$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa File: e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa (raw, json) Hash identifier: eD2J4rxHpJ5t5UWo6DYOYIzz4gx8IL3io5kjS9Z91pM= Subject key identifier: 6A:AD:06:BE:E6:E7:6E:15:48:5B:81:CB:CD:03:D5:B3:FF:5D:2B:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71040E15D5869808FFE900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.185.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:04:0e:15:d5:86:98:08:ff:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=4a3ab595-4d31-489a-a976-2d05172ceb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:47:a5:b1:fa:1a:10:e1:b0:0b:8c:9e:4c: 8d:ce:ab:3a:87:dc:bb:b8:ab:df:45:9d:e5:b8:62: 48:e0:a4:7e:8d:db:d8:5f:ec:93:64:90:b1:7f:e6: 36:ff:a9:67:ee:f3:c3:9f:ee:86:0e:fd:9b:71:55: 67:03:ea:d1:ac:c8:a7:6d:57:31:ff:e0:fc:cc:cd: 19:c9:30:ff:af:fb:53:62:a5:13:44:2f:ab:f5:77: 68:80:16:74:ee:f9:2e:0a:82:ac:a9:aa:03:b5:8a: db:6d:dd:d2:2c:20:e8:ab:7d:6c:e5:fe:02:9f:d8: c7:56:9f:b6:9d:54:3e:81:f1:02:e1:b0:32:33:91: 6c:9a:26:e6:5e:0c:f4:dd:bb:ae:3b:4d:cf:84:40: 0b:45:78:7e:97:c9:bc:7d:5d:3b:08:ba:50:d2:90: 81:b8:79:62:9c:a4:33:b2:58:da:fb:78:6e:cb:fb: 6b:83:84:2f:77:0e:08:10:8c:09:1b:c6:df:5f:97: 9b:94:c5:b4:4b:ea:37:af:4a:b9:72:36:60:74:b9: 12:72:35:47:a1:c5:4f:bc:ee:c4:f0:e7:c6:c3:cf: 67:4e:40:0c:ce:48:9b:6e:38:22:a9:c4:2f:ab:e4: 45:e9:bb:f1:8f:af:ab:e1:a4:66:1f:74:f9:06:ac: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AD:06:BE:E6:E7:6E:15:48:5B:81:CB:CD:03:D5:B3:FF:5D:2B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8a85306-f4fc-3d37-aaf6-cba528be5f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ab:89:d9:00:f2:af:d8:61:9c:d9:89:bb:39:8d:00:45:83: 36:d4:bf:fe:2d:a6:6a:88:5a:65:0f:93:88:08:55:6e:d7:29: 9e:58:ec:67:8a:71:5c:19:90:c6:eb:c9:13:2a:33:df:8b:87: cf:84:33:42:f0:89:45:ea:51:f0:53:98:e8:4d:9b:d6:8c:e8: b8:09:1b:03:47:51:ff:35:98:78:c8:6d:5f:2d:c4:5e:5a:da: cc:35:49:ff:a8:e9:3e:7c:ae:b1:50:b9:5d:b9:4c:90:d3:64: 5e:78:72:6f:93:d9:18:ad:b7:25:56:48:37:ed:af:07:ab:ec: 21:a1:38:49:81:5a:a9:f2:3c:4b:53:98:5e:28:b9:53:45:f7: 0d:c8:27:31:e0:5f:47:1e:96:56:61:dc:c6:5f:f7:69:55:0a: f8:8f:cc:09:93:50:d7:21:aa:80:62:71:3f:98:5c:47:3b:df: 32:43:2c:55:9c:58:7c:0c:71:d0:63:d5:29:f1:ff:ad:c9:96: c6:eb:f8:16:41:4c:90:07:e5:7a:21:4b:db:7e:44:6a:f9:6d: 83:8f:bb:0e:cf:3d:f6:7f:a6:c1:49:75:6e:33:eb:38:12:f8: 8f:17:be:a1:01:af:38:d7:37:b9:ae:19:3d:e6:06:ff:df:0b: f5:2f:3b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQQOFdWGmAj/6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk NGEzYWI1OTUtNGQzMS00ODlhLWE5NzYtMmQwNTE3MmNlYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbNHpbH6GhDhsAuMnkyNzqs6h9y7uKvfRZ3l uGJI4KR+jdvYX+yTZJCxf+Y2/6ln7vPDn+6GDv2bcVVnA+rRrMinbVcx/+D8zM0Z yTD/r/tTYqUTRC+r9XdogBZ07vkuCoKsqaoDtYrbbd3SLCDoq31s5f4Cn9jHVp+2 nVQ+gfEC4bAyM5FsmibmXgz03buuO03PhEALRXh+l8m8fV07CLpQ0pCBuHlinKQz slja+3huy/trg4Qvdw4IEIwJG8bfX5eblMW0S+o3r0q5cjZgdLkScjVHocVPvO7E 8OfGw89nTkAMzkibbjgiqcQvq+RF6bvxj6+r4aRmH3T5BqwzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqtBr7m524VSFuBy80D1bP/XSv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThhODUzMDYtZjRmYy0z ZDM3LWFhZjYtY2JhNTI4YmU1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrblwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiridkA8q/YYZzZibs5jQBFgzbUv/4tpmqIWmUPk4gIVW7XKZ5Y7GeK cVwZkMbryRMqM9+Lh8+EM0LwiUXqUfBTmOhNm9aM6LgJGwNHUf81mHjIbV8txF5a 2sw1Sf+o6T58rrFQuV25TJDTZF54cm+T2RittyVWSDftrwer7CGhOEmBWqnyPEtT mF4ouVNF9w3IJzHgX0cellZh3MZf92lVCviPzAmTUNchqoBicT+YXEc73zJDLFWc WHwMcdBj1Snx/63Jlsbr+BZBTJAH5XohS9t+RGr5bYOPuw7PPfZ/psFJdW4z6zgS +I8XvqEBrzjXN7muGT3mBv/fC/UvO6k= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:54 2025 by rpki-client