$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa File: 37011cf7-93bf-3f24-a66a-48d124c2519a.roa (raw, json) Hash identifier: qqQ1TdCQJwaDkj6kerFGPCUmINambSjgnmq/j4V+Rt4= Subject key identifier: 12:DD:28:76:55:6E:65:6F:4C:0B:A0:B7:07:72:27:45:A1:E3:3D:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C22378D32359A775A8A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.187.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:22:37:8d:32:35:9a:77:5a:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=23902053-7fc5-4adc-90ec-c9d41244fb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:1e:6b:25:09:e5:fb:96:51:c1:17:f3:07: dd:93:03:ba:77:fb:92:33:58:3c:4f:1c:33:8e:75: 18:24:33:22:8b:cf:a2:e3:84:bd:5b:47:e5:32:15: f0:1f:56:96:2e:e4:67:97:5d:3b:51:58:ba:63:5f: 57:1b:b4:d6:a0:0a:7a:96:bc:0c:fa:42:44:9e:7a: 58:13:95:88:e0:cd:c7:3b:13:ed:83:fa:bb:50:2c: 2a:16:6a:1d:a1:c0:3f:54:a1:aa:09:95:83:1e:35: 7e:43:49:f6:63:9e:ff:13:ed:0d:83:1d:d0:f0:13: c0:06:05:27:5f:80:c9:0e:2d:f4:4f:22:ce:89:0c: 49:dc:1e:63:f7:a3:da:b0:65:8d:f9:0e:b4:c0:15: 4f:16:b7:cf:3c:19:b6:60:60:fe:04:24:58:9c:3c: e4:b5:a8:1e:17:1a:05:9c:c2:ca:51:fc:2d:31:af: 51:bb:62:cb:69:cc:c9:ea:15:cb:94:78:a0:cf:2f: 90:7f:31:e8:31:d0:75:d8:d5:21:a2:73:cb:ea:36: 92:19:b3:82:ba:12:fa:58:5a:b7:96:e6:23:9d:b0: a2:91:68:fc:95:06:33:d1:65:9f:9d:6b:c6:70:d4: d2:de:67:1f:72:bf:73:46:71:94:8d:91:00:4a:c1: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DD:28:76:55:6E:65:6F:4C:0B:A0:B7:07:72:27:45:A1:E3:3D:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37011cf7-93bf-3f24-a66a-48d124c2519a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:4c:9c:48:48:d3:65:23:b1:7f:05:4e:fc:cf:3d:19:7b: 0e:af:43:c3:fb:39:b2:6f:41:b0:5b:07:37:33:cb:16:68:25: 59:af:b2:b7:a4:95:6b:f2:1b:03:01:a4:15:7e:0a:50:86:76: ec:57:77:bd:d4:d0:91:32:87:2c:0e:56:3b:74:c4:24:4c:a2: 45:d0:22:46:83:1d:a9:1b:d1:ed:84:25:8a:0c:4c:6e:e6:15: 1a:ba:6d:80:23:1b:01:d1:fc:46:f4:59:fc:0d:b3:41:a3:93: 2e:dd:d3:a6:57:92:b5:a7:12:d3:65:7a:dc:49:79:79:42:14: 89:b5:1a:77:3d:89:8e:2e:0a:3a:60:b5:4e:4b:c5:ad:25:a3: 2c:d0:8c:43:2a:86:5a:c6:09:6a:f0:e6:f2:e3:00:f7:bb:c6: b2:c0:7a:90:a8:e6:d2:85:ed:07:b5:af:a4:a0:59:59:5d:96: 05:bd:30:85:a3:98:9f:fc:95:3c:59:71:19:5c:9a:38:ab:aa: c8:d3:68:ca:50:c6:4e:9c:0d:83:ed:fa:43:cc:39:b4:63:47: b0:d4:f8:38:09:a9:6b:9b:34:65:1a:e8:4a:9f:25:83:3a:5c: f5:07:c2:e4:14:3b:ff:57:f0:af:7e:e4:10:4e:19:ad:18:ea: e2:a2:47:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCI3jTI1mndaigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MjM5MDIwNTMtN2ZjNS00YWRjLTkwZWMtYzlkNDEyNDRmYjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaseayUJ5fuWUcEX8wfdkwO6d/uSM1g8Txwz jnUYJDMii8+i44S9W0flMhXwH1aWLuRnl107UVi6Y19XG7TWoAp6lrwM+kJEnnpY E5WI4M3HOxPtg/q7UCwqFmodocA/VKGqCZWDHjV+Q0n2Y57/E+0Ngx3Q8BPABgUn X4DJDi30TyLOiQxJ3B5j96PasGWN+Q60wBVPFrfPPBm2YGD+BCRYnDzktageFxoF nMLKUfwtMa9Ru2LLaczJ6hXLlHigzy+QfzHoMdB12NUhonPL6jaSGbOCuhL6WFq3 luYjnbCikWj8lQYz0WWfnWvGcNTS3mcfcr9zRnGUjZEASsFlWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLdKHZVbmVvTAugtwdyJ0Wh4z2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwMTFjZjctOTNiZi0z ZjI0LWE2NmEtNDhkMTI0YzI1MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtjTJxISNNlI7F/BU78zz0Zew6vQ8P7ObJvQbBbBzczyxZoJVmvsrek lWvyGwMBpBV+ClCGduxXd73U0JEyhywOVjt0xCRMokXQIkaDHakb0e2EJYoMTG7m FRq6bYAjGwHR/Eb0WfwNs0Gjky7d06ZXkrWnEtNletxJeXlCFIm1Gnc9iY4uCjpg tU5Lxa0loyzQjEMqhlrGCWrw5vLjAPe7xrLAepCo5tKF7Qe1r6SgWVldlgW9MIWj mJ/8lTxZcRlcmjirqsjTaMpQxk6cDYPt+kPMObRjR7DU+DgJqWubNGUa6EqfJYM6 XPUHwuQUO/9X8K9+5BBOGa0Y6uKiR5g= -----END CERTIFICATE-----Generated at Sat Apr 5 18:19:33 2025 by rpki-client