$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa File: 7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa (raw, json) Hash identifier: XF9XVBSRmHV4cVIoLlRJ3Zp1ObuXKbkW3AEDzeG8bUE= Subject key identifier: 14:DC:9B:25:1E:5F:30:F4:44:B9:8B:9E:24:30:B0:51:D9:03:CA:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E0069FA645575562E7306800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.188.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9f:a6:45:57:55:62:e7:30:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=595158f7-f69c-4866-890a-f0bfddbe0350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:db:81:2a:a7:62:bb:c2:fe:04:01:76:ce: ce:ab:57:0b:f2:18:6d:1f:be:a2:97:40:79:9f:ad: a9:62:c2:67:7a:0a:4a:6d:c9:95:2f:91:e8:5e:02: 68:2e:56:b0:61:8e:94:8c:ad:d8:b1:89:c4:23:51: e1:f0:d2:a9:eb:e5:9e:38:86:8d:c5:36:ae:fa:d1: b9:01:28:4b:45:78:58:34:01:b2:4a:85:5a:de:22: 43:aa:28:81:89:3e:1d:cb:fe:48:fc:73:54:5b:df: a5:81:11:26:c4:aa:a1:78:7a:65:56:69:e8:29:a7: 88:9a:a4:50:e9:07:98:e6:45:1f:21:f7:3b:f6:de: 3b:2a:f4:5a:b8:50:f3:b4:ba:1e:2d:41:c0:11:e3: 1a:1c:6f:c7:05:c5:4e:ea:a5:a0:68:19:6d:0a:62: cd:a9:6b:e0:2a:44:ef:6f:9d:92:5d:63:fc:79:85: 62:91:2d:29:f2:80:83:f6:84:fd:0a:8b:4c:73:7a: 83:5e:5b:1f:f3:a6:f2:3c:0a:03:cc:f8:b4:c6:9d: df:97:51:56:1e:5e:ca:37:d8:e5:ea:de:48:88:bb: ea:e6:9e:ef:9d:a2:17:63:db:db:ff:03:f4:99:91: c2:35:aa:e2:39:96:20:32:e0:b9:31:07:0f:7c:a7: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DC:9B:25:1E:5F:30:F4:44:B9:8B:9E:24:30:B0:51:D9:03:CA:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7771f857-ab4a-3270-a1cd-e6c00ac02cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:00:73:30:40:9d:13:c2:e3:f7:62:24:41:a1:86:eb:77:9b: 3a:41:70:2f:d7:9e:1b:44:1f:81:34:bb:ce:c9:15:eb:3f:4c: 0d:6c:b9:e5:90:cf:58:06:6b:fb:1e:63:b4:a1:b1:ec:63:8f: af:af:ed:60:67:31:65:cf:75:3f:7f:dc:18:6e:83:66:82:72: f8:1e:75:05:4b:d6:15:e7:23:df:e6:9c:29:4b:84:ee:d6:4a: 3e:02:6f:fb:ca:1f:79:e6:0b:1b:d1:9f:c0:e6:4d:b2:22:6d: e8:49:45:4b:89:81:2c:7f:15:f3:7a:04:f4:b0:ea:3a:45:5b: df:b1:f2:6c:b5:25:b7:e4:7b:93:f8:9c:0f:9a:a5:ff:c7:d4: 7d:9c:d0:a7:cd:a5:32:31:ba:8a:14:71:0a:10:7e:17:82:0e: e6:ed:d0:8c:de:09:55:61:a4:6f:9e:6e:31:93:19:b2:96:4c: 2b:7d:f0:62:ed:05:d1:e1:4d:f9:7e:7b:fc:00:8c:24:8d:fa: 63:d0:34:92:28:ec:21:2a:b3:e5:dc:eb:03:21:64:81:e0:4e: 20:6d:d5:14:bb:da:79:11:48:af:7e:b3:ea:24:1a:ad:c2:3f: de:ab:7c:ee:ae:6e:f4:86:ab:88:1e:c9:52:ec:02:e0:98:a1: 68:c6:d8:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp+mRVdVYucwaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NTk1MTU4ZjctZjY5Yy00ODY2LTg5MGEtZjBiZmRkYmUwMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMnbgSqnYrvC/gQBds7Oq1cL8hhtH76il0B5 n62pYsJnegpKbcmVL5HoXgJoLlawYY6UjK3YsYnEI1Hh8NKp6+WeOIaNxTau+tG5 AShLRXhYNAGySoVa3iJDqiiBiT4dy/5I/HNUW9+lgREmxKqheHplVmnoKaeImqRQ 6QeY5kUfIfc79t47KvRauFDztLoeLUHAEeMaHG/HBcVO6qWgaBltCmLNqWvgKkTv b52SXWP8eYVikS0p8oCD9oT9CotMc3qDXlsf86byPAoDzPi0xp3fl1FWHl7KN9jl 6t5IiLvq5p7vnaIXY9vb/wP0mZHCNariOZYgMuC5MQcPfKd77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTcmyUeXzD0RLmLniQwsFHZA8oVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzc3MWY4NTctYWI0YS0z MjcwLWExY2QtZTZjMDBhYzAyY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4AczBAnRPC4/diJEGhhut3mzpBcC/XnhtEH4E0u87JFes/TA1sueWQ z1gGa/seY7Shsexjj6+v7WBnMWXPdT9/3Bhug2aCcvgedQVL1hXnI9/mnClLhO7W Sj4Cb/vKH3nmCxvRn8DmTbIibehJRUuJgSx/FfN6BPSw6jpFW9+x8my1Jbfke5P4 nA+apf/H1H2c0KfNpTIxuooUcQoQfheCDubt0IzeCVVhpG+ebjGTGbKWTCt98GLt BdHhTfl+e/wAjCSN+mPQNJIo7CEqs+Xc6wMhZIHgTiBt1RS72nkRSK9+s+okGq3C P96rfO6ubvSGq4geyVLsAuCYoWjG2Mc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:29:30 2025 by rpki-client