$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa File: 2179d489-f203-397d-af9f-bd189ff4ec92.roa (raw, json) Hash identifier: XE3JT9fwzZUbBzzso5lPmyEc7gEbf6w1HlFazCWPiOw= Subject key identifier: 8A:FC:0E:02:62:72:F0:56:0E:BE:0A:6B:BB:DB:8F:87:50:B3:06:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBC317819D11B1C3EF2D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.188.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c3:17:81:9d:11:b1:c3:ef:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=f9affc44-ff73-4e8d-93c2-66ee9888293f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:2f:6f:8a:90:88:1c:fc:4e:46:63:ec:3b: 70:42:8a:e1:29:73:c2:62:d8:68:48:2d:4f:c1:2b: 8e:2c:2c:8e:3c:85:0d:57:a6:19:43:96:b1:dc:45: bd:08:7b:76:44:7c:07:04:62:9b:48:d1:04:c8:e1: e5:a2:bd:b2:b0:88:60:db:b4:5f:be:9b:6b:15:e1: da:23:f2:88:93:2f:4b:8b:da:9d:fc:b2:05:ab:31: ae:58:a2:08:82:20:a4:c3:ec:d9:e3:65:5b:3c:74: b4:cb:7f:71:71:e6:af:5b:1b:b2:fa:d8:00:a6:3b: 27:fe:46:70:1a:0a:86:f8:a6:12:60:16:70:c6:11: a4:9a:b9:b2:3a:d9:3b:d4:22:10:fa:37:59:08:1e: 0f:23:00:bb:65:a4:8d:63:3a:92:6e:66:d5:69:a5: 09:c5:16:61:2c:bf:14:90:40:92:fc:95:00:0a:ea: 6c:43:0e:95:89:df:bf:ee:0c:84:f6:ca:c5:77:45: 91:8e:97:75:b7:b2:88:8e:ee:44:ad:44:a8:58:b1: bf:32:22:b9:55:a9:3e:a9:a8:e7:72:d7:78:c9:fe: ba:da:e8:b3:52:e7:cf:16:6d:0d:24:8c:52:c1:e9: 57:24:14:99:d7:ed:24:c4:8d:a9:9f:96:97:3c:18: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FC:0E:02:62:72:F0:56:0E:BE:0A:6B:BB:DB:8F:87:50:B3:06:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2179d489-f203-397d-af9f-bd189ff4ec92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9c:d0:85:7a:2e:93:8b:a9:c1:bd:96:fc:3d:4d:2f:3f:25: c7:4d:92:6d:ed:8f:8b:f3:6b:20:59:6f:5d:ae:49:44:8a:02: aa:5f:46:1f:dd:9e:14:c6:94:d2:15:f1:5f:1b:b7:1e:d2:d2: b0:71:b8:de:11:d5:ab:92:20:f4:81:35:4f:cb:c1:84:ba:a4: 1d:c4:12:3c:c7:30:fd:ef:a0:5d:fa:59:ab:ad:22:ab:68:5c: 69:59:b9:62:09:bf:62:4b:5b:e2:2a:38:84:35:0f:c5:d3:6f: 9a:14:77:a3:d1:4c:49:65:82:ae:46:78:ab:ca:b8:b9:dc:ab: c6:d3:4f:4b:f8:77:51:02:f0:ef:d6:35:1a:7f:42:f7:f3:39: bb:0e:cc:0b:84:60:bc:35:1c:17:c4:2e:e2:94:24:58:a3:72: 7a:c6:24:3d:3f:12:5e:e5:10:1a:a5:0d:c5:7c:15:52:6e:62: 6d:92:02:d6:da:92:7b:40:ec:d4:8b:4c:4e:88:40:1e:c1:bc: cb:20:25:0b:36:21:cc:5a:c2:f0:a9:c1:a1:4f:b5:21:40:5a: 47:26:4e:e6:3d:5a:d7:b4:6d:0c:8c:58:eb:3e:9d:c5:ac:22: 6a:57:4d:37:6c:b4:b6:74:c0:10:f8:bc:87:4f:cb:58:05:cb: e5:da:e0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68MXgZ0RscPvLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZjlhZmZjNDQtZmY3My00ZThkLTkzYzItNjZlZTk4ODgyOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn48vb4qQiBz8TkZj7DtwQorhKXPCYthoSC1P wSuOLCyOPIUNV6YZQ5ax3EW9CHt2RHwHBGKbSNEEyOHlor2ysIhg27RfvptrFeHa I/KIky9Li9qd/LIFqzGuWKIIgiCkw+zZ42VbPHS0y39xceavWxuy+tgApjsn/kZw GgqG+KYSYBZwxhGkmrmyOtk71CIQ+jdZCB4PIwC7ZaSNYzqSbmbVaaUJxRZhLL8U kECS/JUACupsQw6Vid+/7gyE9srFd0WRjpd1t7KIju5ErUSoWLG/MiK5Vak+qajn ctd4yf662uizUufPFm0NJIxSwelXJBSZ1+0kxI2pn5aXPBhM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIr8DgJicvBWDr4Ka7vbj4dQswZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE3OWQ0ODktZjIwMy0z OTdkLWFmOWYtYmQxODlmZjRlYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGc0IV6LpOLqcG9lvw9TS8/JcdNkm3tj4vzayBZb12uSUSKAqpfRh/d nhTGlNIV8V8btx7S0rBxuN4R1auSIPSBNU/LwYS6pB3EEjzHMP3voF36WautIqto XGlZuWIJv2JLW+IqOIQ1D8XTb5oUd6PRTEllgq5GeKvKuLncq8bTT0v4d1EC8O/W NRp/QvfzObsOzAuEYLw1HBfELuKUJFijcnrGJD0/El7lEBqlDcV8FVJuYm2SAtba kntA7NSLTE6IQB7BvMsgJQs2IcxawvCpwaFPtSFAWkcmTuY9Wte0bQyMWOs+ncWs ImpXTTdstLZ0wBD4vIdPy1gFy+Xa4KU= -----END CERTIFICATE-----Generated at Sun Apr 6 03:47:30 2025 by rpki-client