7d: 78:2e:50:f3:e0:de:00:8f:ec:8b:d2:53:56:79:38: b1:7d:a0:0f:aa:c8:30:55:e5:3c:ba:be:23:aa:0a: 84:50:3e:48:e5:d4:77:a3:95:de:8e:2a:1f:19:80: 3e:57:91:8d:22:24:b6:e9:96:af:89:f9:18:82:69: e1:b5:8a:96:09:3a:b0:2b:07:4d:56:b5:3d:2d:19: 9e:51:58:91:87:c4:b2:56:48:31:85:d4:d0:fb:a7: c7:f5:98:f5:98:5f:71:06:87:2d:4b:ff:1e:7e:39: 4d:e2:c3:9a:e0:2f:48:fc:ed:80:d7:b5:a3:b9:0b: ec:02:2c:25:95:fc:dc:6c:6d:71:4a:3f:59:bf:3e: a5:26:5d:0b:b6:5f:2d:36:b4:19:2f:98:e9:af:26: 2a:a3:3b:e7:1b:21:b0:5e:07:7d:2f:52:a9:89:fe: 1e:f6:4f:f4:9b:f9:fb:90:f3:c4:de:44:09:b7:00: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:9E:0C:C3:A0:2E:C7:0D:61:A7:20:89:F4:AB:B9:14:C8:1D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/173f706b-4656-32a0-91a1-5138081207a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:7e:6f:21:dd:83:5a:2e:0c:7b:b4:d5:88:57:7e:85:bc: df:31:8a:bf:a3:de:56:41:36:9c:05:0b:68:b6:05:16:e5:b5: c8:eb:bc:48:dd:3b:d9:02:f9:92:f3:e1:97:23:cc:99:a9:01: c3:13:8c:e2:40:c5:3b:59:8b:b1:1c:b9:a7:64:55:43:ae:92: 46:3b:89:bd:40:c2:35:7b:65:76:6b:59:09:02:60:01:4c:85: ff:cf:83:c6:8d:45:96:2b:05:52:0c:02:fc:b5:d9:9d:56:d6: 3c:fd:2c:cc:25:9f:f2:cb:fb:c9:04:8f:e2:22:bb:8b:c9:89: f4:bc:4b:49:b4:c3:da:23:06:34:b7:0e:7a:59:53:3e:f8:c8: 56:0a:9e:a9:7b:ad:dc:a3:5f:ff:a8:b6:03:ab:3b:3e:de:29: 09:de:6c:f2:af:74:8c:b6:02:6c:fb:13:58:d5:ac:5a:8c:1d: e3:f8:4e:c1:04:7d:db:46:f3:ff:da:ce:9c:c6:a9:b7:c7:03: 29:aa:a1:8f:12:35:e1:c2:84:5e:c5:8d:13:a6:be:0d:91:78: 2a:40:50:85:69:68:3a:83:7d:5f:91:1b:34:c8:e1:23:bb:f0: d6:b3:ea:22:ba:39:41:14:e5:0b:a9:b2:bf:71:23:ea:c9:28: 39:ed:fa:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWP9BdCgWkUnkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzVlNzczMGItYmFiZC00NWMzLTg3M2ItNjc3OWM4MmEwZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqITZ2MBzqKuhtWTWxHeIhQ3GNAoUxA7PDMc5 gFTTiIVUKbBIzHdUJwxwpw7lAHE58IWs8iMaQF3knKFCAELRcBFz3nahQs9EGX14 LlDz4N4Aj+yL0lNWeTixfaAPqsgwVeU8ur4jqgqEUD5I5dR3o5XejiofGYA+V5GN IiS26ZavifkYgmnhtYqWCTqwKwdNVrU9LRmeUViRh8SyVkgxhdTQ+6fH9Zj1mF9x BoctS/8efjlN4sOa4C9I/O2A17WjuQvsAiwllfzcbG1xSj9Zvz6lJl0Ltl8tNrQZ L5jpryYqozvnGyGwXgd9L1Kpif4e9k/0m/n7kPPE3kQJtwDPvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcPngzDoC7HDWGnIIn0q7kUyB0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTczZjcwNmItNDY1Ni0z MmEwLTkxYTEtNTEzODA4MTIwN2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ5fm8h3YNaLgx7tNWIV36FvN8xir+j3lZBNpwFC2i2BRbltcjrvEjd O9kC+ZLz4ZcjzJmpAcMTjOJAxTtZi7EcuadkVUOukkY7ib1AwjV7ZXZrWQkCYAFM hf/Pg8aNRZYrBVIMAvy12Z1W1jz9LMwln/LL+8kEj+Iiu4vJifS8S0m0w9ojBjS3 DnpZUz74yFYKnql7rdyjX/+otgOrOz7eKQnebPKvdIy2Amz7E1jVrFqMHeP4TsEE fdtG8//azpzGqbfHAymqoY8SNeHChF7FjROmvg2ReCpAUIVpaDqDfV+RGzTI4SO7 8Naz6iK6OUEU5Qupsr9xI+rJKDnt+oA= -----END CERTIFICATE-----Generated at Sun Apr 6 07:22:23 2025 by rpki-client