$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa File: 48a5ff49-8972-3952-98dc-c337903c0585.roa (raw, json) Hash identifier: 5U0BIxkuVPPonDpB4CXi+3w19X5UmN0Maw+O/JBgSX8= Subject key identifier: 10:68:14:33:06:23:2F:55:CF:63:65:FF:B7:D4:95:41:79:7E:C7:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F5A6928E6BC055123740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.191.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f5:a6:92:8e:6b:c0:55:12:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d6533769-156e-4c41-abc5-900eec2ce764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:a1:e2:cc:a5:47:35:ec:2d:98:c9:04:a7: e2:40:ec:c6:9c:95:e4:3c:f1:68:82:94:6e:60:9c: 4b:59:4f:63:3e:e6:b7:59:99:43:cf:30:bb:dd:22: ba:b8:38:c7:fe:70:53:b4:85:cc:20:ea:52:16:9d: 0b:f5:dc:8a:06:d9:74:ee:9b:41:ca:3f:cb:b0:04: f4:61:cc:d6:c0:09:77:fb:87:d8:26:ba:77:be:c4: 35:50:9a:2d:2c:73:9a:54:fe:8b:3d:f5:7a:da:77: 67:fb:a1:4c:7f:79:7b:99:1a:b6:00:75:51:4b:e7: 6c:f8:84:1e:7f:4b:60:8b:19:41:9e:c0:c1:24:bc: ca:fc:b0:7e:f3:f6:c5:94:8e:13:93:5e:6d:35:cf: 61:b1:e7:54:4f:df:0d:1a:ad:29:98:b6:1b:de:48: 67:e5:70:37:49:92:1d:fa:a9:d3:bd:a4:02:ae:9e: 30:1d:5c:d1:4a:c9:40:13:5f:46:dd:60:5d:45:4d: 53:49:9f:f8:4f:e6:f1:4e:c4:b8:09:2f:e3:66:03: 09:d4:46:a8:49:54:7e:4f:bd:12:bf:5f:85:83:39: a8:0b:d0:b4:a0:04:a7:9b:cb:a2:ef:af:17:02:aa: 4e:28:0b:14:7f:25:1f:f9:08:80:7e:b1:4d:54:4b: 4d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:14:33:06:23:2F:55:CF:63:65:FF:B7:D4:95:41:79:7E:C7:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48a5ff49-8972-3952-98dc-c337903c0585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:38:da:22:80:8d:8d:3a:81:94:18:37:6b:80:72:76:6b:e7: 4e:ab:a4:c4:3e:bc:f6:be:d8:3f:14:f5:f8:e9:bd:c4:a1:b8: f3:0e:08:7c:1e:86:00:06:63:94:ba:c0:a7:53:87:7b:d1:0c: e6:5d:c9:ed:4d:13:59:56:76:43:51:2d:00:0f:78:c5:fb:53: bd:2f:19:56:1e:d9:f2:d5:e7:6f:95:c4:2d:f9:52:35:30:6a: 9f:04:55:f2:db:ca:10:34:01:20:aa:9c:2e:dc:ac:4f:cc:b2: bd:68:b8:c1:59:f9:e1:5b:e9:88:51:3e:d6:10:77:ad:50:d0: 50:f3:08:ee:cc:51:dd:a0:17:fa:f5:6c:03:1f:a3:e4:7c:2e: 2e:a5:13:38:7b:7c:93:6a:89:18:0f:e3:d0:85:6b:3c:76:3c: ee:0a:e8:92:34:73:9e:15:09:e3:b0:a0:ce:be:90:1d:c2:b0: 35:2c:cd:b0:8d:61:71:61:67:5e:12:31:e4:bd:0a:65:c4:6a: 70:21:00:62:54:e8:56:fe:27:68:44:11:25:b2:92:ff:f8:b2: bb:40:55:88:86:dd:9f:b0:1d:c0:15:46:05:66:c0:7d:ec:e5: f6:0d:e1:c1:ca:17:27:1a:6f:61:5c:f9:ae:34:4f:b1:78:49: 30:f4:ca:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPWmko5rwFUSN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDY1MzM3NjktMTU2ZS00YzQxLWFiYzUtOTAwZWVjMmNlNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBmh4sylRzXsLZjJBKfiQOzGnJXkPPFogpRu YJxLWU9jPua3WZlDzzC73SK6uDjH/nBTtIXMIOpSFp0L9dyKBtl07ptByj/LsAT0 YczWwAl3+4fYJrp3vsQ1UJotLHOaVP6LPfV62ndn+6FMf3l7mRq2AHVRS+ds+IQe f0tgixlBnsDBJLzK/LB+8/bFlI4Tk15tNc9hsedUT98NGq0pmLYb3khn5XA3SZId +qnTvaQCrp4wHVzRSslAE19G3WBdRU1TSZ/4T+bxTsS4CS/jZgMJ1EaoSVR+T70S v1+FgzmoC9C0oASnm8ui768XAqpOKAsUfyUf+QiAfrFNVEtNRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBoFDMGIy9Vz2Nl/7fUlUF5fsenMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhhNWZmNDktODk3Mi0z OTUyLTk4ZGMtYzMzNzkwM2MwNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk42iKAjY06gZQYN2uAcnZr506rpMQ+vPa+2D8U9fjpvcShuPMOCHwe hgAGY5S6wKdTh3vRDOZdye1NE1lWdkNRLQAPeMX7U70vGVYe2fLV52+VxC35UjUw ap8EVfLbyhA0ASCqnC7crE/Msr1ouMFZ+eFb6YhRPtYQd61Q0FDzCO7MUd2gF/r1 bAMfo+R8Li6lEzh7fJNqiRgP49CFazx2PO4K6JI0c54VCeOwoM6+kB3CsDUszbCN YXFhZ14SMeS9CmXEanAhAGJU6Fb+J2hEESWykv/4srtAVYiG3Z+wHcAVRgVmwH3s 5fYN4cHKFycab2Fc+a40T7F4STD0yto= -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:46 2025 by rpki-client