$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa File: 358ede57-f871-3c57-b2bb-84395dbee947.roa (raw, json) Hash identifier: cCKtft+DqgXWGpiaZeLQYyG00lK6kyvCepcR7GmqB2s= Subject key identifier: D9:DB:88:62:CF:CE:ED:6C:B4:25:F0:E4:92:D5:1C:A5:87:82:05:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DF674F2EB948D7015C73C300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa Signing time: Thu 13 Feb 2025 20:40:18 +0000 ROA not before: Thu 13 Feb 2025 20:40:18 +0000 ROA not after: Wed 14 May 2025 19:40:18 +0000 asID: 7029 IP address blocks: 173.187.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:67:4f:2e:b9:48:d7:01:5c:73:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 13 20:40:18 2025 GMT Not After : May 14 19:40:18 2025 GMT Subject: CN=6ce7f8f4-945a-480d-98d5-01b477d2d5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:92:79:ae:03:8f:ec:f6:91:20:24:cf:df:31: 58:3a:ac:60:6c:1f:dc:63:e1:42:87:50:b3:1e:53: b3:b8:11:a1:2b:6c:a4:ef:c1:88:61:eb:6d:1c:e6: 30:83:91:90:6d:0b:2f:17:e2:b4:41:4c:2f:7d:2c: 02:59:b8:7d:3f:17:ed:70:98:64:aa:0d:33:04:37: d7:c0:e0:a1:fd:59:10:9f:0c:5f:67:e6:6e:d1:f0: 94:d6:e4:82:38:0e:d2:94:06:32:55:67:f2:44:16: ff:c1:15:27:30:3b:ce:dc:09:79:23:a2:b1:ba:07: 36:80:4d:ab:62:c1:f7:79:00:74:f9:58:a9:09:74: 7d:ac:6c:09:10:b9:31:23:0e:09:d3:42:2c:dc:a2: 12:1d:82:cf:cf:6c:37:3c:8c:b5:32:27:2e:12:cf: 0c:7d:56:c2:54:bb:04:15:54:6a:19:60:e0:43:53: 31:58:b7:0e:53:79:e2:69:cd:72:4f:e8:9c:2c:51: 0c:9e:1b:fe:89:f3:88:ca:dc:82:85:e3:f3:c1:ff: 79:64:9a:ef:ff:8f:b8:ac:9f:e1:78:68:e6:ef:e3: fe:ce:d3:5c:c8:5c:7f:68:d5:d9:9b:6e:04:14:a6: 72:5c:2d:4b:88:5a:57:a6:51:e6:50:c3:a9:de:99: 22:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DB:88:62:CF:CE:ED:6C:B4:25:F0:E4:92:D5:1C:A5:87:82:05:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:09:c6:6c:02:58:22:53:85:9f:db:67:a2:4a:39:0e:09:47: 6b:6a:b6:24:c5:44:7c:f4:c1:cd:c0:11:64:60:1c:9c:32:c4: 81:ed:8f:8b:49:1d:f1:65:a9:65:45:1b:af:31:c2:cc:03:df: bd:71:60:c4:4a:99:05:8f:93:3f:2b:b2:83:00:7d:6f:9c:ac: c9:e6:e6:42:77:37:67:76:c5:27:0b:c1:26:dd:17:5c:fc:61: 7d:48:f4:73:f0:2c:83:90:e8:85:2e:33:ce:0d:ae:79:28:0c: 9c:45:7b:3a:ab:ef:0d:03:27:40:5f:33:a8:0c:4e:48:bc:fd: c4:7c:b7:75:c0:d4:ba:a0:fc:38:ed:b2:b0:9c:be:63:04:be: de:8f:10:d9:eb:63:f2:9b:c9:c3:ab:72:0e:a2:c3:e0:60:cf: 19:07:30:e6:b4:de:a5:fe:8a:5b:09:40:9f:f9:2a:4a:5e:e1: 39:1e:c8:d3:44:04:ee:5d:d5:72:0b:ef:ee:a9:1e:5f:63:79: 29:13:e6:a9:5d:6c:39:70:29:21:7d:5a:84:ec:79:b0:a0:f1: f6:ae:79:c2:43:e4:5e:16:53:d1:51:d0:97:0c:b1:fa:6c:f3: 39:92:a1:a1:81:99:6a:10:75:f5:29:33:78:63:56:66:d2:ff: ae:e0:3e:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfZ08uuUjXAVxzwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMzIwNDAxOFoXDTI1MDUxNDE5NDAxOFowLzEtMCsGA1UEAxMk NmNlN2Y4ZjQtOTQ1YS00ODBkLTk4ZDUtMDFiNDc3ZDJkNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpJ5rgOP7PaRICTP3zFYOqxgbB/cY+FCh1Cz HlOzuBGhK2yk78GIYettHOYwg5GQbQsvF+K0QUwvfSwCWbh9PxftcJhkqg0zBDfX wOCh/VkQnwxfZ+Zu0fCU1uSCOA7SlAYyVWfyRBb/wRUnMDvO3Al5I6Kxugc2gE2r YsH3eQB0+VipCXR9rGwJELkxIw4J00Is3KISHYLPz2w3PIy1MicuEs8MfVbCVLsE FVRqGWDgQ1MxWLcOU3niac1yT+icLFEMnhv+ifOIytyChePzwf95ZJrv/4+4rJ/h eGjm7+P+ztNcyFx/aNXZm24EFKZyXC1LiFpXplHmUMOp3pkiGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnbiGLPzu1stCXw5JLVHKWHggV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU4ZWRlNTctZjg3MS0z YzU3LWIyYmItODQzOTVkYmVlOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYJxmwCWCJThZ/bZ6JKOQ4JR2tqtiTFRHz0wc3AEWRgHJwyxIHtj4tJ HfFlqWVFG68xwswD371xYMRKmQWPkz8rsoMAfW+crMnm5kJ3N2d2xScLwSbdF1z8 YX1I9HPwLIOQ6IUuM84NrnkoDJxFezqr7w0DJ0BfM6gMTki8/cR8t3XA1Lqg/Djt srCcvmMEvt6PENnrY/KbycOrcg6iw+BgzxkHMOa03qX+ilsJQJ/5Kkpe4TkeyNNE BO5d1XIL7+6pHl9jeSkT5qldbDlwKSF9WoTsebCg8fauecJD5F4WU9FR0JcMsfps 8zmSoaGBmWoQdfUpM3hjVmbS/67gPpM= -----END CERTIFICATE-----Generated at Sun Apr 6 12:49:56 2025 by rpki-client