$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa File: 0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa (raw, json) Hash identifier: Q+ZFp8qNGPCRAX+2H/CSX7Ex2ZA2eXSG2uvBeP8zCNY= Subject key identifier: 24:ED:BE:C0:55:50:D7:D2:26:9A:A7:EA:2A:44:C1:D3:75:92:E9:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24DCFEE867B7D1E9FA2C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.188.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:dc:fe:e8:67:b7:d1:e9:fa:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=df152812-ed8b-4858-9ae2-f03e00eb9016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:5d:ad:1f:bd:f2:00:31:b0:61:2d:bd:fd: bb:76:13:12:b7:89:54:a7:13:d8:d8:61:ff:86:3d: 73:ae:a7:88:5c:09:95:ab:73:1d:92:0c:a7:95:49: f7:6c:84:a6:64:46:77:d6:f1:77:f9:fa:de:b6:5b: 01:a2:9e:60:43:23:7c:16:9f:90:e2:6b:27:b1:28: 5e:f7:f5:72:20:2c:94:94:5b:06:8b:ce:df:b9:db: fd:0c:bc:d6:33:72:0f:ec:bb:7b:74:09:81:12:c5: b1:57:76:75:bb:ac:ae:eb:f1:af:7f:fc:59:2e:0e: bf:89:8e:98:07:ee:7e:6d:9a:bc:7c:a0:c6:1e:1f: a8:0c:50:cb:40:3d:d0:94:21:b4:54:44:e9:7b:c9: 4b:85:bc:2d:42:fc:00:c8:7f:5c:76:b2:9d:13:46: 9a:56:40:a9:b7:e8:f0:00:4e:22:de:a6:d1:c1:72: 09:75:64:97:89:a5:1a:fd:b3:2d:81:bd:29:a1:0d: d0:b6:96:2c:06:ff:0b:d2:c2:26:74:51:10:1b:74: 0a:38:71:03:25:63:19:2d:98:58:3a:20:ba:3d:8e: 78:ea:26:a2:c2:6c:68:6e:ee:da:6b:20:a8:a1:2a: 60:02:77:b9:57:91:48:3c:1a:bb:5c:2e:ad:6b:f5: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:ED:BE:C0:55:50:D7:D2:26:9A:A7:EA:2A:44:C1:D3:75:92:E9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0976700d-9dbf-3c05-92ba-ad7b40bc9d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6c:d9:fe:f0:a9:ee:86:c7:bf:a7:61:c5:d8:c1:ab:91:12: f1:89:1a:8d:57:f3:e5:77:8f:07:42:b0:46:6a:27:6b:d2:a0: e9:c1:55:48:11:ae:7b:59:38:23:a9:b6:df:c9:1f:6f:75:95: b4:93:b5:75:45:70:65:55:59:9a:e6:5e:e2:ef:1b:0f:1c:19: e8:c4:35:28:0d:1a:f3:23:71:c8:6a:d2:0d:60:77:5f:d9:b1: 72:3b:cb:47:e7:a6:d8:a0:1e:20:c5:36:77:f9:db:fb:1b:be: fb:a3:e6:44:bf:03:87:6d:70:1b:c6:d1:87:85:fc:94:4e:17: d4:31:02:9c:25:a0:2f:f8:81:a3:36:1d:6a:80:9b:b0:da:22: 22:36:fc:08:8c:20:52:8f:2e:7d:9b:95:50:d6:30:85:42:c8: ba:b3:31:41:c2:b9:c7:8f:a3:6e:88:80:5a:15:a9:20:80:0c: 40:45:fb:cc:3a:96:16:a4:d6:e8:87:a2:e1:3a:0f:4e:04:fd: e7:a7:23:06:a6:7c:eb:8e:d3:ec:ca:40:f4:6f:4a:46:79:60: fa:89:0b:36:00:d0:9d:64:8d:b1:c5:01:e5:3e:b9:eb:58:da: 37:1a:eb:2e:17:d1:f4:f6:4d:cb:0d:e3:37:f3:2f:55:ee:78: 1f:d4:25:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNz+6Ge30en6LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGYxNTI4MTItZWQ4Yi00ODU4LTlhZTItZjAzZTAwZWI5MDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWNdrR+98gAxsGEtvf27dhMSt4lUpxPY2GH/ hj1zrqeIXAmVq3MdkgynlUn3bISmZEZ31vF3+fretlsBop5gQyN8Fp+Q4msnsShe 9/VyICyUlFsGi87fudv9DLzWM3IP7Lt7dAmBEsWxV3Z1u6yu6/Gvf/xZLg6/iY6Y B+5+bZq8fKDGHh+oDFDLQD3QlCG0VETpe8lLhbwtQvwAyH9cdrKdE0aaVkCpt+jw AE4i3qbRwXIJdWSXiaUa/bMtgb0poQ3QtpYsBv8L0sImdFEQG3QKOHEDJWMZLZhY OiC6PY546iaiwmxobu7aayCooSpgAne5V5FIPBq7XC6ta/W2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTtvsBVUNfSJpqn6ipEwdN1kumnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDk3NjcwMGQtOWRiZi0z YzA1LTkyYmEtYWQ3YjQwYmM5ZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAds2f7wqe6Gx7+nYcXYwauREvGJGo1X8+V3jwdCsEZqJ2vSoOnBVUgR rntZOCOptt/JH291lbSTtXVFcGVVWZrmXuLvGw8cGejENSgNGvMjcchq0g1gd1/Z sXI7y0fnptigHiDFNnf52/sbvvuj5kS/A4dtcBvG0YeF/JROF9QxApwloC/4gaM2 HWqAm7DaIiI2/AiMIFKPLn2blVDWMIVCyLqzMUHCucePo26IgFoVqSCADEBF+8w6 lhak1uiHouE6D04E/eenIwamfOuO0+zKQPRvSkZ5YPqJCzYA0J1kjbHFAeU+uetY 2jca6y4X0fT2TcsN4zfzL1XueB/UJZg= -----END CERTIFICATE-----Generated at Thu May 8 18:40:40 2025 by rpki-client