$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa File: de26d87d-84c4-3225-971a-40a9015e52ba.roa (raw, json) Hash identifier: FOamltjNb0lR6ajh6vc/BdIWMdMPncaIJhTVgL5jdLQ= Subject key identifier: AC:21:A4:71:71:8D:DE:52:D1:8E:2E:2D:F7:03:53:DD:FB:8F:B9:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488E3D2BA8F41E06FCC40516C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa Signing time: Wed 15 Jan 2025 18:54:55 +0000 ROA not before: Wed 15 Jan 2025 18:54:55 +0000 ROA not after: Tue 15 Apr 2025 17:54:55 +0000 asID: 7029 IP address blocks: 173.187.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8e:3d:2b:a8:f4:1e:06:fc:c4:05:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 15 18:54:55 2025 GMT Not After : Apr 15 17:54:55 2025 GMT Subject: CN=ea073495-885e-48ac-910f-3b5a81811f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3b:84:64:bd:0b:d1:de:d5:de:2a:aa:c9:6e: 63:8b:2f:f1:2b:b3:52:09:95:a0:c4:83:f5:cc:03: 30:57:23:84:8f:71:38:80:b6:b4:86:b4:a5:d5:1e: e4:2b:a9:6b:46:ed:27:e7:72:7a:c3:17:b7:a8:14: 82:f5:8a:aa:1d:c5:69:cb:b7:93:de:f7:00:f7:10: 42:43:38:09:7b:58:65:41:ef:7a:3a:c9:eb:1e:e1: 51:da:61:0e:0b:12:08:28:05:7e:15:e3:74:da:b2: d1:58:51:b4:7a:03:65:c2:4d:e0:92:66:60:e8:49: 86:fa:2a:1f:06:f5:36:f3:8c:78:d3:c2:5e:d8:54: e1:d7:18:6d:52:0a:b4:da:95:6f:ad:83:35:55:23: 3e:cb:df:e3:84:64:da:66:6a:70:f9:47:10:49:b0: 69:a5:76:d6:41:c0:80:06:3c:cc:76:25:7b:27:0d: ef:b4:63:1e:35:92:5f:f8:2d:00:7a:97:50:5a:21: 63:96:91:fb:1c:ba:e1:13:e6:a0:bb:36:fe:04:73: f0:00:4f:e9:37:e4:6b:e4:8b:83:c2:32:78:d7:8d: cc:63:62:0e:e0:5e:b7:ef:6d:b2:57:e1:b7:f4:b1: fe:46:7e:6a:b5:1e:a5:8b:05:28:c4:71:36:13:de: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:A4:71:71:8D:DE:52:D1:8E:2E:2D:F7:03:53:DD:FB:8F:B9:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de26d87d-84c4-3225-971a-40a9015e52ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a7:01:b8:86:9d:18:65:9e:11:6a:e9:3c:7c:9e:cd:54:36: 47:89:1b:4d:2d:28:39:f0:6a:95:d9:66:19:97:8f:58:34:27: f7:df:60:36:65:75:e8:4a:5c:04:a4:5a:53:9c:e7:1c:69:35: b1:69:e4:e0:6a:af:b8:fe:e0:b9:fe:ce:12:4c:da:7b:eb:c0: c3:07:98:21:a2:c0:1d:22:37:66:63:05:7b:bc:4a:a1:ee:66: 62:78:42:a2:c3:cc:83:27:c6:ce:37:6a:7d:59:62:19:8d:22: 6a:2d:5c:e0:a7:d4:1b:8f:7c:ef:c3:aa:81:67:8c:31:b3:a3: 94:8b:ff:5a:ab:60:ed:ab:91:41:5e:64:f7:13:e2:63:b5:8c: 96:ed:e4:75:3e:d9:b3:52:0b:16:9a:21:fa:f7:0b:7d:4c:da: 46:78:01:a9:6d:f0:dd:a9:19:85:3b:d2:99:4e:a6:0a:ba:cb: d9:e6:71:e7:f6:5d:29:28:25:07:e4:7f:4f:61:80:f6:bc:28: 7e:bc:a7:c0:5e:42:d4:69:49:c7:62:40:aa:2b:7b:94:03:47: e1:7b:3f:7e:3b:d2:07:ff:c1:d1:11:a2:b7:c7:28:19:7c:da: 56:6c:60:b9:43:39:04:e6:a4:da:c2:a0:c1:7f:66:69:9d:85: f1:af:f5:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiOPSuo9B4G/MQFFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNTE4NTQ1NVoXDTI1MDQxNTE3NTQ1NVowLzEtMCsGA1UEAxMk ZWEwNzM0OTUtODg1ZS00OGFjLTkxMGYtM2I1YTgxODExZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDuEZL0L0d7V3iqqyW5jiy/xK7NSCZWgxIP1 zAMwVyOEj3E4gLa0hrSl1R7kK6lrRu0n53J6wxe3qBSC9YqqHcVpy7eT3vcA9xBC QzgJe1hlQe96OsnrHuFR2mEOCxIIKAV+FeN02rLRWFG0egNlwk3gkmZg6EmG+iof BvU284x408Je2FTh1xhtUgq02pVvrYM1VSM+y9/jhGTaZmpw+UcQSbBppXbWQcCA BjzMdiV7Jw3vtGMeNZJf+C0AepdQWiFjlpH7HLrhE+aguzb+BHPwAE/pN+Rr5IuD wjJ4143MY2IO4F63722yV+G39LH+Rn5qtR6liwUoxHE2E97zHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwhpHFxjd5S0Y4uLfcDU937j7nQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGUyNmQ4N2QtODRjNC0z MjI1LTk3MWEtNDBhOTAxNWU1MmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKnAbiGnRhlnhFq6Tx8ns1UNkeJG00tKDnwapXZZhmXj1g0J/ffYDZl dehKXASkWlOc5xxpNbFp5OBqr7j+4Ln+zhJM2nvrwMMHmCGiwB0iN2ZjBXu8SqHu ZmJ4QqLDzIMnxs43an1ZYhmNImotXOCn1BuPfO/DqoFnjDGzo5SL/1qrYO2rkUFe ZPcT4mO1jJbt5HU+2bNSCxaaIfr3C31M2kZ4Aalt8N2pGYU70plOpgq6y9nmcef2 XSkoJQfkf09hgPa8KH68p8BeQtRpScdiQKore5QDR+F7P3470gf/wdERorfHKBl8 2lZsYLlDOQTmpNrCoMF/ZmmdhfGv9dg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:23 2025 by rpki-client