$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa File: 5c828da5-1267-35f9-8fb4-cc0366b86208.roa (raw, json) Hash identifier: KWi0qR6Xj6D9WDctG4GaQlBfBVql5bVN+6iziDtciEU= Subject key identifier: 51:16:37:D1:FA:14:FA:14:4B:A1:A1:35:1B:1A:C1:94:36:38:DE:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30F9AB2EC52B97F5B688C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa Signing time: Tue 21 Jan 2025 20:39:06 +0000 ROA not before: Tue 21 Jan 2025 20:39:06 +0000 ROA not after: Mon 21 Apr 2025 19:39:06 +0000 asID: 7029 IP address blocks: 173.191.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:f9:ab:2e:c5:2b:97:f5:b6:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:39:06 2025 GMT Not After : Apr 21 19:39:06 2025 GMT Subject: CN=0d29bb40-a35b-4509-bfe8-3765e638b22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:79:ea:ce:f8:54:d6:5f:a7:c5:a5:b8:c8: 3e:8e:66:41:2a:4d:81:22:3f:2f:18:09:87:35:e4: 59:c6:52:e3:b4:dd:34:27:c4:40:1c:7c:bb:59:cf: 38:96:0c:03:d0:78:23:ef:33:5c:34:0d:c5:a3:c1: b4:e7:93:52:e0:1c:10:f9:40:0a:72:60:1f:50:86: 86:7b:69:a9:88:ed:c6:be:ec:d8:c6:b2:e1:84:65: 99:af:af:96:b0:5f:26:9f:2e:ab:30:1b:8f:ef:8b: b2:6b:5e:b0:cf:17:b2:75:f3:03:87:dd:38:c9:eb: 90:8d:f0:2a:84:b3:9c:f8:25:64:7d:af:89:40:c8: cd:d1:7b:06:4c:15:65:b2:1a:a9:21:0e:90:1d:33: 9c:b2:0b:97:8a:78:8a:96:b3:bc:a6:cd:0a:d3:f4: d2:c5:09:2e:2f:59:5e:bd:f3:37:32:3c:e9:79:4d: d9:96:1a:f1:0a:99:8b:89:21:eb:18:a2:bf:86:b6: 2f:70:97:91:3b:66:28:2e:1e:94:b1:e3:33:63:42: 56:75:b2:0b:95:17:e6:99:bb:6a:e9:77:57:1c:1f: d3:aa:3d:55:9c:75:df:f7:91:c2:1e:15:f8:9f:b6: ab:32:a1:11:13:a0:52:43:58:d0:64:91:fa:50:9d: c9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:16:37:D1:FA:14:FA:14:4B:A1:A1:35:1B:1A:C1:94:36:38:DE:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c828da5-1267-35f9-8fb4-cc0366b86208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:10:6b:db:9e:2b:f8:d7:33:15:0c:e7:bd:41:77:f4:1b:7d: a2:37:d4:4b:fe:3e:db:71:07:b4:50:9a:91:bb:c9:7c:97:f5: 21:da:ca:ae:fa:77:fa:fd:ed:c9:3f:0c:de:7b:f3:66:6d:9a: 12:74:56:b2:73:5a:8d:bc:ea:e6:8d:7a:22:88:7f:8a:6a:2d: 88:59:0b:59:fc:8b:b6:3f:56:75:0d:10:f6:ba:08:d8:f5:a3: b2:04:4f:81:26:44:00:6e:c7:de:48:d1:bf:b1:f3:06:79:21: a3:8e:98:9b:b4:fc:b2:4c:d0:76:c3:ad:9a:90:dd:31:d3:58: 37:7c:80:a1:18:ff:df:5f:13:8d:80:f3:3f:20:d9:c5:e8:91: c3:2b:ba:42:48:a7:a4:0e:be:42:c3:7b:d1:fa:b1:ff:0f:26: 0e:5a:cc:31:cd:15:c4:28:11:9e:39:9c:44:85:6a:06:4a:45: b6:29:cb:c2:06:c2:4d:40:cc:a0:90:18:0d:39:29:d8:be:40: 61:56:93:38:54:50:38:cd:fc:eb:de:19:60:56:78:d1:5b:88: 56:b6:a8:ac:f1:a2:41:f1:e6:17:78:58:79:b9:89:f2:7d:6f: 15:fb:7b:39:24:75:e6:79:cd:3c:15:88:84:f9:27:a1:ef:e6: f5:5c:90:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMPmrLsUrl/W2iMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzkwNloXDTI1MDQyMTE5MzkwNlowLzEtMCsGA1UEAxMk MGQyOWJiNDAtYTM1Yi00NTA5LWJmZTgtMzc2NWU2MzhiMjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtB56s74VNZfp8WluMg+jmZBKk2BIj8vGAmH NeRZxlLjtN00J8RAHHy7Wc84lgwD0Hgj7zNcNA3Fo8G055NS4BwQ+UAKcmAfUIaG e2mpiO3GvuzYxrLhhGWZr6+WsF8mny6rMBuP74uya16wzxeydfMDh904yeuQjfAq hLOc+CVkfa+JQMjN0XsGTBVlshqpIQ6QHTOcsguXiniKlrO8ps0K0/TSxQkuL1le vfM3MjzpeU3ZlhrxCpmLiSHrGKK/hrYvcJeRO2YoLh6UseMzY0JWdbILlRfmmbtq 6XdXHB/Tqj1VnHXf95HCHhX4n7arMqERE6BSQ1jQZJH6UJ3JsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEWN9H6FPoUS6GhNRsawZQ2ON4YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM4MjhkYTUtMTI2Ny0z NWY5LThmYjQtY2MwMzY2Yjg2MjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYQa9ueK/jXMxUM571Bd/QbfaI31Ev+PttxB7RQmpG7yXyX9SHayq76 d/r97ck/DN5782ZtmhJ0VrJzWo286uaNeiKIf4pqLYhZC1n8i7Y/VnUNEPa6CNj1 o7IET4EmRABux95I0b+x8wZ5IaOOmJu0/LJM0HbDrZqQ3THTWDd8gKEY/99fE42A 8z8g2cXokcMrukJIp6QOvkLDe9H6sf8PJg5azDHNFcQoEZ45nESFagZKRbYpy8IG wk1AzKCQGA05Kdi+QGFWkzhUUDjN/OveGWBWeNFbiFa2qKzxokHx5hd4WHm5ifJ9 bxX7ezkkdeZ5zTwViIT5J6Hv5vVckNU= -----END CERTIFICATE-----Generated at Wed Apr 9 19:50:39 2025 by rpki-client