$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15fff88e-3739-3af2-833b-3782176a99bc.roa File: 15fff88e-3739-3af2-833b-3782176a99bc.roa (raw, json) Hash identifier: ox9tvM0cfhG/2kOVrm+DxKqpIGmmw0tiyTkQM4X2wHM= Subject key identifier: 8F:7B:E7:F4:26:C6:B3:C4:19:D2:F2:23:65:76:1F:64:43:FA:84:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A174A4E9ACE4BAD5B5B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15fff88e-3739-3af2-833b-3782176a99bc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 198.211.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:4a:4e:9a:ce:4b:ad:5b:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5ef3f66b-9e58-4dee-9f47-cc4a0cb15ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:3d:78:01:b5:8a:5a:97:e1:d5:9e:e4:58: ab:0c:96:10:83:04:8a:9a:f9:ef:ca:5c:f5:2d:bc: 00:9f:09:d9:47:4d:a0:f9:3e:f9:e5:14:f1:ba:9f: d8:4f:19:f2:d3:46:bc:c2:9d:4d:a7:42:21:66:b1: 3a:ed:c9:8e:a1:a1:38:f8:c5:6c:c1:96:34:f0:21: 44:a1:57:38:bd:a1:08:5b:4e:10:10:dc:a3:d3:6b: 1c:3c:9c:f0:96:19:bf:4b:51:d6:fd:40:fe:a6:49: fd:fb:09:8b:1b:cd:a3:9f:29:fe:94:da:b1:c6:73: 96:c5:ee:79:b1:10:df:73:48:c1:64:ea:8f:df:ca: 5b:0c:1c:03:2b:00:ee:04:f6:bc:d9:60:73:04:5e: 25:61:4b:7a:3d:7a:a6:c9:f3:95:62:ba:2f:49:56: 74:04:b4:b7:51:db:32:b8:12:93:85:18:5a:d8:83: db:6e:cc:e2:9b:a0:9d:cc:0d:b7:19:b2:19:cc:2f: f9:9e:28:a1:b4:4f:f9:4c:0f:db:7a:d9:6c:42:3a: 3a:22:7a:04:36:17:0e:0f:0b:44:8f:7d:7f:48:5b: 4d:60:91:41:58:e1:47:67:98:59:ad:b2:f6:9a:d0: df:f7:10:ac:de:ff:61:68:3e:98:36:aa:34:42:a0: eb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7B:E7:F4:26:C6:B3:C4:19:D2:F2:23:65:76:1F:64:43:FA:84:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15fff88e-3739-3af2-833b-3782176a99bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.211.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:9d:37:8a:ea:4e:7b:07:8e:c9:a2:33:e7:06:26:b3:81:3e: f3:47:a2:4c:c5:86:c0:58:d1:d0:13:54:bd:19:35:f5:af:3d: 1d:5e:4f:1f:b3:7c:76:a3:f8:6c:ed:3a:ad:b6:45:75:2f:18: 00:dd:9d:8c:5a:79:8e:54:a7:3c:fa:2a:a2:7f:70:ff:eb:72: 11:bc:9b:d7:b8:52:79:a9:d1:9a:9a:e0:69:8c:e4:0b:76:72: e9:69:03:af:82:d1:07:eb:a3:4c:b9:91:06:ea:1c:81:c2:69: a7:67:b4:65:b2:5d:99:94:4f:82:34:4e:fe:34:11:95:08:63: 1b:78:49:6c:a5:a6:9d:9e:83:99:fc:04:b1:f7:e7:1a:e8:47: 74:d4:16:ed:2e:73:48:20:91:75:fe:be:52:7d:08:42:00:1d: b7:73:ae:89:2c:41:2e:c4:14:ce:69:81:66:3b:26:53:58:c3: 5d:79:84:af:80:f5:be:59:92:f1:6b:85:20:06:d3:2c:43:f7: 0e:f8:3b:5e:9e:50:65:c6:92:e5:f4:33:6d:c7:63:70:31:d1: 9f:3d:99:bb:0d:22:85:5c:e5:19:96:fa:4d:8d:8e:42:9b:53: ee:c2:bc:4b:09:b6:44:41:f2:4a:57:0f:e1:9e:0f:c8:5e:2b: 3f:15:40:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShdKTprOS61bWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWVmM2Y2NmItOWU1OC00ZGVlLTlmNDctY2M0YTBjYjE1YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOw9eAG1ilqX4dWe5FirDJYQgwSKmvnvylz1 LbwAnwnZR02g+T755RTxup/YTxny00a8wp1Np0IhZrE67cmOoaE4+MVswZY08CFE oVc4vaEIW04QENyj02scPJzwlhm/S1HW/UD+pkn9+wmLG82jnyn+lNqxxnOWxe55 sRDfc0jBZOqP38pbDBwDKwDuBPa82WBzBF4lYUt6PXqmyfOVYrovSVZ0BLS3Udsy uBKThRha2IPbbszim6CdzA23GbIZzC/5niihtE/5TA/betlsQjo6InoENhcODwtE j31/SFtNYJFBWOFHZ5hZrbL2mtDf9xCs3v9haD6YNqo0QqDrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI975/QmxrPEGdLyI2V2H2RD+oT9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTVmZmY4OGUtMzczOS0z YWYyLTgzM2ItMzc4MjE3NmE5OWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCdN4rqTnsHjsmiM+cGJrOBPvNHokzFhsBY0dATVL0ZNfWvPR1eTx+z fHaj+GztOq22RXUvGADdnYxaeY5Upzz6KqJ/cP/rchG8m9e4Unmp0Zqa4GmM5At2 culpA6+C0Qfro0y5kQbqHIHCaadntGWyXZmUT4I0Tv40EZUIYxt4SWylpp2eg5n8 BLH35xroR3TUFu0uc0ggkXX+vlJ9CEIAHbdzroksQS7EFM5pgWY7JlNYw115hK+A 9b5ZkvFrhSAG0yxD9w74O16eUGXGkuX0M23HY3Ax0Z89mbsNIoVc5RmW+k2NjkKb U+7CvEsJtkRB8kpXD+GeD8heKz8VQDA= -----END CERTIFICATE-----Generated at Mon May 12 06:43:35 2025 by rpki-client