$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e17e6ae-4863-37d9-8069-0cff742fdc94.roa File: 6e17e6ae-4863-37d9-8069-0cff742fdc94.roa (raw, json) Hash identifier: 0FXkxIFjgTGX1mHSImX7RSUhSI1yFANey8VW3c1y+2s= Subject key identifier: 27:74:9A:81:B7:7A:8C:41:9C:CE:DF:D5:72:C3:31:2B:14:82:3D:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30823492F3DDE13E300700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e17e6ae-4863-37d9-8069-0cff742fdc94.roa Signing time: Tue 21 Jan 2025 20:38:09 +0000 ROA not before: Tue 21 Jan 2025 20:38:09 +0000 ROA not after: Mon 21 Apr 2025 19:38:09 +0000 asID: 7029 IP address blocks: 173.190.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:82:34:92:f3:dd:e1:3e:30:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:09 2025 GMT Not After : Apr 21 19:38:09 2025 GMT Subject: CN=6bd5a689-7371-459d-8e93-7c6673554008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:77:3f:c9:28:38:6e:08:63:e7:cd:67:12:e9: 04:e3:23:1f:ee:70:1d:c4:f7:7a:c9:5e:3c:44:50: 28:a3:73:9f:0c:fc:2e:21:5c:bb:86:58:dc:c8:3a: dc:a4:c5:0d:1b:aa:1e:15:00:9e:ef:25:8b:8c:2d: cd:07:10:b8:83:08:b1:f9:ae:2f:61:4a:b7:72:a0: 4c:f4:a3:72:87:01:59:cb:dc:99:4c:e0:0b:d5:ae: 37:ec:8b:49:98:18:3a:4e:cc:ca:b5:ee:d7:83:fa: 6b:2f:5b:14:9d:25:d3:5b:d8:96:d7:e3:c2:e4:04: 8f:94:0a:6b:be:2d:ee:3e:fc:db:de:89:df:73:12: d5:d2:ea:ba:e9:73:16:15:46:2c:b4:41:58:43:42: 28:52:bb:d1:19:42:8a:e7:0c:ae:e9:33:38:9e:72: 73:74:67:60:ae:31:96:5b:17:60:f9:6b:fb:b9:72: 44:11:65:ff:b3:9b:b6:6b:ff:bf:64:10:01:6d:c0: 88:f6:c3:3d:9c:eb:7e:da:6a:2b:c3:7e:db:ec:52: 98:13:11:12:5c:9e:41:a7:fa:7a:0d:cb:af:09:b9: e6:0e:d9:46:58:40:49:b1:02:14:b9:4f:81:4b:ec: 60:56:1c:48:44:f0:82:23:67:4b:e9:73:c4:33:01: 20:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:74:9A:81:B7:7A:8C:41:9C:CE:DF:D5:72:C3:31:2B:14:82:3D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e17e6ae-4863-37d9-8069-0cff742fdc94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:92:4c:25:e0:04:ca:59:8e:53:f8:35:fe:2c:30:8b:6b:20: 07:19:17:d0:40:66:c6:3c:29:75:cd:9f:09:2f:92:2e:8e:98: 88:43:0d:06:a7:e3:13:10:da:e6:79:f7:4c:25:18:02:37:fb: 59:d0:f6:63:1f:7e:76:98:0a:aa:b3:80:34:c1:fd:db:0d:2f: 78:d1:2d:dc:b8:98:c4:dd:82:59:4c:5f:df:38:70:55:07:28: ff:7e:50:b2:07:b5:0b:54:ef:3e:a7:0e:3f:b5:a4:71:13:70: 06:a8:e1:ba:3b:ab:ec:12:29:37:21:39:a3:ac:de:ec:25:49: 74:73:fe:f1:78:a5:8a:1c:5e:71:ab:79:57:76:17:fc:b3:e5: 06:6e:62:37:a1:40:5c:d8:35:8c:f2:de:dd:e5:93:e2:b8:a1: 33:e4:1d:57:7b:de:ea:11:4e:cb:ee:2c:20:e1:8b:01:29:06: b7:d3:d7:2a:bf:5d:90:fc:40:c1:a1:25:c8:f6:d6:0c:35:81: 76:10:ed:56:4c:a9:73:73:08:c4:01:d9:57:6a:d9:fe:86:c1: c5:66:21:6c:c4:1b:75:ab:ea:1a:a0:58:b4:14:31:56:b5:22: 98:49:d6:a5:13:4f:33:94:d9:de:5d:4b:7c:48:1b:e2:9a:b0: 7f:da:13:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMII0kvPd4T4wBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzgwOVoXDTI1MDQyMTE5MzgwOVowLzEtMCsGA1UEAxMk NmJkNWE2ODktNzM3MS00NTlkLThlOTMtN2M2NjczNTU0MDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3c/ySg4bghj581nEukE4yMf7nAdxPd6yV48 RFAoo3OfDPwuIVy7hljcyDrcpMUNG6oeFQCe7yWLjC3NBxC4gwix+a4vYUq3cqBM 9KNyhwFZy9yZTOAL1a437ItJmBg6TszKte7Xg/prL1sUnSXTW9iW1+PC5ASPlApr vi3uPvzb3onfcxLV0uq66XMWFUYstEFYQ0IoUrvRGUKK5wyu6TM4nnJzdGdgrjGW Wxdg+Wv7uXJEEWX/s5u2a/+/ZBABbcCI9sM9nOt+2morw37b7FKYExESXJ5Bp/p6 DcuvCbnmDtlGWEBJsQIUuU+BS+xgVhxIRPCCI2dL6XPEMwEgEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd0moG3eoxBnM7f1XLDMSsUgj3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmUxN2U2YWUtNDg2My0z N2Q5LTgwNjktMGNmZjc0MmZkYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+STCXgBMpZjlP4Nf4sMItrIAcZF9BAZsY8KXXNnwkvki6OmIhDDQan 4xMQ2uZ590wlGAI3+1nQ9mMffnaYCqqzgDTB/dsNL3jRLdy4mMTdgllMX984cFUH KP9+ULIHtQtU7z6nDj+1pHETcAao4bo7q+wSKTchOaOs3uwlSXRz/vF4pYocXnGr eVd2F/yz5QZuYjehQFzYNYzy3t3lk+K4oTPkHVd73uoRTsvuLCDhiwEpBrfT1yq/ XZD8QMGhJcj21gw1gXYQ7VZMqXNzCMQB2Vdq2f6GwcVmIWzEG3Wr6hqgWLQUMVa1 IphJ1qUTTzOU2d5dS3xIG+KasH/aE18= -----END CERTIFICATE-----Generated at Sun Apr 6 11:10:34 2025 by rpki-client