$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa File: d14864e2-0c04-30bd-aa58-ba30680b128d.roa (raw, json) Hash identifier: yxqvpc8YOO6ehOQKgJuAnsewjAXlZfGEC56llC2jaek= Subject key identifier: 0E:A9:AF:02:F4:DA:40:4D:A9:E5:9B:85:8E:E7:55:EB:FD:6E:4E:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30962AF44DC9F3DFC89300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa Signing time: Tue 21 Jan 2025 20:38:19 +0000 ROA not before: Tue 21 Jan 2025 20:38:19 +0000 ROA not after: Mon 21 Apr 2025 19:38:19 +0000 asID: 7029 IP address blocks: 173.187.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:96:2a:f4:4d:c9:f3:df:c8:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:19 2025 GMT Not After : Apr 21 19:38:19 2025 GMT Subject: CN=60cf6cea-b438-4bde-b476-3f9f4d7f028c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:3e:7a:2c:be:7c:ee:4d:9c:bf:28:fd:a6: 2e:55:4d:0c:18:0b:59:e8:cb:4f:b9:f7:64:31:d5: 48:31:c7:ca:84:22:97:f1:07:8c:68:24:ea:b5:5d: 45:44:e0:f7:62:2e:27:8c:c2:0e:45:08:b9:59:09: 48:0e:9c:4b:09:49:b1:86:cd:af:b0:5e:00:58:ce: b0:3e:83:ae:ce:8e:65:61:6f:83:0d:69:50:be:ba: 6b:70:96:83:e9:b2:df:7d:75:1c:ef:b8:ba:0c:5f: dc:2c:d8:d2:6a:2c:38:c9:18:5b:55:02:cb:e4:d2: 35:00:fc:6a:b1:b0:71:af:3a:4b:61:99:78:c0:2d: b4:29:e1:8b:c7:5c:0b:e4:8e:e4:25:9c:51:1c:8e: 42:c9:a4:a8:5c:50:97:5d:c1:f6:dd:b5:db:a8:bf: 51:13:6c:e6:75:ec:bc:76:78:7f:dd:31:f8:56:45: 6e:f0:2a:1e:5d:78:fb:0e:ef:1e:1c:f7:be:1e:4f: 1b:46:ef:cb:cf:83:88:e1:9c:04:5d:9c:8e:ea:4a: a6:a1:f5:aa:be:2b:83:23:fc:b1:ec:3b:aa:52:45: 5c:af:a7:17:26:7c:da:ff:6b:12:8e:be:36:03:f1: 18:25:3a:83:e2:73:35:8e:7f:09:88:3a:00:a3:64: 98:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A9:AF:02:F4:DA:40:4D:A9:E5:9B:85:8E:E7:55:EB:FD:6E:4E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a6:d9:75:96:6d:00:6f:28:98:ba:97:47:f1:1b:f3:61:f7: 6d:28:03:cf:78:7c:a6:19:4a:0a:a5:27:6e:d6:e4:40:ec:be: 4d:a0:1d:02:98:ff:78:ca:ff:c4:3c:9e:d0:fa:c7:d5:4f:d6: 4d:7f:6b:86:7b:2e:15:df:3b:eb:8e:90:18:7c:cc:f5:35:f2: 6b:22:91:f6:66:9b:cb:eb:0c:e1:66:4a:50:db:00:e5:74:76: e9:83:b7:9f:7b:32:b5:3b:10:b6:cc:e4:1d:d2:78:a7:c0:d7: 30:53:c7:f6:d8:a9:8b:96:49:7a:93:92:08:bc:b4:77:5e:22: 39:48:d8:a8:01:5a:d5:be:56:d7:15:4e:cc:16:9b:7f:ed:37: 17:3c:9d:ef:6f:7f:cb:93:18:5d:4e:5d:ca:fd:e6:5c:dc:b7: 95:00:93:77:46:f7:4d:c3:0a:eb:d1:0f:dc:51:51:70:e7:9c: 9d:b5:29:a1:3d:22:ce:27:25:08:9d:12:db:77:c8:bf:8d:58: e4:d9:33:31:ad:22:c1:c9:63:e5:fc:de:28:90:ca:9a:e6:74: 1f:7f:16:d9:79:2e:c0:b1:9e:97:a7:d1:21:40:44:51:1b:15: 1d:f7:3f:51:08:99:09:44:8c:f2:88:2e:18:9d:31:59:77:98: fd:03:bf:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMJYq9E3J89/IkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzgxOVoXDTI1MDQyMTE5MzgxOVowLzEtMCsGA1UEAxMk NjBjZjZjZWEtYjQzOC00YmRlLWI0NzYtM2Y5ZjRkN2YwMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY0+eiy+fO5NnL8o/aYuVU0MGAtZ6MtPufdk MdVIMcfKhCKX8QeMaCTqtV1FROD3Yi4njMIORQi5WQlIDpxLCUmxhs2vsF4AWM6w PoOuzo5lYW+DDWlQvrprcJaD6bLffXUc77i6DF/cLNjSaiw4yRhbVQLL5NI1APxq sbBxrzpLYZl4wC20KeGLx1wL5I7kJZxRHI5CyaSoXFCXXcH23bXbqL9RE2zmdey8 dnh/3TH4VkVu8CoeXXj7Du8eHPe+Hk8bRu/Lz4OI4ZwEXZyO6kqmofWqviuDI/yx 7DuqUkVcr6cXJnza/2sSjr42A/EYJTqD4nM1jn8JiDoAo2SYPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6prwL02kBNqeWbhY7nVev9bk7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDE0ODY0ZTItMGMwNC0z MGJkLWFhNTgtYmEzMDY4MGIxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACim2XWWbQBvKJi6l0fxG/Nh920oA894fKYZSgqlJ27W5EDsvk2gHQKY /3jK/8Q8ntD6x9VP1k1/a4Z7LhXfO+uOkBh8zPU18msikfZmm8vrDOFmSlDbAOV0 dumDt597MrU7ELbM5B3SeKfA1zBTx/bYqYuWSXqTkgi8tHdeIjlI2KgBWtW+VtcV TswWm3/tNxc8ne9vf8uTGF1OXcr95lzct5UAk3dG903DCuvRD9xRUXDnnJ21KaE9 Is4nJQidEtt3yL+NWOTZMzGtIsHJY+X83iiQyprmdB9/Ftl5LsCxnpen0SFARFEb FR33P1EImQlEjPKILhidMVl3mP0Dv9g= -----END CERTIFICATE-----Generated at Sat Apr 5 21:24:44 2025 by rpki-client