$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6baf5a64-59fc-3267-a67c-94558f9227e6.roa File: 6baf5a64-59fc-3267-a67c-94558f9227e6.roa (raw, json) Hash identifier: NnZBo+UfFaVnWTOQlziHTfMzC3JmSd7M549YbUvBYTk= Subject key identifier: 74:C8:40:62:05:FA:8A:7F:47:CF:90:D3:31:06:B5:F5:D4:A7:32:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA3BB418121969CF0BF200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6baf5a64-59fc-3267-a67c-94558f9227e6.roa Signing time: Thu 20 Feb 2025 18:15:30 +0000 ROA not before: Thu 20 Feb 2025 18:15:30 +0000 ROA not after: Wed 21 May 2025 17:15:30 +0000 asID: 7029 IP address blocks: 173.189.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:3b:b4:18:12:19:69:cf:0b:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:30 2025 GMT Not After : May 21 17:15:30 2025 GMT Subject: CN=fe31cf00-cfda-4e7b-ad62-2616f2ad9dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:34:67:0a:2c:5b:d9:2a:d0:58:f5:a5:20:eb: 28:8e:28:6a:a6:72:a3:d4:d3:bc:4c:3e:de:a6:f9: 76:f6:7a:6e:98:eb:b0:58:d5:39:fe:c6:c5:82:33: f3:d1:fa:38:73:71:cb:a5:85:33:2c:c6:60:9e:4b: dd:28:31:9b:8d:6b:34:40:50:2b:82:15:90:3c:1b: 48:e7:fd:85:df:7d:11:cf:66:b2:59:cf:8a:ee:60: 32:e2:e0:23:1b:04:01:55:b4:39:17:32:a3:b4:4e: 18:83:2a:c6:1e:28:6f:90:11:1d:75:a7:a4:59:43: 1e:8d:32:ae:bf:3b:54:ca:e8:4f:ef:c2:6c:9d:84: d7:94:de:23:a7:97:7b:8f:6d:ed:f7:6c:a0:59:58: 56:8a:34:c1:30:2c:3a:4d:5e:93:37:9a:81:84:8c: 3f:d2:52:a6:59:d8:52:2e:fe:26:e4:ea:29:22:8d: 5b:3d:d2:58:4b:d6:ea:d0:07:0f:7b:8d:ee:2d:e4: 54:94:f0:27:56:da:8c:5a:0f:13:ac:f2:e8:b8:2a: f8:60:d3:d0:c0:e9:24:8d:22:ed:6c:74:2d:5b:2a: 88:bf:f0:95:fc:6e:5a:2f:30:94:47:6e:7c:97:2b: 33:b8:d7:77:35:88:23:2c:bb:ca:28:c0:3f:f9:2a: f3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:40:62:05:FA:8A:7F:47:CF:90:D3:31:06:B5:F5:D4:A7:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6baf5a64-59fc-3267-a67c-94558f9227e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:81:2f:e2:6b:14:30:c8:5c:da:87:ff:29:fd:88:f4:e4:aa: 8d:dd:05:91:bd:8c:22:f4:6d:cb:ee:19:21:04:9b:c7:4e:26: b8:75:39:4b:a9:df:a0:aa:f6:dc:39:02:7c:f9:2f:2f:42:52: 9a:f6:87:94:d0:45:d0:9a:47:0f:8e:30:b1:86:34:f4:72:fc: b2:46:f2:d2:57:4f:2d:65:c5:4f:e2:dd:3b:59:62:97:94:97: 93:96:29:ed:ca:c7:ee:01:7d:af:77:a6:b6:ff:87:62:54:33: c6:4d:08:14:bb:f5:07:57:aa:1c:3a:21:e0:09:4e:78:3c:09: 2e:9f:67:bd:76:55:99:18:93:9b:0b:95:4a:f2:61:46:b6:20: d6:7e:1b:59:47:46:4f:e1:4e:c4:23:ee:fc:f4:a4:f7:1e:5b: e4:07:6f:c5:e2:5b:00:e2:38:0d:5e:54:0b:fe:09:29:c3:e0: e6:11:9b:b1:d9:1a:f3:58:11:7f:a6:87:e1:6d:9b:71:86:01: db:69:52:10:c4:43:ee:f9:29:94:8c:ed:72:6a:ff:c8:5f:71: 71:db:9b:49:67:19:5d:7f:33:07:ea:2a:41:56:15:0d:d7:e9: d2:b3:78:99:8e:7b:ab:94:46:80:78:e0:6a:8b:e2:6b:5c:f8: c5:bc:bf:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqju0GBIZac8L8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUzMFoXDTI1MDUyMTE3MTUzMFowLzEtMCsGA1UEAxMk ZmUzMWNmMDAtY2ZkYS00ZTdiLWFkNjItMjYxNmYyYWQ5ZGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizRnCixb2SrQWPWlIOsojihqpnKj1NO8TD7e pvl29npumOuwWNU5/sbFgjPz0fo4c3HLpYUzLMZgnkvdKDGbjWs0QFArghWQPBtI 5/2F330Rz2ayWc+K7mAy4uAjGwQBVbQ5FzKjtE4YgyrGHihvkBEddaekWUMejTKu vztUyuhP78JsnYTXlN4jp5d7j23t92ygWVhWijTBMCw6TV6TN5qBhIw/0lKmWdhS Lv4m5OopIo1bPdJYS9bq0AcPe43uLeRUlPAnVtqMWg8TrPLouCr4YNPQwOkkjSLt bHQtWyqIv/CV/G5aLzCUR258lyszuNd3NYgjLLvKKMA/+Srz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTIQGIF+op/R8+Q0zEGtfXUpzKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmJhZjVhNjQtNTlmYy0z MjY3LWE2N2MtOTQ1NThmOTIyN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKBL+JrFDDIXNqH/yn9iPTkqo3dBZG9jCL0bcvuGSEEm8dOJrh1OUup 36Cq9tw5Anz5Ly9CUpr2h5TQRdCaRw+OMLGGNPRy/LJG8tJXTy1lxU/i3TtZYpeU l5OWKe3Kx+4Bfa93prb/h2JUM8ZNCBS79QdXqhw6IeAJTng8CS6fZ712VZkYk5sL lUryYUa2INZ+G1lHRk/hTsQj7vz0pPceW+QHb8XiWwDiOA1eVAv+CSnD4OYRm7HZ GvNYEX+mh+Ftm3GGAdtpUhDEQ+75KZSM7XJq/8hfcXHbm0lnGV1/MwfqKkFWFQ3X 6dKzeJmOe6uURoB44GqL4mtc+MW8vwU= -----END CERTIFICATE-----Generated at Sat Apr 5 20:33:29 2025 by rpki-client