$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/179c5e98-29a5-34c1-83f8-9336ebcc90d5.roa File: 179c5e98-29a5-34c1-83f8-9336ebcc90d5.roa (raw, json) Hash identifier: 2HTPgfDMFIZAuz9ej4y+0NLPWSX5rV59cGe2Bv8qVmo= Subject key identifier: 2D:A5:06:EF:29:B3:4A:C7:CC:0B:8F:D7:D3:DE:4E:53:E7:53:14:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FE5CB0A56D089A918980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/179c5e98-29a5-34c1-83f8-9336ebcc90d5.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.213.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fe:5c:b0:a5:6d:08:9a:91:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a2582d84-61fb-446a-a84a-623dad9e896e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:c7:85:2e:d3:fc:2a:82:47:d2:1d:bf:84: b7:4c:0e:40:a9:d0:12:a2:91:0a:1c:9d:e4:c6:09: 71:79:fb:9b:c9:6f:c1:fc:0a:9e:5a:e6:1d:c0:9b: 42:34:f9:59:42:78:6c:30:81:c2:4e:92:6b:53:65: 51:b5:bf:7a:d1:c1:a6:b7:b3:de:3c:9b:8c:50:5b: 42:1a:b8:2c:2c:eb:0b:9d:80:8d:80:9a:64:d6:3d: 48:9f:95:9e:51:d7:17:8c:56:c4:6b:1c:01:88:d7: 6f:a1:5d:6d:9c:40:96:bd:8b:aa:5c:f6:04:67:45: 14:d6:11:20:42:99:84:0e:cf:0e:62:11:aa:17:76: 6e:ce:15:9f:fc:46:cb:5c:15:7e:a4:6c:a8:2d:5b: 2c:8f:20:0c:88:18:72:bd:83:f9:ac:9f:d0:f6:42: 81:2a:66:0a:ad:f0:fa:35:58:27:fb:c3:4e:68:9c: df:5a:a0:a2:31:35:e4:18:99:da:91:05:74:12:00: 1c:53:ba:a6:25:be:0a:f1:18:22:98:cd:bf:9d:d9: 1b:16:64:41:f6:32:50:b0:da:f9:d6:34:c5:54:ce: 7f:26:27:7b:c9:09:c7:2c:8c:a0:8b:b6:63:10:5b: 92:61:8a:e8:d2:c9:25:be:a0:f2:6a:db:bb:92:99: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A5:06:EF:29:B3:4A:C7:CC:0B:8F:D7:D3:DE:4E:53:E7:53:14:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/179c5e98-29a5-34c1-83f8-9336ebcc90d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:21:2e:61:6f:7a:cd:9f:15:b3:e2:67:d9:87:f6:10:5a:62: 54:9f:a5:38:af:e7:f5:4d:fc:c6:aa:fe:b8:3b:3b:3c:6a:64: 88:41:a0:7c:48:f3:68:ff:2d:22:44:17:ad:14:57:3e:fb:25: a1:53:e1:c9:9c:7b:b4:0d:1c:4a:a5:ff:ac:8b:37:5c:39:bb: 24:b6:7c:f9:27:3b:33:f2:21:c4:94:17:c3:b4:96:2f:c8:7f: ed:0b:aa:7b:e0:5b:94:2a:6e:e7:49:6a:db:71:73:25:23:0d: 74:07:2e:26:b3:66:31:ef:fb:61:74:38:05:6b:b6:3f:32:2e: 02:b9:e3:1e:ca:83:69:68:67:ff:d1:0c:16:4d:fa:48:64:8a: 2b:56:91:65:23:d4:c1:31:91:b8:33:3e:97:af:61:a9:9b:47: bd:d9:75:5b:79:49:18:bb:c0:dd:f1:e1:e5:25:f3:51:45:33: a8:c7:04:f1:f1:2d:23:53:d8:e6:56:e4:cf:c7:ab:b7:7b:0f: 1a:85:70:1c:e5:65:63:e2:99:e3:70:ae:64:d7:fd:ec:93:e9: be:10:93:f0:bb:e7:fa:4d:4d:3e:56:7d:44:c4:e0:92:81:27: c5:e3:d5:1f:bb:6a:46:fd:2b:bb:3c:46:54:78:20:0e:81:5e: b5:82:19:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf5csKVtCJqRiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTI1ODJkODQtNjFmYi00NDZhLWE4NGEtNjIzZGFkOWU4OTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkvHhS7T/CqCR9Idv4S3TA5AqdASopEKHJ3k xglxefubyW/B/AqeWuYdwJtCNPlZQnhsMIHCTpJrU2VRtb960cGmt7PePJuMUFtC GrgsLOsLnYCNgJpk1j1In5WeUdcXjFbEaxwBiNdvoV1tnECWvYuqXPYEZ0UU1hEg QpmEDs8OYhGqF3ZuzhWf/EbLXBV+pGyoLVssjyAMiBhyvYP5rJ/Q9kKBKmYKrfD6 NVgn+8NOaJzfWqCiMTXkGJnakQV0EgAcU7qmJb4K8RgimM2/ndkbFmRB9jJQsNr5 1jTFVM5/Jid7yQnHLIygi7ZjEFuSYYro0sklvqDyatu7kpk6hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2lBu8ps0rHzAuP19PeTlPnUxRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTc5YzVlOTgtMjlhNS0z NGMxLTgzZjgtOTMzNmViY2M5MGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkhLmFves2fFbPiZ9mH9hBaYlSfpTiv5/VN/Maq/rg7OzxqZIhBoHxI 82j/LSJEF60UVz77JaFT4cmce7QNHEql/6yLN1w5uyS2fPknOzPyIcSUF8O0li/I f+0LqnvgW5QqbudJattxcyUjDXQHLiazZjHv+2F0OAVrtj8yLgK54x7Kg2loZ//R DBZN+khkiitWkWUj1MExkbgzPpevYambR73ZdVt5SRi7wN3x4eUl81FFM6jHBPHx LSNT2OZW5M/Hq7d7DxqFcBzlZWPimeNwrmTX/eyT6b4Qk/C75/pNTT5WfUTE4JKB J8Xj1R+7akb9K7s8RlR4IA6BXrWCGRs= -----END CERTIFICATE-----Generated at Fri May 9 18:45:01 2025 by rpki-client