$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa File: da9a9401-3f1f-3569-8f05-b7640211ba28.roa (raw, json) Hash identifier: eQlXy6CXKGZZPPmJwVCDC/ElSKKZWyWMiq7q+w/rGdE= Subject key identifier: D8:72:2F:55:B9:70:8F:24:C6:DF:B8:93:D2:49:CB:3E:14:46:2D:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5EB90251C6DCB59CA480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.184.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5e:b9:02:51:c6:dc:b5:9c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=f55ee13b-9814-4cd0-9ccc-2fa616a063eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:00:18:63:ce:9d:b3:d6:7d:ea:9a:d5:89:a1: c8:ab:f0:82:2c:04:cf:6c:f9:1d:78:74:74:4f:5e: d0:1e:35:2a:8e:6d:00:ab:8f:7c:9a:01:c8:df:45: 8b:00:ae:f2:48:7d:e8:56:4d:06:00:a1:9e:6a:76: ea:ff:ab:20:38:e9:c6:97:d7:08:fb:bc:ab:44:b6: 04:00:27:1b:47:91:47:6f:81:33:a8:44:cc:51:8e: 4c:7d:6d:d0:de:47:e3:ac:cc:14:cc:1a:e0:bf:fc: 5b:65:fb:5b:f5:ec:10:cc:45:dd:cd:f2:d0:7d:86: f5:75:6f:10:b6:81:4d:3d:6d:6a:4b:46:e2:97:9a: d7:d0:3a:03:a1:bb:8d:e3:3a:5a:61:40:6f:16:b4: c7:38:7a:45:46:1d:dc:63:2b:17:41:e0:68:01:a5: e4:fe:8b:54:9f:b7:3b:d1:d0:7e:d4:b3:48:f2:91: 50:bb:e5:38:a2:fc:f6:ba:0d:07:3c:51:aa:b9:8a: 8e:81:f2:4c:93:6f:7f:7e:57:ab:05:0a:33:8d:21: f8:9f:50:7e:12:17:7f:2b:7b:0d:fe:30:58:f2:aa: e1:f9:27:7e:46:b6:b9:88:77:96:f1:ca:d6:eb:03: e4:6d:b8:7b:20:8f:7f:31:1f:80:ba:53:d0:2f:ef: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:2F:55:B9:70:8F:24:C6:DF:B8:93:D2:49:CB:3E:14:46:2D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9a9401-3f1f-3569-8f05-b7640211ba28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:24:15:56:f9:ce:54:64:cd:48:2c:6c:46:3f:5c:e2:54:43: 9d:c3:1f:63:61:1a:35:5b:d3:d5:c2:b5:2c:c6:7e:25:66:95: 55:3a:75:2b:de:d9:1d:fa:e7:d0:42:d3:f8:09:6a:a0:fb:34: 71:63:5b:f4:6c:6e:f0:7a:34:0e:0d:1a:07:4f:1d:46:f2:3d: ae:90:46:f4:fa:e5:59:c0:1d:45:76:d2:67:7e:53:6b:f3:39: 87:93:3f:46:c2:77:d7:2b:24:1d:ee:30:c0:d7:4b:1e:99:61: 75:57:e4:b5:2d:d1:20:ae:9f:c3:a9:92:c3:87:55:19:7c:b0: fe:b3:df:37:1f:b2:26:96:99:a7:eb:a5:cf:91:38:d0:72:32: 82:08:d4:88:3f:0e:23:11:61:15:bf:83:9d:93:68:28:69:cf: 10:e9:69:e8:6e:41:af:81:14:f8:8a:2d:54:bc:6a:4c:3c:25: 78:ad:7a:06:9d:7b:98:de:eb:04:82:3e:57:18:d4:98:1f:86: 94:98:87:27:c4:84:09:f4:71:8e:02:bd:c7:41:ae:74:db:1d: 23:f3:e7:13:c0:26:5e:c9:df:15:41:62:ca:98:54:d7:44:82: 7f:06:64:07:99:70:15:2e:13:07:52:9b:47:43:0e:6b:7f:1c: d1:02:a2:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF65AlHG3LWcpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjU1ZWUxM2ItOTgxNC00Y2QwLTljY2MtMmZhNjE2YTA2M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wAYY86ds9Z96prViaHIq/CCLATPbPkdeHR0 T17QHjUqjm0Aq498mgHI30WLAK7ySH3oVk0GAKGeanbq/6sgOOnGl9cI+7yrRLYE ACcbR5FHb4EzqETMUY5MfW3Q3kfjrMwUzBrgv/xbZftb9ewQzEXdzfLQfYb1dW8Q toFNPW1qS0bil5rX0DoDobuN4zpaYUBvFrTHOHpFRh3cYysXQeBoAaXk/otUn7c7 0dB+1LNI8pFQu+U4ovz2ug0HPFGquYqOgfJMk29/flerBQozjSH4n1B+Ehd/K3sN /jBY8qrh+Sd+Rra5iHeW8crW6wPkbbh7II9/MR+AulPQL+86ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhyL1W5cI8kxt+4k9JJyz4URi2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE5YTk0MDEtM2YxZi0z NTY5LThmMDUtYjc2NDAyMTFiYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkkFVb5zlRkzUgsbEY/XOJUQ53DH2NhGjVb09XCtSzGfiVmlVU6dSve 2R3659BC0/gJaqD7NHFjW/RsbvB6NA4NGgdPHUbyPa6QRvT65VnAHUV20md+U2vz OYeTP0bCd9crJB3uMMDXSx6ZYXVX5LUt0SCun8OpksOHVRl8sP6z3zcfsiaWmafr pc+RONByMoII1Ig/DiMRYRW/g52TaChpzxDpaehuQa+BFPiKLVS8akw8JXitegad e5je6wSCPlcY1JgfhpSYhyfEhAn0cY4CvcdBrnTbHSPz5xPAJl7J3xVBYsqYVNdE gn8GZAeZcBUuEwdSm0dDDmt/HNECogw= -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:34 2025 by rpki-client