$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa File: 3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa (raw, json) Hash identifier: LZyp90KfIcqE1lykdaYPIpK4t3qBWZ1Hz6ilY2MEGUA= Subject key identifier: 51:0F:3B:95:0E:42:05:68:02:5B:E5:7D:7C:2F:CC:71:F3:CE:3C:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBC30623757C8248B29280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.188.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c3:06:23:75:7c:82:48:b2:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=18776c99-e589-49c6-91f2-d1d664914cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:e8:bf:ee:e4:0a:56:9b:29:45:d3:a1:9c: 77:dd:da:d0:64:c6:25:d2:9e:f8:02:d7:aa:a9:8b: ae:e7:39:34:b0:35:f5:bb:e2:ee:7f:14:4f:2e:5f: fe:9f:cb:8c:90:d2:f5:47:ae:4d:44:00:e0:43:a3: 51:e1:65:ec:0c:70:4d:a9:b1:06:1d:40:1d:f3:f8: c8:05:6b:41:af:51:8e:a1:28:89:39:e9:bd:34:22: 1b:78:f3:d1:ba:ff:7d:d3:8f:e0:23:21:df:8b:f5: 29:c2:de:d0:b4:e8:fa:ce:f1:24:44:99:db:d9:31: 9c:5d:69:b6:4f:03:15:b2:8f:cb:22:64:fb:6e:f9: c3:3e:3a:33:c9:70:d7:62:35:fd:ef:08:e3:43:f0: 1c:ea:86:29:be:7d:81:d8:63:61:c4:5e:53:54:c7: 08:72:87:06:0c:ef:92:b2:cd:f5:f5:e1:b8:6e:7a: 15:53:0f:d9:31:e8:ca:a7:83:8a:d8:4a:0a:c2:4c: 8e:6f:66:cb:8f:2b:d9:6e:16:6b:19:45:f7:b4:b4: 22:06:bc:8d:81:29:b6:f9:38:26:ff:27:8d:a6:dd: de:fa:ff:74:43:3a:13:6d:a8:33:6d:6a:1f:59:81: c9:ea:e6:80:e7:84:c8:fe:5a:c9:5c:af:04:59:f1: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0F:3B:95:0E:42:05:68:02:5B:E5:7D:7C:2F:CC:71:F3:CE:3C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3da824eb-c48a-3b58-8e25-c1e5f064a27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4e:46:96:9b:ac:5d:4c:7c:3c:3c:e8:db:bd:e1:db:65:81: 7f:5c:53:52:b0:da:4a:b8:a9:53:bf:25:60:dc:dd:b5:43:b9: aa:cb:f9:43:cd:9d:66:a7:d8:9f:3b:25:72:52:72:d9:14:db: 78:74:72:8e:9a:34:d4:1c:b4:79:2f:2f:ca:3f:03:d9:c9:cf: 62:b1:b7:50:4f:d9:a6:37:4b:ab:78:2c:6b:af:50:5b:ed:32: 73:1f:a0:f3:93:7f:29:d0:cc:4e:0d:ae:b1:b9:98:a8:f5:b4: af:2a:35:11:99:d1:6b:8a:72:cb:13:05:90:cc:d2:45:34:42: bf:07:de:56:6d:22:ee:c1:59:fb:5c:99:7f:e5:62:3f:6c:dd: c5:c5:87:d2:d0:56:ba:c3:d9:96:da:df:77:cb:af:49:b6:c0: 49:bd:19:11:73:a2:c8:22:7f:6e:96:5d:c1:f5:04:58:e8:dc: 39:02:c0:f0:d9:09:6e:65:39:6c:bd:0d:5b:ca:9e:10:f4:71: d6:ac:f2:1e:a6:60:92:45:e7:d9:f9:ad:83:f9:e3:bd:5c:e5: 5b:d6:0e:79:bd:f0:db:c6:17:1b:4a:7b:95:f9:f3:fb:4d:80: 84:2a:97:6c:d4:3a:bd:76:64:3a:6c:de:11:03:1a:e4:38:b0: f3:53:a2:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68MGI3V8gkiykoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MTg3NzZjOTktZTU4OS00OWM2LTkxZjItZDFkNjY0OTE0Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5nov+7kClabKUXToZx33drQZMYl0p74Ateq qYuu5zk0sDX1u+LufxRPLl/+n8uMkNL1R65NRADgQ6NR4WXsDHBNqbEGHUAd8/jI BWtBr1GOoSiJOem9NCIbePPRuv9904/gIyHfi/Upwt7QtOj6zvEkRJnb2TGcXWm2 TwMVso/LImT7bvnDPjozyXDXYjX97wjjQ/Ac6oYpvn2B2GNhxF5TVMcIcocGDO+S ss319eG4bnoVUw/ZMejKp4OK2EoKwkyOb2bLjyvZbhZrGUX3tLQiBryNgSm2+Tgm /yeNpt3e+v90QzoTbagzbWofWYHJ6uaA54TI/lrJXK8EWfFPXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEPO5UOQgVoAlvlfXwvzHHzzjxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2RhODI0ZWItYzQ4YS0z YjU4LThlMjUtYzFlNWYwNjRhMjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdORpabrF1MfDw86Nu94dtlgX9cU1Kw2kq4qVO/JWDc3bVDuarL+UPN nWan2J87JXJSctkU23h0co6aNNQctHkvL8o/A9nJz2Kxt1BP2aY3S6t4LGuvUFvt MnMfoPOTfynQzE4NrrG5mKj1tK8qNRGZ0WuKcssTBZDM0kU0Qr8H3lZtIu7BWftc mX/lYj9s3cXFh9LQVrrD2Zba33fLr0m2wEm9GRFzosgif26WXcH1BFjo3DkCwPDZ CW5lOWy9DVvKnhD0cdas8h6mYJJF59n5rYP5471c5VvWDnm98NvGFxtKe5X58/tN gIQql2zUOr12ZDps3hEDGuQ4sPNTovE= -----END CERTIFICATE-----Generated at Sun Apr 6 00:06:37 2025 by rpki-client