$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa File: cb48a02a-551b-382a-abd0-23a66116f121.roa (raw, json) Hash identifier: elIzDxO933HsFXEZ+vwa1GvNHqYBBfV7cWUDcPIS4Rg= Subject key identifier: C7:46:8D:2D:DB:CE:D0:50:F7:77:A5:70:BE:13:43:8D:47:BA:08:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11B48B89CCCB057C6E900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.189.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:48:b8:9c:cc:b0:57:c6:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=77f4e195-0826-4fe0-96ad-712a0a02faec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:76:dd:48:c0:9b:94:1f:9b:09:d0:36:ae: 7e:39:fa:43:a2:83:8f:80:52:41:76:cb:92:dd:da: 00:d8:86:c1:fc:a6:50:f8:91:39:ed:32:e7:50:74: d0:29:ad:86:b9:b9:ce:13:cc:e4:00:f1:5e:dd:72: 6a:fc:57:12:71:65:43:c8:3a:b3:57:9a:cc:6d:11: 6e:2e:dd:6b:2d:fe:f5:7f:ce:6a:91:ac:f3:26:66: 64:d0:4c:cb:58:ad:a2:84:e2:95:d9:54:41:cd:7f: fb:c5:73:22:5e:8b:83:7f:25:6a:ce:bc:fe:98:a4: 58:9e:c9:39:31:34:69:96:3f:ec:55:e5:16:1e:7a: 51:fb:b5:a3:8b:eb:10:68:a3:1f:1f:57:7f:e4:c9: 67:1f:03:44:7e:07:7e:ef:a1:8f:93:60:d2:d7:63: 6a:24:0b:1d:cd:ea:34:9d:2b:47:df:2f:1f:dd:17: e4:7f:9d:a4:cf:77:c3:70:99:65:65:8c:33:60:af: 06:d8:cd:f0:2b:be:7f:2f:04:0b:5e:9f:5c:37:15: 06:4c:83:a3:83:dd:13:2f:97:35:00:fc:fe:9a:bd: 07:d2:ba:2a:3d:ad:4b:c5:42:84:22:97:02:59:e9: f8:6b:64:a7:61:b0:e4:b7:50:d6:64:77:d8:cd:ed: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:46:8D:2D:DB:CE:D0:50:F7:77:A5:70:BE:13:43:8D:47:BA:08:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cb48a02a-551b-382a-abd0-23a66116f121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f1:db:b7:56:67:25:6a:23:4a:c3:d7:90:b1:51:d8:c1:ea: 8b:ce:6e:a2:69:a5:14:75:ba:63:39:f6:8a:9d:f4:3e:c2:c2: 84:e8:6c:31:bc:59:8c:6f:1b:8a:14:8d:13:44:81:ae:6c:0f: 5a:8f:7e:59:29:8a:27:08:bf:f5:22:a3:33:8b:31:ac:4f:82: cd:10:5a:ac:5e:eb:5c:33:1d:25:3d:0c:27:8c:ba:bc:4c:ce: 9a:84:83:ea:11:c2:0b:87:b0:37:12:c2:42:93:cd:87:dc:64: f1:ff:da:96:d6:75:b9:d7:fc:ba:2b:62:04:32:89:5c:0b:7c: ae:12:80:4a:8b:59:f2:73:ef:6e:ad:fd:a9:57:5a:5f:65:04: f1:f0:9e:df:75:83:0c:20:ef:7c:ef:f9:d7:29:da:25:02:fd: 03:36:2e:a0:ff:5b:4e:56:8c:cf:d7:23:87:57:27:f2:aa:99: 98:bb:32:ae:64:5e:73:cb:97:a8:62:c0:8c:93:1c:68:c3:d7: 28:d5:72:36:61:82:67:8b:3d:ea:7e:79:d4:b3:64:fc:0e:f4: 3f:29:45:d9:85:2b:35:4b:c1:fc:ee:9a:17:7a:ba:96:1e:09: bf:01:6b:07:f2:23:2c:26:2a:30:d3:a4:50:fb:d0:fc:06:22: ff:23:f6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RtIuJzMsFfG6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NzdmNGUxOTUtMDgyNi00ZmUwLTk2YWQtNzEyYTBhMDJmYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pl23UjAm5QfmwnQNq5+OfpDooOPgFJBdsuS 3doA2IbB/KZQ+JE57TLnUHTQKa2GubnOE8zkAPFe3XJq/FcScWVDyDqzV5rMbRFu Lt1rLf71f85qkazzJmZk0EzLWK2ihOKV2VRBzX/7xXMiXouDfyVqzrz+mKRYnsk5 MTRplj/sVeUWHnpR+7Wji+sQaKMfH1d/5MlnHwNEfgd+76GPk2DS12NqJAsdzeo0 nStH3y8f3Rfkf52kz3fDcJllZYwzYK8G2M3wK75/LwQLXp9cNxUGTIOjg90TL5c1 APz+mr0H0roqPa1LxUKEIpcCWen4a2SnYbDkt1DWZHfYze1/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdGjS3bztBQ93elcL4TQ41HugjwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2I0OGEwMmEtNTUxYi0z ODJhLWFiZDAtMjNhNjYxMTZmMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADx27dWZyVqI0rD15CxUdjB6ovObqJppRR1umM59oqd9D7CwoTobDG8 WYxvG4oUjRNEga5sD1qPflkpiicIv/UiozOLMaxPgs0QWqxe61wzHSU9DCeMurxM zpqEg+oRwguHsDcSwkKTzYfcZPH/2pbWdbnX/LorYgQyiVwLfK4SgEqLWfJz726t /alXWl9lBPHwnt91gwwg73zv+dcp2iUC/QM2LqD/W05WjM/XI4dXJ/KqmZi7Mq5k XnPLl6hiwIyTHGjD1yjVcjZhgmeLPep+edSzZPwO9D8pRdmFKzVLwfzumhd6upYe Cb8BawfyIywmKjDTpFD70PwGIv8j9lk= -----END CERTIFICATE-----Generated at Thu Apr 10 04:06:04 2025 by rpki-client