$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c06ed4f-d2f7-3805-9603-6bc11663b084.roa File: 7c06ed4f-d2f7-3805-9603-6bc11663b084.roa (raw, json) Hash identifier: V7qXrpOXykqYwM10gCLm/DFYtm5+JZo05KaihT4majA= Subject key identifier: 21:22:35:C0:57:83:36:F5:5D:3B:CE:C6:15:B9:03:33:1E:C2:C7:FB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584973DEDC916761A5B5BA789A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c06ed4f-d2f7-3805-9603-6bc11663b084.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dc:91:67:61:a5:b5:ba:78:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=a9efc560-e3af-4df4-b961-27ff87489df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8f:ec:2f:c5:9f:57:da:cf:cd:32:d5:a0:5e: 8f:57:52:a9:35:50:1b:4c:40:37:0c:83:14:a1:56: 8e:b3:66:58:48:c3:6c:b4:30:11:f3:1b:98:0e:81: 23:94:36:f6:73:26:d0:11:8d:ee:df:a4:b3:96:0d: 38:83:27:e7:9b:6a:f5:22:e9:4d:4d:e2:c1:9c:bb: 81:5c:6e:d6:57:dc:56:09:8b:52:6b:b6:59:a8:45: 28:08:d4:e6:02:59:5d:06:ff:0e:e7:22:50:44:39: 6a:8f:68:8a:d0:75:fe:32:11:9f:5f:06:f3:1a:a9: 11:90:61:48:63:df:47:60:20:1f:ef:0e:1d:39:a6: 79:d9:92:be:91:b9:1e:73:8a:16:0d:d9:90:17:c2: 73:b3:4c:8a:28:45:e4:de:5f:b4:94:45:29:4d:9b: 6a:48:b1:14:7f:51:bf:2c:38:76:f2:3a:f2:53:05: fa:6b:c1:25:ee:a4:7f:8d:26:24:ec:da:cb:f9:39: 1f:dd:6a:26:68:ee:60:1a:39:fa:c4:13:e1:62:7f: fd:92:e3:60:8f:93:a9:bd:8a:6c:9c:0c:39:21:c5: f3:9b:fa:97:21:7f:a4:e4:d7:66:0d:45:f0:f4:56: b6:69:b2:06:3b:bf:f3:d3:bb:8d:83:8d:ef:4c:0b: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:22:35:C0:57:83:36:F5:5D:3B:CE:C6:15:B9:03:33:1E:C2:C7:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c06ed4f-d2f7-3805-9603-6bc11663b084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:43:4c:c9:c9:74:ef:8d:7e:5a:45:03:0a:e1:46:9c:6c:5d: 8f:df:63:df:16:81:36:08:c6:4b:6b:46:e4:e9:b1:e9:64:ae: 30:bc:61:35:01:1c:e1:18:2f:ff:e3:76:e9:03:ba:9b:50:c7: ae:16:48:01:7a:ad:0c:d3:29:e2:cc:bb:07:4a:23:0a:0d:e0: a0:3f:b4:fc:4c:a3:e4:8d:97:0b:8f:07:06:35:29:15:26:99: 40:f0:8b:31:9b:ae:ef:19:0c:c9:8b:40:15:88:99:6b:e5:4a: 62:93:33:d7:d6:91:3e:03:5c:35:fe:87:2f:84:25:0e:fc:0d: 8a:92:c4:07:12:af:84:8d:92:60:da:70:47:21:db:d5:01:ab: 28:c5:d1:73:21:85:31:66:56:66:9e:dc:34:1f:25:ba:57:25: ef:44:94:b4:ac:e9:7c:aa:b9:f9:85:31:24:36:36:16:1a:40: 92:0a:fc:6b:94:6e:93:c1:13:ce:be:08:b0:45:25:46:ff:a3: ec:aa:0b:d2:06:81:94:3b:3f:b0:de:3f:e0:97:a4:dd:4c:f2: 04:82:82:68:78:5e:b2:b5:61:70:7b:3d:a0:00:0a:4d:da:03: b4:07:d1:78:00:c8:30:dc:89:c6:2d:0b:8a:fd:62:95:1e:35: 25:66:c7:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tyRZ2Gltbp4moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YTllZmM1NjAtZTNhZi00ZGY0LWI5NjEtMjdmZjg3NDg5ZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY/sL8WfV9rPzTLVoF6PV1KpNVAbTEA3DIMU oVaOs2ZYSMNstDAR8xuYDoEjlDb2cybQEY3u36Szlg04gyfnm2r1IulNTeLBnLuB XG7WV9xWCYtSa7ZZqEUoCNTmAlldBv8O5yJQRDlqj2iK0HX+MhGfXwbzGqkRkGFI Y99HYCAf7w4dOaZ52ZK+kbkec4oWDdmQF8Jzs0yKKEXk3l+0lEUpTZtqSLEUf1G/ LDh28jryUwX6a8El7qR/jSYk7NrL+Tkf3WomaO5gGjn6xBPhYn/9kuNgj5OpvYps nAw5IcXzm/qXIX+k5NdmDUXw9Fa2abIGO7/z07uNg43vTAum3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEiNcBXgzb1XTvOxhW5AzMewsf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2MwNmVkNGYtZDJmNy0z ODA1LTk2MDMtNmJjMTE2NjNiMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFDTMnJdO+NflpFAwrhRpxsXY/fY98WgTYIxktrRuTpselkrjC8YTUB HOEYL//jdukDuptQx64WSAF6rQzTKeLMuwdKIwoN4KA/tPxMo+SNlwuPBwY1KRUm mUDwizGbru8ZDMmLQBWImWvlSmKTM9fWkT4DXDX+hy+EJQ78DYqSxAcSr4SNkmDa cEch29UBqyjF0XMhhTFmVmae3DQfJbpXJe9ElLSs6XyqufmFMSQ2NhYaQJIK/GuU bpPBE86+CLBFJUb/o+yqC9IGgZQ7P7DeP+CXpN1M8gSCgmh4XrK1YXB7PaAACk3a A7QH0XgAyDDcicYtC4r9YpUeNSVmxyE= -----END CERTIFICATE-----Generated at Wed Apr 9 23:26:30 2025 by rpki-client