$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa File: c421723e-d17f-3372-b3af-869e79a27fb6.roa (raw, json) Hash identifier: f1iRomllzTzKO8ysKVIOG+HOLUoDP/anQeZjtbK6eWI= Subject key identifier: 7C:7D:F7:CF:0E:57:E6:5B:4D:14:30:E2:14:99:B9:32:40:A8:28:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E0068654E3D5192C451C4A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.187.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:86:54:e3:d5:19:2c:45:1c:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e5dd138f-fa87-4821-88e9-6e3fc3985a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:09:84:c8:57:34:00:b7:61:88:9a:eb:9a: 1a:3f:0f:63:f7:58:ab:91:56:69:ea:e7:92:fd:1a: 59:d6:b6:38:cd:fd:dd:a0:7b:b2:7b:4b:f3:23:96: a5:b1:c9:ea:2c:8b:f1:3e:1d:0b:b8:1c:10:77:f1: 68:25:9f:cf:82:8f:44:3e:0a:c4:a9:6e:e4:9b:6a: 5c:6d:85:5a:64:74:7d:90:bb:7e:50:2b:e9:48:bb: a1:47:90:bb:7d:4e:6a:4a:94:10:ab:f2:cd:c9:a7: 40:63:89:05:b9:03:3e:0c:46:34:ce:7f:83:32:4b: 3d:ea:7b:80:5e:17:96:fb:79:d4:48:48:9e:11:2c: fa:bf:e7:cb:28:ec:88:60:da:c0:d2:3e:f8:53:f6: 46:f0:1f:91:ed:3d:13:4c:66:95:e8:30:5b:33:9e: 80:7f:6c:89:0e:6c:9a:33:09:7c:b4:bd:bb:b3:ef: 36:a6:69:69:25:42:9e:f1:a4:89:5b:0f:7d:8b:15: 1f:19:4e:ae:30:d6:f7:23:e8:9b:92:81:91:01:00: 19:2c:4a:1e:3e:80:cc:00:50:2b:84:46:1c:b9:57: e3:8e:81:7d:4e:a9:41:f5:de:8b:68:de:fd:a4:ad: 14:ae:03:62:07:58:8f:f4:77:62:71:3c:3a:87:94: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7D:F7:CF:0E:57:E6:5B:4D:14:30:E2:14:99:B9:32:40:A8:28:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c421723e-d17f-3372-b3af-869e79a27fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7b:ef:f1:b1:ec:3d:81:09:35:35:b0:f4:b2:f0:45:f7:b4: c1:af:26:9a:d2:92:79:09:01:ce:f9:e2:17:73:57:23:bb:1d: dc:75:36:1a:23:2e:6f:6c:77:3b:82:d3:33:95:c8:c1:f3:4a: 6a:92:02:5f:57:49:31:9a:bd:33:d1:f0:ac:c1:96:c2:f5:01: d6:f5:24:32:6a:c6:58:98:18:d1:69:d0:2f:93:13:e8:66:3d: 3b:c9:59:90:ed:2f:39:e4:ee:56:22:bf:d3:75:51:7c:11:ed: 7f:83:22:a3:0d:a4:bb:50:9b:43:15:4c:43:75:fa:19:7a:17: 2c:dd:13:7f:4d:b0:be:06:50:06:ee:5d:b5:65:9b:1a:56:3d: 37:a1:bb:8a:1a:0c:52:79:f5:b9:0b:14:36:6c:63:d0:9b:83: 0e:ab:2f:4c:99:d4:cd:8e:48:c7:cc:70:ba:b4:4b:da:32:17: d9:79:03:f3:35:f2:1e:32:e1:ee:d0:a2:f8:0a:c6:97:f2:34: 1c:0a:f6:6e:75:1e:b3:6d:81:64:fc:03:06:83:be:0c:58:ef: 35:ea:bd:f4:0a:5b:10:dd:7a:ea:28:a3:af:cf:7c:df:ca:92: d9:c2:db:96:c8:ac:40:63:e0:9a:7d:26:cf:65:35:76:5a:e6: ab:b6:fe:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoZU49UZLEUcSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTVkZDEzOGYtZmE4Ny00ODIxLTg4ZTktNmUzZmMzOTg1YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcAJhMhXNAC3YYia65oaPw9j91irkVZp6ueS /RpZ1rY4zf3doHuye0vzI5alscnqLIvxPh0LuBwQd/FoJZ/Pgo9EPgrEqW7km2pc bYVaZHR9kLt+UCvpSLuhR5C7fU5qSpQQq/LNyadAY4kFuQM+DEY0zn+DMks96nuA XheW+3nUSEieESz6v+fLKOyIYNrA0j74U/ZG8B+R7T0TTGaV6DBbM56Af2yJDmya Mwl8tL27s+82pmlpJUKe8aSJWw99ixUfGU6uMNb3I+ibkoGRAQAZLEoePoDMAFAr hEYcuVfjjoF9TqlB9d6LaN79pK0UrgNiB1iP9HdicTw6h5QdSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHx9988OV+ZbTRQw4hSZuTJAqChiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQyMTcyM2UtZDE3Zi0z MzcyLWIzYWYtODY5ZTc5YTI3ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbvFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN77/Gx7D2BCTU1sPSy8EX3tMGvJprSknkJAc754hdzVyO7Hdx1Nhoj Lm9sdzuC0zOVyMHzSmqSAl9XSTGavTPR8KzBlsL1Adb1JDJqxliYGNFp0C+TE+hm PTvJWZDtLznk7lYiv9N1UXwR7X+DIqMNpLtQm0MVTEN1+hl6FyzdE39NsL4GUAbu XbVlmxpWPTehu4oaDFJ59bkLFDZsY9Cbgw6rL0yZ1M2OSMfMcLq0S9oyF9l5A/M1 8h4y4e7QovgKxpfyNBwK9m51HrNtgWT8AwaDvgxY7zXqvfQKWxDdeuooo6/PfN/K ktnC25bIrEBj4Jp9Js9lNXZa5qu2/o4= -----END CERTIFICATE-----Generated at Sun Apr 6 04:47:36 2025 by rpki-client