$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa File: 0d099c79-b523-35e4-9393-0d26efd95ac1.roa (raw, json) Hash identifier: BU/2xS0vQkv9HREmErZQh6TLDx7tgvBq7juN/DU2/KU= Subject key identifier: 53:AE:40:8A:B3:AA:C1:81:9A:25:F3:A5:17:76:27:5D:96:52:B2:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB490311B2A45BC148D6A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 173.186.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:31:1b:2a:45:bc:14:8d:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=179b652e-e16d-451e-845a-067d1241957e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6d:08:c5:c3:5a:99:b9:10:8d:f9:d4:d4:af: 20:aa:92:12:6d:02:91:36:df:77:87:90:ff:46:16: 9e:12:62:d8:2a:ac:97:23:7f:18:9c:f2:90:79:0e: 2e:71:5a:4b:cb:5e:af:22:9e:5b:0c:62:69:12:4c: 7d:76:89:43:94:0f:07:ab:53:58:78:56:fe:dd:1c: e3:ab:5e:5e:6b:f7:cf:49:7c:e0:67:d9:6f:d8:25: fd:88:14:19:d2:f1:9f:a7:a4:d2:2b:c4:0c:b2:54: 9a:70:5d:e9:4a:6f:db:2f:f9:7e:db:14:35:c4:c0: 3f:1d:3c:b2:f4:63:37:77:50:f6:3c:53:3e:37:82: a8:14:7e:13:74:b2:8e:62:14:d0:2b:91:af:81:81: 8b:de:20:d7:ed:da:cc:2c:f0:04:b6:98:9b:ec:15: 6f:5f:c3:18:86:65:c4:2b:e2:d6:30:49:47:93:99: 93:cf:90:e6:1b:a6:0c:a7:7a:b5:dd:93:de:f9:7e: 2f:2e:a1:50:1f:1c:c0:25:3a:12:a4:28:80:09:e5: d1:b4:8f:7b:30:9d:23:0b:56:84:9f:75:f5:c7:9b: fb:3d:50:64:6a:70:6d:5e:34:61:ce:5e:92:16:40: 13:89:9f:15:1a:60:fd:3e:f1:84:ba:91:b2:04:49: d6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AE:40:8A:B3:AA:C1:81:9A:25:F3:A5:17:76:27:5D:96:52:B2:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d099c79-b523-35e4-9393-0d26efd95ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:62:78:bd:35:8e:03:1d:c3:6b:f5:f8:ea:10:c1:6b:e5:4a: 73:f3:b5:b9:20:c2:dc:a1:07:cd:77:c1:f7:4f:59:d1:67:19: a2:27:03:0d:5b:af:7d:7c:21:15:d6:f4:a1:a3:16:4c:66:93: b6:ca:32:bd:5d:1b:1e:51:49:7f:5a:a3:3f:f4:f7:9d:de:c7: 64:91:2d:d7:35:e9:38:22:39:2a:33:96:60:8f:ac:b2:33:28: d6:55:5c:32:35:66:1b:77:1b:c3:57:65:00:8b:97:b5:d2:65: 31:68:24:61:92:c2:af:40:c3:08:7e:68:3e:de:99:19:85:a0: 7c:df:87:b4:58:b3:c5:5b:1a:24:32:60:8d:41:e7:f5:c2:c3: 2b:36:7c:a7:d4:b1:96:53:b8:55:cd:6d:8f:45:28:74:df:e2: 82:82:40:5f:55:57:8a:f2:1d:50:39:81:80:68:22:89:63:51: 75:4d:b9:a5:24:fc:26:c6:56:19:0b:ad:60:d3:65:f8:78:64: 97:63:a8:e3:02:f0:9e:4b:a2:e4:97:ac:0e:56:bd:35:da:10: 12:9b:fb:1a:14:85:74:b1:b2:40:95:08:5b:5b:02:31:c3:b0: 95:f6:5c:cc:98:e0:53:37:a8:34:3e:c8:db:c8:f9:cb:ac:fb: 3b:2f:1c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJAxGypFvBSNakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTc5YjY1MmUtZTE2ZC00NTFlLTg0NWEtMDY3ZDEyNDE5NTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm0IxcNambkQjfnU1K8gqpISbQKRNt93h5D/ RhaeEmLYKqyXI38YnPKQeQ4ucVpLy16vIp5bDGJpEkx9dolDlA8Hq1NYeFb+3Rzj q15ea/fPSXzgZ9lv2CX9iBQZ0vGfp6TSK8QMslSacF3pSm/bL/l+2xQ1xMA/HTyy 9GM3d1D2PFM+N4KoFH4TdLKOYhTQK5GvgYGL3iDX7drMLPAEtpib7BVvX8MYhmXE K+LWMElHk5mTz5DmG6YMp3q13ZPe+X4vLqFQHxzAJToSpCiACeXRtI97MJ0jC1aE n3X1x5v7PVBkanBtXjRhzl6SFkATiZ8VGmD9PvGEupGyBEnW/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOuQIqzqsGBmiXzpRd2J12WUrI1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQwOTljNzktYjUyMy0z NWU0LTkzOTMtMGQyNmVmZDk1YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9ieL01jgMdw2v1+OoQwWvlSnPztbkgwtyhB813wfdPWdFnGaInAw1b r318IRXW9KGjFkxmk7bKMr1dGx5RSX9aoz/0953ex2SRLdc16TgiOSozlmCPrLIz KNZVXDI1Zht3G8NXZQCLl7XSZTFoJGGSwq9Awwh+aD7emRmFoHzfh7RYs8VbGiQy YI1B5/XCwys2fKfUsZZTuFXNbY9FKHTf4oKCQF9VV4ryHVA5gYBoIoljUXVNuaUk /CbGVhkLrWDTZfh4ZJdjqOMC8J5LouSXrA5WvTXaEBKb+xoUhXSxskCVCFtbAjHD sJX2XMyY4FM3qDQ+yNvI+cus+zsvHJk= -----END CERTIFICATE-----Generated at Sat May 10 19:17:27 2025 by rpki-client