$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa File: 789fd90b-0242-3510-a897-d82a8d84d6e7.roa (raw, json) Hash identifier: rcYqSfFqFl0Zd4aPshfHK5whHacmHSLSNCcvURwEh4E= Subject key identifier: D1:5D:2F:45:B2:42:F3:A3:4C:13:97:50:D7:1A:16:E6:3E:54:8E:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11B1424F3180229582E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.185.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:14:24:f3:18:02:29:58:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=0338df81-c1fb-43d8-ac32-e26a6fd3b948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:b4:0e:9f:03:14:8f:4d:29:e7:08:a1:bf: 01:47:00:45:f8:a0:e3:f8:41:3a:1e:02:cf:0b:4a: 7b:0a:20:a2:26:cd:39:df:4a:bd:25:f2:1b:e4:74: ea:63:71:40:59:2e:76:f5:3e:95:2b:d7:e1:64:eb: bf:8b:02:84:b8:e2:53:e2:16:d8:f7:62:89:75:3b: ea:2b:35:f2:69:0f:95:14:c6:e3:d5:fb:02:90:20: d0:3c:50:a1:df:93:80:64:ce:d3:f6:bf:fd:f6:2c: e3:fa:bf:45:75:be:39:c5:05:20:fe:78:a3:ac:92: 2f:54:00:03:21:d0:96:76:a1:c3:d7:9f:01:7a:ec: 67:a4:b5:c3:36:da:87:56:dc:47:90:99:36:06:03: 32:a4:1c:08:8e:3b:a1:a9:09:7f:9f:62:79:0a:7b: fe:84:94:b8:9c:b9:a6:9e:c7:dc:1d:08:63:24:bf: 50:aa:a1:7c:bb:6e:36:78:91:44:47:54:6b:ee:16: d9:fa:58:c4:9f:e0:e4:57:41:4a:9c:a7:17:c7:7d: 27:82:2c:43:f8:22:dd:e7:8a:87:2b:d5:ea:3f:3f: 16:00:5f:87:78:8b:4a:6c:d5:23:c5:0b:0d:4d:9b: 01:32:cf:4d:61:cc:a1:fd:8f:b5:b1:c8:06:d7:3e: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5D:2F:45:B2:42:F3:A3:4C:13:97:50:D7:1A:16:E6:3E:54:8E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789fd90b-0242-3510-a897-d82a8d84d6e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:9b:6a:ca:b1:84:e7:28:0f:fa:98:04:c7:7c:c6:67:ba:79: d4:87:a3:6e:b8:ba:af:0b:37:8b:32:93:51:27:59:53:5c:fb: e8:cb:a7:21:b4:e0:3d:7d:f0:63:3c:0c:f5:d6:f2:95:64:28: 69:0b:ac:e1:b9:9a:e8:df:dc:a8:73:2f:99:fd:ab:ec:5e:47: 5c:36:62:ae:ec:ed:3a:f1:68:ae:f9:75:0d:ed:39:5d:9c:bb: 9a:84:7a:2c:35:ca:d0:2e:dd:02:26:f0:95:d3:c0:3d:0c:a0: 11:29:6e:d3:f7:6c:1a:be:f4:9b:1c:7d:05:29:84:c9:01:82: d8:15:79:5a:da:8b:61:87:f9:c8:e4:0b:7c:db:5f:09:21:11: bd:13:ca:54:f5:2c:04:6c:84:33:81:de:70:d5:06:6d:26:01: 7a:a8:aa:3f:0f:2f:fa:10:82:bb:00:00:26:f2:ca:69:94:bd: 01:29:45:bd:6a:6d:cb:a7:50:8e:bd:ee:6f:27:2c:3d:7d:75: 66:c9:14:39:f1:48:3d:9b:6a:83:6a:dd:57:1a:1b:9d:10:19: 72:67:e2:5b:5e:71:f5:5f:45:4e:f4:66:35:4e:5e:31:cf:af: 2a:22:79:bd:d4:b5:df:70:02:dc:a4:a9:00:43:9f:f5:73:78: 11:f3:ba:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RsUJPMYAilYLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MDMzOGRmODEtYzFmYi00M2Q4LWFjMzItZTI2YTZmZDNiOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluO0Dp8DFI9NKecIob8BRwBF+KDj+EE6HgLP C0p7CiCiJs0530q9JfIb5HTqY3FAWS529T6VK9fhZOu/iwKEuOJT4hbY92KJdTvq KzXyaQ+VFMbj1fsCkCDQPFCh35OAZM7T9r/99izj+r9Fdb45xQUg/nijrJIvVAAD IdCWdqHD158BeuxnpLXDNtqHVtxHkJk2BgMypBwIjjuhqQl/n2J5Cnv+hJS4nLmm nsfcHQhjJL9QqqF8u242eJFER1Rr7hbZ+ljEn+DkV0FKnKcXx30ngixD+CLd54qH K9XqPz8WAF+HeItKbNUjxQsNTZsBMs9NYcyh/Y+1scgG1z49HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFdL0WyQvOjTBOXUNcaFuY+VI43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5ZmQ5MGItMDI0Mi0z NTEwLWE4OTctZDgyYThkODRkNmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACebasqxhOcoD/qYBMd8xme6edSHo264uq8LN4syk1EnWVNc++jLpyG0 4D198GM8DPXW8pVkKGkLrOG5mujf3KhzL5n9q+xeR1w2Yq7s7TrxaK75dQ3tOV2c u5qEeiw1ytAu3QIm8JXTwD0MoBEpbtP3bBq+9JscfQUphMkBgtgVeVrai2GH+cjk C3zbXwkhEb0TylT1LARshDOB3nDVBm0mAXqoqj8PL/oQgrsAACbyymmUvQEpRb1q bcunUI697m8nLD19dWbJFDnxSD2baoNq3VcaG50QGXJn4ltecfVfRU70ZjVOXjHP ryoieb3Utd9wAtykqQBDn/VzeBHzun8= -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:18 2025 by rpki-client