$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa File: a2da74c7-e42a-3467-9e54-de2f59929c42.roa (raw, json) Hash identifier: ARHo8XoODjuQTvWJ7K+EGrFn3ONen+scnPHQIKQqhxU= Subject key identifier: F0:66:2A:C3:92:E7:4B:D8:E8:8D:11:6F:B6:8B:C3:DF:9F:B2:3E:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584947340340DBBE51A2C0B40620 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.187.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:34:03:40:db:be:51:a2:c0:b4:06:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=ea837206-86f1-41b3-98b0-fda26717cab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:ff:24:f9:b7:69:18:bf:6b:5a:78:36:6e: 80:a6:f8:0d:be:4e:5d:80:6e:f0:4a:eb:05:a2:96: 51:40:a0:e6:e7:cb:e2:98:f5:af:7f:64:7b:0b:db: 19:e5:20:e2:10:c9:84:94:5f:93:f1:55:d5:f9:69: ea:00:0f:85:26:b6:59:45:36:51:8a:80:14:2f:14: e1:82:0b:c0:9c:cb:67:a7:9e:37:d2:39:1e:de:d1: 00:ea:d7:57:f5:2a:90:0c:cb:38:c2:49:8b:3c:e2: 10:bf:ca:23:28:27:dd:40:85:95:f7:08:0f:6a:b4: 91:72:69:f9:00:7c:dc:03:2c:c1:d4:1b:ac:50:16: 53:8f:e7:b6:a9:fc:e2:e6:75:9f:ac:0c:b4:4c:b0: eb:c7:d6:22:c0:2d:89:74:b4:27:9e:2d:cd:9e:0f: f0:76:a5:c8:78:f7:4e:03:3e:e6:7f:bd:dc:79:86: ba:72:c1:f9:9d:c8:5a:65:de:89:8c:de:39:1a:eb: cf:bc:a9:02:b9:e4:fc:53:69:66:95:af:3b:1e:f2: ec:de:f4:65:54:7a:20:99:67:ae:70:34:bf:5b:bd: 56:ac:ff:c8:fe:5f:1a:42:30:89:b8:3f:d4:f6:c5: 32:68:65:6d:ce:74:ce:c7:84:cd:aa:95:77:dd:72: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:66:2A:C3:92:E7:4B:D8:E8:8D:11:6F:B6:8B:C3:DF:9F:B2:3E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2da74c7-e42a-3467-9e54-de2f59929c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b3:e2:57:9e:de:e9:14:38:32:29:a7:0b:ba:65:d6:e5:be: 04:83:e2:78:7f:65:5c:58:fd:db:8c:18:51:79:25:93:f3:eb: 52:87:1f:28:05:da:3c:c7:55:0e:58:13:13:63:f3:ec:71:ba: 2b:0c:57:98:ef:aa:9f:37:0f:49:3e:f5:cb:ef:a9:81:83:6b: c5:56:dc:90:a7:19:63:ca:5f:50:c1:58:c4:cf:c9:bc:17:76: 05:f2:b9:6c:26:26:12:b6:2c:2c:42:35:c7:84:15:59:73:3e: a6:e3:1b:6c:c1:07:cf:ea:34:16:53:cc:2b:ca:4a:71:17:75: 32:61:9c:b6:c4:6a:e4:75:51:18:23:d1:e2:aa:01:15:df:2c: 88:f5:d3:17:3b:41:70:98:6b:5a:16:48:74:59:62:30:0a:47: 83:45:da:dc:3a:f9:4a:67:bf:cb:6c:2e:06:69:2b:5b:4b:f5: 2f:47:d3:ca:53:dc:b2:e8:54:fc:35:55:39:36:a8:19:db:48: ba:6d:29:f6:8e:a0:a1:ea:ef:a8:42:32:d4:93:10:29:be:0e: a9:95:3d:f7:e5:1a:fa:e9:d7:d2:fc:84:90:f4:8e:9d:99:22: db:db:be:2a:f7:c5:41:dc:c0:8a:43:24:f6:26:85:ec:4d:1a: 7b:0e:27:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNANA275RosC0BiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZWE4MzcyMDYtODZmMS00MWIzLTk4YjAtZmRhMjY3MTdjYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkb/JPm3aRi/a1p4Nm6ApvgNvk5dgG7wSusF opZRQKDm58vimPWvf2R7C9sZ5SDiEMmElF+T8VXV+WnqAA+FJrZZRTZRioAULxTh ggvAnMtnp5430jke3tEA6tdX9SqQDMs4wkmLPOIQv8ojKCfdQIWV9wgParSRcmn5 AHzcAyzB1BusUBZTj+e2qfzi5nWfrAy0TLDrx9YiwC2JdLQnni3Nng/wdqXIePdO Az7mf73ceYa6csH5nchaZd6JjN45GuvPvKkCueT8U2lmla87HvLs3vRlVHogmWeu cDS/W71WrP/I/l8aQjCJuD/U9sUyaGVtznTOx4TNqpV33XLl8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBmKsOS50vY6I0Rb7aLw9+fsj4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYTc0YzctZTQyYS0z NDY3LTllNTQtZGUyZjU5OTI5YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6z4lee3ukUODIppwu6ZdblvgSD4nh/ZVxY/duMGFF5JZPz61KHHygF 2jzHVQ5YExNj8+xxuisMV5jvqp83D0k+9cvvqYGDa8VW3JCnGWPKX1DBWMTPybwX dgXyuWwmJhK2LCxCNceEFVlzPqbjG2zBB8/qNBZTzCvKSnEXdTJhnLbEauR1URgj 0eKqARXfLIj10xc7QXCYa1oWSHRZYjAKR4NF2tw6+Upnv8tsLgZpK1tL9S9H08pT 3LLoVPw1VTk2qBnbSLptKfaOoKHq76hCMtSTECm+DqmVPfflGvrp19L8hJD0jp2Z Itvbvir3xUHcwIpDJPYmhexNGnsOJ3w= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:05 2025 by rpki-client