$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa File: 45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa (raw, json) Hash identifier: Uq8UALNteh2kCpcKLhY1bIPTdmBaE63QapP9pJVOvKM= Subject key identifier: 4F:A8:53:02:4E:58:44:6B:35:5E:07:E0:9C:1C:C2:E0:42:F2:E9:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F2DD54115929A5B3DEAF640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa Signing time: Tue 21 Jan 2025 20:32:46 +0000 ROA not before: Tue 21 Jan 2025 20:32:46 +0000 ROA not after: Mon 21 Apr 2025 19:32:46 +0000 asID: 7029 IP address blocks: 173.189.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:2d:d5:41:15:92:9a:5b:3d:ea:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:32:46 2025 GMT Not After : Apr 21 19:32:46 2025 GMT Subject: CN=bca55e0c-22aa-4eb7-99fe-1a0782cdd681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fd:86:f1:67:3b:7a:24:b5:c3:4a:53:73:6f: 03:75:d1:df:09:4f:7b:59:23:f3:c0:14:26:71:86: 9c:00:7d:3b:3d:aa:69:3d:3c:b3:93:ee:b6:8b:ff: ff:8e:e1:30:63:e6:fc:a6:4a:b4:ee:a7:35:6b:32: 08:c1:4a:85:bf:a2:ab:3c:4a:33:75:89:97:72:5e: 26:4b:02:cb:f3:36:a1:bc:99:84:52:78:0f:37:48: ce:ab:be:2a:d9:5f:26:a1:d5:ef:13:7d:0f:ac:6c: e4:b2:35:bf:c4:78:d5:d3:f6:69:a8:47:e6:d6:21: 5d:df:53:73:f6:5e:9d:89:f1:d3:46:b4:cb:cb:8f: f8:b9:59:64:a0:dd:4f:9d:ec:ca:f2:39:cc:7d:c9: 40:0e:5a:58:17:69:3c:86:53:71:d7:33:d5:89:1b: cf:5a:b5:f0:72:8b:d1:55:ed:d8:5a:6c:85:58:95: ce:40:12:bb:a0:82:51:ab:b7:3c:66:5d:c3:92:5d: 78:60:7b:24:bf:bc:7d:ce:06:37:44:4f:79:fe:c1: ce:4c:ca:a2:37:1b:82:d7:c1:66:b6:20:30:e6:d2: a2:01:a1:1e:6f:59:e1:24:b1:4e:86:9c:59:85:28: 52:1d:db:11:b0:bc:2c:4a:a8:85:c2:06:1b:ec:5b: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A8:53:02:4E:58:44:6B:35:5E:07:E0:9C:1C:C2:E0:42:F2:E9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45e47974-9c03-36fb-bcf3-a5315f8f62b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:87:e6:d3:f2:12:aa:aa:fd:6a:e3:ad:05:73:13:43:00:c6: 43:02:15:fe:3d:09:52:ee:b5:16:fb:af:cb:1c:da:b0:c5:53: e8:3b:c5:bd:7f:79:2f:a3:f7:91:1b:11:40:35:94:cb:28:35: e6:5e:84:6c:7d:5d:11:cd:5c:38:4e:20:69:37:59:19:ef:15: 9c:91:31:46:a2:28:73:19:d2:10:c3:94:84:9b:7c:a8:0c:f6: 90:a4:d8:64:eb:87:b9:b9:2e:7d:30:54:51:80:40:10:c0:ff: ef:14:3c:5c:8e:e9:f2:1f:e4:ce:32:04:c3:9a:03:47:28:9f: 3a:35:26:5d:05:b8:94:cd:0e:77:26:64:7a:c3:5e:68:ba:c6: a6:7e:b7:5c:e8:5e:14:35:53:56:36:6a:d5:16:4b:4f:4a:01: f1:23:fd:ed:6e:35:91:14:28:b9:02:12:f2:b1:2e:88:9a:0e: af:11:ee:66:09:c6:f5:a3:39:04:e2:55:d6:df:3e:43:73:85: e6:f5:8a:80:1e:45:74:32:5b:39:f5:ec:8d:fa:07:3b:a8:0b: 9c:26:a6:5f:d9:a9:6b:fc:75:fa:18:12:42:28:ea:08:d8:04: 89:dc:48:80:2e:ba:b4:53:1d:c8:24:9f:6a:ea:ca:24:d1:dc: 66:93:55:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifLdVBFZKaWz3q9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzI0NloXDTI1MDQyMTE5MzI0NlowLzEtMCsGA1UEAxMk YmNhNTVlMGMtMjJhYS00ZWI3LTk5ZmUtMWEwNzgyY2RkNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP2G8Wc7eiS1w0pTc28DddHfCU97WSPzwBQm cYacAH07PappPTyzk+62i///juEwY+b8pkq07qc1azIIwUqFv6KrPEozdYmXcl4m SwLL8zahvJmEUngPN0jOq74q2V8modXvE30PrGzksjW/xHjV0/ZpqEfm1iFd31Nz 9l6difHTRrTLy4/4uVlkoN1PnezK8jnMfclADlpYF2k8hlNx1zPViRvPWrXwcovR Ve3YWmyFWJXOQBK7oIJRq7c8Zl3Dkl14YHskv7x9zgY3RE95/sHOTMqiNxuC18Fm tiAw5tKiAaEeb1nhJLFOhpxZhShSHdsRsLwsSqiFwgYb7FvsfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+oUwJOWERrNV4H4JwcwuBC8umuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDVlNDc5NzQtOWMwMy0z NmZiLWJjZjMtYTUzMTVmOGY2MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb16MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmH5tPyEqqq/WrjrQVzE0MAxkMCFf49CVLutRb7r8sc2rDFU+g7xb1/ eS+j95EbEUA1lMsoNeZehGx9XRHNXDhOIGk3WRnvFZyRMUaiKHMZ0hDDlISbfKgM 9pCk2GTrh7m5Ln0wVFGAQBDA/+8UPFyO6fIf5M4yBMOaA0conzo1Jl0FuJTNDncm ZHrDXmi6xqZ+t1zoXhQ1U1Y2atUWS09KAfEj/e1uNZEUKLkCEvKxLoiaDq8R7mYJ xvWjOQTiVdbfPkNzheb1ioAeRXQyWzn17I36BzuoC5wmpl/ZqWv8dfoYEkIo6gjY BIncSIAuurRTHcgkn2rqyiTR3GaTVZM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:09:24 2025 by rpki-client