$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa File: f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa (raw, json) Hash identifier: RZyRg2MYW6+yN//5klg014YZsOw90/784j9ExcNpfxI= Subject key identifier: A8:BE:CD:52:35:DF:A1:58:31:FC:FA:0F:8E:3B:52:4C:9F:AB:A6:49 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584919E70567AE9DEC31C3181380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa Signing time: Thu 06 Mar 2025 19:34:31 +0000 ROA not before: Thu 06 Mar 2025 19:34:31 +0000 ROA not after: Wed 04 Jun 2025 18:34:31 +0000 asID: 7029 IP address blocks: 173.187.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:e7:05:67:ae:9d:ec:31:c3:18:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 6 19:34:31 2025 GMT Not After : Jun 4 18:34:31 2025 GMT Subject: CN=bca54547-2eda-40f3-b480-3ee7ff56ccb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:43:f6:71:28:14:93:5e:7c:28:b5:a7:b9: fe:4e:90:36:c5:7f:ea:85:4e:42:d7:67:f9:b8:2a: e4:85:8e:45:29:93:74:9f:b6:1a:12:95:5e:52:92: fa:2b:ab:42:0c:8f:dd:35:2a:29:83:98:7b:f9:20: e9:68:46:ea:86:62:f9:0e:c7:e6:da:74:fb:7c:02: c0:a2:8e:f4:cd:16:4e:38:92:57:3a:1c:8e:e5:66: 5c:46:8f:c5:43:0e:0c:b4:bd:46:70:92:79:20:2a: f9:db:4a:cc:fa:2e:a8:1c:c0:87:69:83:bc:57:3b: 4c:b2:03:7c:42:69:c8:81:09:b6:25:65:6d:a7:6e: 97:7a:f1:25:a7:3e:3f:f7:c1:e8:a3:d7:d4:0f:52: 72:e2:68:bd:49:a7:52:74:e7:a5:ad:12:61:29:49: 0b:75:0d:d8:23:e7:50:f6:71:04:e7:7a:66:30:f7: 32:0d:1f:da:5f:cd:4a:20:8d:03:e3:b1:a0:b9:b2: 16:2b:a7:ca:3c:cf:64:44:2a:db:6e:d0:5a:b0:c6: 0f:dc:95:73:9d:1e:d2:79:00:69:28:c9:b7:36:04: 69:bf:00:56:8c:77:34:5a:27:78:5e:63:4d:1a:00: 5d:0d:13:c0:a1:d0:47:b4:04:e2:13:c0:ed:11:15: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BE:CD:52:35:DF:A1:58:31:FC:FA:0F:8E:3B:52:4C:9F:AB:A6:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f37991dd-d45f-30d0-8142-f4fb7e379ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3c:84:41:68:89:75:ef:e4:b5:30:bd:85:b1:80:64:b8:e9: 63:1d:a7:e0:11:ad:e2:d0:ac:42:98:44:21:70:dd:22:dd:4b: 0b:d8:83:81:9e:9b:85:70:34:67:e3:40:f4:dc:0c:a0:59:49: 09:fa:32:00:44:df:e9:a3:f6:05:0a:6e:cc:08:e1:2f:a5:77: 8f:69:b6:7a:9b:28:fc:be:02:fe:54:85:12:8d:0a:18:8c:21: 94:7f:0d:60:c1:07:ca:e0:3a:49:02:c4:17:6f:e2:8f:6e:53: 5b:a1:74:31:ef:49:78:88:cd:19:cf:9e:fe:24:ea:94:9d:d8: d2:08:cc:23:fd:b7:4a:a7:d0:59:32:c3:3a:26:7b:08:3b:51: 16:5b:1a:fd:3b:34:f7:03:28:fa:ee:00:71:8b:92:1f:e0:39: cd:66:5a:b6:a8:89:4f:cf:9e:bc:bb:90:ba:b3:44:39:50:82: 6f:86:95:81:3a:00:34:e4:b2:27:2f:73:46:69:c1:5c:6e:7f: d1:ed:ae:4b:e3:cc:69:f3:c6:d4:58:80:0f:40:9b:dc:f8:9e: d0:67:62:62:3b:f2:b6:7e:66:6f:83:b2:dc:de:4c:76:08:3b: 4e:2e:2f:6f:7d:59:04:c8:19:05:5f:32:7c:9c:f0:8b:5e:d9: b1:8a:9f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZ5wVnrp3sMcMYE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNjE5MzQzMVoXDTI1MDYwNDE4MzQzMVowLzEtMCsGA1UEAxMk YmNhNTQ1NDctMmVkYS00MGYzLWI0ODAtM2VlN2ZmNTZjY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooFD9nEoFJNefCi1p7n+TpA2xX/qhU5C12f5 uCrkhY5FKZN0n7YaEpVeUpL6K6tCDI/dNSopg5h7+SDpaEbqhmL5Dsfm2nT7fALA oo70zRZOOJJXOhyO5WZcRo/FQw4MtL1GcJJ5ICr520rM+i6oHMCHaYO8VztMsgN8 QmnIgQm2JWVtp26XevElpz4/98Hoo9fUD1Jy4mi9SadSdOelrRJhKUkLdQ3YI+dQ 9nEE53pmMPcyDR/aX81KII0D47GgubIWK6fKPM9kRCrbbtBasMYP3JVznR7SeQBp KMm3NgRpvwBWjHc0Wid4XmNNGgBdDRPAodBHtATiE8DtERV/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi+zVI136FYMfz6D447Ukyfq6ZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM3OTkxZGQtZDQ1Zi0z MGQwLTgxNDItZjRmYjdlMzc5ZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbt3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHo8hEFoiXXv5LUwvYWxgGS46WMdp+ARreLQrEKYRCFw3SLdSwvYg4Ge m4VwNGfjQPTcDKBZSQn6MgBE3+mj9gUKbswI4S+ld49ptnqbKPy+Av5UhRKNChiM IZR/DWDBB8rgOkkCxBdv4o9uU1uhdDHvSXiIzRnPnv4k6pSd2NIIzCP9t0qn0Fky wzomewg7URZbGv07NPcDKPruAHGLkh/gOc1mWraoiU/Pnry7kLqzRDlQgm+GlYE6 ADTksicvc0ZpwVxuf9HtrkvjzGnzxtRYgA9Am9z4ntBnYmI78rZ+Zm+DstzeTHYI O04uL299WQTIGQVfMnyc8Ite2bGKn7c= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:46 2025 by rpki-client