$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa File: 12f832c3-109c-3d9b-b69b-2fab2a90e816.roa (raw, json) Hash identifier: vUmXmlzbuZVdFumzwj0XNRIT+Z5A0/tdYBI4ytjde9c= Subject key identifier: 55:35:CD:7E:40:9B:90:BE:9D:F2:64:6A:3D:A2:4D:46:1A:37:0A:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48F61795D527AC584CF40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 173.191.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8f:61:79:5d:52:7a:c5:84:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=8d1573df-923d-4b59-91ca-7a78cf97fa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d4:d3:3d:6c:6a:19:e5:cb:45:bc:c8:e8:87: e9:f7:c1:0c:2d:81:70:bf:ce:27:e1:be:91:7b:b6: 55:21:04:76:29:86:43:04:b7:63:10:ce:7d:0b:65: 38:6c:dc:91:6f:96:60:af:b8:ec:21:7a:73:3b:81: ab:ba:8a:27:be:2d:76:df:e9:a2:83:72:15:3e:75: 69:dd:53:cc:25:42:e4:3f:de:1d:50:e7:4c:33:34: 91:b6:49:7c:e1:f4:19:67:cd:4b:31:83:6b:9a:14: fe:41:17:48:59:5d:19:c7:fa:9d:6d:46:16:86:44: 9b:a2:5f:6d:71:c0:c0:63:1f:ec:74:64:b8:51:da: 41:58:d1:59:ea:b9:f0:74:60:c1:fb:2f:6e:23:df: 61:2f:ee:2e:5f:f2:f3:2c:64:18:01:11:98:df:31: c7:fc:39:e1:fa:d2:2a:07:1a:0c:88:d3:98:52:f8: b2:91:0a:fb:49:21:33:a2:f3:ab:27:b5:e1:a9:39: bd:e1:a5:6f:32:07:c1:a3:f3:61:2a:54:6f:50:b5: a5:14:27:10:96:9f:77:9a:ac:2f:3e:02:2b:4a:2c: cf:c0:54:ae:67:35:e6:ea:d0:99:2a:7a:83:43:82: 41:d0:9e:18:e9:af:76:c3:c9:92:3b:7e:7e:3c:d2: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:35:CD:7E:40:9B:90:BE:9D:F2:64:6A:3D:A2:4D:46:1A:37:0A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f832c3-109c-3d9b-b69b-2fab2a90e816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0b:2d:ac:6c:7a:cb:2b:6f:92:6e:d2:b7:5d:57:da:43:cb: 1c:91:e3:69:59:f0:49:d3:39:d8:8d:a5:c9:41:98:db:ff:11: 13:9a:2a:af:1b:38:73:87:b2:d8:69:36:2b:09:a5:89:4a:c2: b8:09:e4:3f:c1:5b:3d:f9:e1:4a:43:3c:3b:e0:6c:ca:fd:33: 66:5d:01:b2:7b:b9:75:19:da:b0:b2:e4:49:0e:e3:32:6e:4d: 8a:69:ad:d6:40:1b:af:a3:02:f7:fe:00:69:09:ed:25:10:8e: 94:54:09:b7:f5:5e:ae:71:b3:c1:b8:4b:27:bd:51:ec:ab:88: 5e:b9:e8:47:a4:50:91:26:99:5f:cb:a8:25:a3:02:a4:05:4c: e8:a9:e5:f4:cd:f3:5f:b8:b0:60:88:3b:37:79:fc:42:cf:e0: 38:27:16:a3:d3:80:2a:cb:ed:40:9e:16:ce:80:88:76:07:56: 4b:8b:18:f3:c1:50:b0:fc:5b:5c:ff:7c:e6:eb:d3:9d:24:87: 08:a1:50:c8:61:d4:6c:a8:67:e8:66:90:a3:8e:cd:f0:0d:82: c9:e2:63:08:f1:e7:35:aa:9a:b2:5d:f0:54:47:51:4b:18:82: a9:8e:9f:6b:6f:a6:b6:b0:ac:83:22:f4:73:ee:6e:f5:e8:be: f1:3e:aa:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI9heV1SesWEz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk OGQxNTczZGYtOTIzZC00YjU5LTkxY2EtN2E3OGNmOTdmYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9TTPWxqGeXLRbzI6Ifp98EMLYFwv84n4b6R e7ZVIQR2KYZDBLdjEM59C2U4bNyRb5Zgr7jsIXpzO4Gruoonvi123+mig3IVPnVp 3VPMJULkP94dUOdMMzSRtkl84fQZZ81LMYNrmhT+QRdIWV0Zx/qdbUYWhkSbol9t ccDAYx/sdGS4UdpBWNFZ6rnwdGDB+y9uI99hL+4uX/LzLGQYARGY3zHH/Dnh+tIq BxoMiNOYUviykQr7SSEzovOrJ7XhqTm94aVvMgfBo/NhKlRvULWlFCcQlp93mqwv PgIrSizPwFSuZzXm6tCZKnqDQ4JB0J4Y6a92w8mSO35+PNJguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU1zX5Am5C+nfJkaj2iTUYaNwoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmODMyYzMtMTA5Yy0z ZDliLWI2OWItMmZhYjJhOTBlODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4LLaxsessrb5Ju0rddV9pDyxyR42lZ8EnTOdiNpclBmNv/EROaKq8b OHOHsthpNisJpYlKwrgJ5D/BWz354UpDPDvgbMr9M2ZdAbJ7uXUZ2rCy5EkO4zJu TYpprdZAG6+jAvf+AGkJ7SUQjpRUCbf1Xq5xs8G4Sye9UeyriF656EekUJEmmV/L qCWjAqQFTOip5fTN81+4sGCIOzd5/ELP4DgnFqPTgCrL7UCeFs6AiHYHVkuLGPPB ULD8W1z/fObr050khwihUMhh1GyoZ+hmkKOOzfANgsniYwjx5zWqmrJd8FRHUUsY gqmOn2tvprawrIMi9HPubvXovvE+quk= -----END CERTIFICATE-----Generated at Wed May 7 01:42:26 2025 by rpki-client