$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0610ecbd-29cf-360f-b62b-d00aa4c95b58.roa File: 0610ecbd-29cf-360f-b62b-d00aa4c95b58.roa (raw, json) Hash identifier: f6pvnorbj3hc5AsAUOVM91pLFbgAbnp8L3VwyNqaLjs= Subject key identifier: 7F:51:25:E5:79:2D:DE:F9:80:52:02:97:A9:A7:DF:6D:BC:0E:81:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1693113588FEC1FC8A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0610ecbd-29cf-360f-b62b-d00aa4c95b58.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.187.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:16:93:11:35:88:fe:c1:fc:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4b84f88c-04d4-4b02-aaec-c45b575aca97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:5d:35:68:70:81:13:66:d5:38:94:fd:f7: 0e:8b:e4:30:1f:13:ee:af:cc:10:1c:bd:3a:b1:ac: c7:24:ac:84:43:15:e0:32:9b:71:fe:6a:cf:8b:97: 43:06:31:c0:57:03:fc:96:19:40:d4:b5:cd:d9:a0: 24:b1:4f:5d:43:e4:20:af:d8:74:4b:6b:8c:86:0d: bf:a8:57:d4:b7:dc:3d:6c:ba:e2:1d:58:0c:f7:a4: fc:35:b4:1b:65:e9:96:45:a3:a8:5f:93:bf:a4:94: 51:ff:bc:ba:d2:81:9e:7b:42:9a:2e:ac:43:eb:b7: 97:40:fc:2f:18:74:f7:96:2b:9a:89:87:ff:5c:33: fb:4f:e5:a2:7c:a1:26:a3:2e:0e:63:8e:29:fd:15: a4:e5:4e:95:6f:8d:e0:24:d2:7f:da:34:d9:71:da: 4e:86:d2:c6:a0:fd:f1:a3:cf:7d:06:11:0a:0c:1e: d8:a0:cf:d6:d1:d8:97:d4:b9:e7:81:e3:cf:6f:17: ee:27:a1:02:cf:8d:48:a5:68:15:48:c6:ee:71:5a: 91:c3:b7:39:9e:5e:10:07:26:23:07:99:f1:eb:55: dd:90:4f:49:a7:0e:82:e8:59:fc:18:fb:41:e0:e0: 95:62:b9:dd:79:47:ec:71:67:c7:ef:e7:c5:04:8f: a9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:51:25:E5:79:2D:DE:F9:80:52:02:97:A9:A7:DF:6D:BC:0E:81:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0610ecbd-29cf-360f-b62b-d00aa4c95b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a7:ef:28:f4:65:c2:85:64:f6:c0:6a:b9:62:8a:90:b0:f7: 38:ac:d4:9e:1d:b3:f5:29:97:f5:e8:6a:be:7f:c5:0a:f8:25: 7d:61:22:b2:96:f7:4a:d3:ba:5c:33:84:a5:15:4c:99:b3:5b: a4:f5:62:e5:f5:37:00:47:8f:e5:a0:a0:09:0a:a0:a0:94:39: 20:a4:d5:5a:6b:47:33:e9:85:cd:0c:08:6c:e9:f1:07:a7:0b: 59:75:26:22:c2:9c:ea:28:0f:85:76:15:7d:72:5e:9a:d1:fd: 52:16:cf:83:4c:61:ed:4c:f4:bb:6f:1c:b0:11:a8:56:4a:32: 28:48:bb:e2:40:5a:73:75:fa:3e:31:b0:bd:57:fc:d8:19:d4: 49:e7:f2:cb:1a:af:98:67:a3:19:6a:78:51:61:fc:5a:0a:a1: 64:84:43:e8:a2:b1:54:13:65:4d:06:87:80:6b:b7:18:15:56: f5:ea:fa:06:51:8d:b0:92:e1:89:0c:8b:05:f3:00:10:e9:c7: ee:97:8c:02:f4:a9:06:c8:14:41:56:b9:dc:2d:69:85:16:da: dd:d8:92:a6:fb:2e:70:73:b8:ef:e1:6d:8a:b0:d7:08:58:f7: 37:be:f5:30:e6:2b:09:87:0f:48:f9:e5:7a:15:c3:80:3e:bc: 7d:0f:ff:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShaTETWI/sH8ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGI4NGY4OGMtMDRkNC00YjAyLWFhZWMtYzQ1YjU3NWFjYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeJdNWhwgRNm1TiU/fcOi+QwHxPur8wQHL06 sazHJKyEQxXgMptx/mrPi5dDBjHAVwP8lhlA1LXN2aAksU9dQ+Qgr9h0S2uMhg2/ qFfUt9w9bLriHVgM96T8NbQbZemWRaOoX5O/pJRR/7y60oGee0KaLqxD67eXQPwv GHT3liuaiYf/XDP7T+WifKEmoy4OY44p/RWk5U6Vb43gJNJ/2jTZcdpOhtLGoP3x o899BhEKDB7YoM/W0diX1LnngePPbxfuJ6ECz41IpWgVSMbucVqRw7c5nl4QByYj B5nx61XdkE9Jpw6C6Fn8GPtB4OCVYrndeUfscWfH7+fFBI+pPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9RJeV5Ld75gFICl6mn3228DoEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYxMGVjYmQtMjljZi0z NjBmLWI2MmItZDAwYWE0Yzk1YjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACin7yj0ZcKFZPbAarliipCw9zis1J4ds/Upl/Xoar5/xQr4JX1hIrKW 90rTulwzhKUVTJmzW6T1YuX1NwBHj+WgoAkKoKCUOSCk1VprRzPphc0MCGzp8Qen C1l1JiLCnOooD4V2FX1yXprR/VIWz4NMYe1M9LtvHLARqFZKMihIu+JAWnN1+j4x sL1X/NgZ1Enn8ssar5hnoxlqeFFh/FoKoWSEQ+iisVQTZU0Gh4BrtxgVVvXq+gZR jbCS4YkMiwXzABDpx+6XjAL0qQbIFEFWudwtaYUW2t3Ykqb7LnBzuO/hbYqw1whY 9ze+9TDmKwmHD0j55XoVw4A+vH0P/0s= -----END CERTIFICATE-----Generated at Fri May 9 04:49:20 2025 by rpki-client