$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa File: 5a96bc15-8dac-3441-a332-06b6d61ab16d.roa (raw, json) Hash identifier: S5h0v/Q3t1EVeQ2yjX1GQ8YbUw9Kx1gAKtFVhCAuCPk= Subject key identifier: 4C:73:0A:07:07:47:63:0E:40:CB:D4:11:32:8C:F0:A3:E5:92:16:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F3055E2E703EFF888BC5530 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa Signing time: Tue 21 Jan 2025 20:37:48 +0000 ROA not before: Tue 21 Jan 2025 20:37:48 +0000 ROA not after: Mon 21 Apr 2025 19:37:48 +0000 asID: 7029 IP address blocks: 173.189.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:55:e2:e7:03:ef:f8:88:bc:55:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:48 2025 GMT Not After : Apr 21 19:37:48 2025 GMT Subject: CN=0ed0146e-62ed-479b-9411-c21d67a70c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:20:0e:c5:5b:2d:1a:ac:c4:bb:ae:34:10: 06:56:6c:96:e2:d4:d5:c2:2a:7f:c8:44:c6:d5:26: cb:59:10:0d:7e:56:ea:b1:e0:fd:50:23:2b:e9:89: 3d:0c:d9:fd:b4:4f:cf:34:6a:71:6b:2a:7a:b4:93: d2:6a:75:e9:6e:17:0d:6b:2a:0d:6d:d2:7c:06:12: a8:34:e0:f5:01:68:61:38:53:f9:06:75:1a:b8:20: 23:72:99:a5:f3:94:fa:08:dd:c3:30:c3:79:3a:d8: e6:a6:17:88:7e:e5:86:c7:4b:18:ed:56:a2:9f:c1: 6c:d0:b6:a6:9c:39:0b:ed:2c:f1:98:1e:f4:be:6e: 54:a6:25:17:ab:ed:2d:a6:fa:c6:c3:88:09:82:82: 2c:f6:6f:f1:4c:a2:df:b2:33:a6:8e:72:81:e6:49: 6d:ab:3b:da:ea:a7:0a:aa:82:59:69:47:e1:8e:36: 96:dd:41:39:3c:9d:db:e5:16:e1:34:f4:a0:a4:08: 7c:80:b2:23:c2:33:ea:46:2f:18:16:2c:34:d8:fc: 82:b5:3e:9f:59:76:cd:5f:73:ec:e4:a8:a1:d4:5d: 60:e2:c2:09:7b:7c:97:6d:ae:72:61:52:c0:2e:6c: 61:35:88:49:53:40:4f:c8:b1:f8:04:1a:f9:a0:bf: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:0A:07:07:47:63:0E:40:CB:D4:11:32:8C:F0:A3:E5:92:16:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a96bc15-8dac-3441-a332-06b6d61ab16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fd:ec:9d:0d:ec:55:87:9f:76:91:78:85:72:4e:6f:c4:1f: 20:00:3d:0f:d6:17:4f:c2:41:7b:d0:20:78:be:82:7b:22:65: 2d:29:ab:fd:bd:9a:c6:2a:bc:d1:c6:76:02:99:bd:d5:a1:fe: a9:af:79:96:45:9a:cb:ea:5c:0c:85:bd:45:2a:5a:fc:c0:5a: e2:68:da:54:15:17:83:df:ea:1e:8c:ce:0c:12:43:bc:d7:c2: c7:b3:c6:85:e3:37:ec:76:67:3f:9a:c2:8b:21:b3:78:de:95: 7b:9b:b2:55:f3:23:fb:d9:44:6e:92:99:85:5e:62:7e:42:af: f0:e6:7b:5a:d6:e7:75:22:91:0b:57:30:71:46:b5:17:34:29: 52:86:b4:4c:c3:0d:40:97:4c:6e:df:93:70:1b:b2:ba:18:fd: be:76:81:25:a5:ca:27:98:61:37:d6:20:c2:b3:cb:9f:5d:3b: c5:71:32:f7:53:a2:71:21:d0:cb:4b:07:32:bd:81:a6:5f:70: 31:58:66:ae:39:ca:4d:f5:31:85:ae:e1:33:4c:3b:ce:d6:0d: 1b:6b:9f:88:d1:5c:34:4b:ab:74:5b:5f:61:3c:28:56:90:a1: 3b:5f:67:1b:6b:e1:ef:e8:0b:b1:4a:0b:23:93:41:2d:8a:23: ad:cb:82:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMFXi5wPv+Ii8VTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc0OFoXDTI1MDQyMTE5Mzc0OFowLzEtMCsGA1UEAxMk MGVkMDE0NmUtNjJlZC00NzliLTk0MTEtYzIxZDY3YTcwYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/8gDsVbLRqsxLuuNBAGVmyW4tTVwip/yETG 1SbLWRANflbqseD9UCMr6Yk9DNn9tE/PNGpxayp6tJPSanXpbhcNayoNbdJ8BhKo NOD1AWhhOFP5BnUauCAjcpml85T6CN3DMMN5OtjmpheIfuWGx0sY7Vain8Fs0Lam nDkL7SzxmB70vm5UpiUXq+0tpvrGw4gJgoIs9m/xTKLfsjOmjnKB5kltqzva6qcK qoJZaUfhjjaW3UE5PJ3b5RbhNPSgpAh8gLIjwjPqRi8YFiw02PyCtT6fWXbNX3Ps 5Kih1F1g4sIJe3yXba5yYVLALmxhNYhJU0BPyLH4BBr5oL+nGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExzCgcHR2MOQMvUETKM8KPlkhY+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE5NmJjMTUtOGRhYy0z NDQxLWEzMzItMDZiNmQ2MWFiMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD97J0N7FWHn3aReIVyTm/EHyAAPQ/WF0/CQXvQIHi+gnsiZS0pq/29 msYqvNHGdgKZvdWh/qmveZZFmsvqXAyFvUUqWvzAWuJo2lQVF4Pf6h6MzgwSQ7zX wsezxoXjN+x2Zz+awoshs3jelXubslXzI/vZRG6SmYVeYn5Cr/Dme1rW53UikQtX MHFGtRc0KVKGtEzDDUCXTG7fk3AbsroY/b52gSWlyieYYTfWIMKzy59dO8VxMvdT onEh0MtLBzK9gaZfcDFYZq45yk31MYWu4TNMO87WDRtrn4jRXDRLq3RbX2E8KFaQ oTtfZxtr4e/oC7FKCyOTQS2KI63Lglc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:23:43 2025 by rpki-client