$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa File: 198dda29-6b51-3f88-873c-4b13cf752b89.roa (raw, json) Hash identifier: FFDEZ1Z/d4mO2npGB8WOijd5Sy0i7C4mPMfV2yMzPz4= Subject key identifier: 91:EA:5F:4B:5A:58:E3:8A:E6:96:7B:ED:87:57:C4:A1:A3:4E:85:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3F8518F589EC3A122560 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 166.102.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:85:18:f5:89:ec:3a:12:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fe503491-794b-46c1-aa10-4f90e5313a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:a0:81:0a:17:ad:cb:35:96:ab:83:61:4a: 03:75:ab:54:96:28:4d:55:1d:fb:7a:73:5b:c8:36: 83:39:d9:00:df:ed:fd:ea:eb:10:2c:82:1a:26:ac: f6:b4:9b:ae:2d:39:7f:29:4e:e1:5f:77:e4:97:d2: f0:1c:11:02:59:0c:8f:f0:1a:e3:59:17:6a:5c:ca: de:03:54:1a:07:1b:b1:6d:06:97:28:fc:21:65:5a: 70:d5:fb:08:7b:1d:54:b0:70:69:be:bb:ab:e2:37: 79:57:be:87:a0:92:97:e1:ef:de:2f:3a:41:f7:0c: 94:24:34:71:5b:6e:11:8e:11:27:c6:59:b8:e6:97: 45:0e:a8:f2:37:f7:cd:60:95:ae:ea:8a:df:a7:bf: aa:19:fb:f6:85:c2:d4:95:0d:d9:cf:c1:e9:69:11: ec:c4:dd:bb:4f:22:b0:ad:f4:50:74:9b:06:6a:e4: 9a:19:2b:cb:73:d9:5c:29:fb:58:d3:b4:39:74:f0: 41:a6:9a:1b:70:01:2d:92:79:10:98:0e:39:fd:ff: e8:43:5d:fe:af:c6:8a:ab:c4:c2:8c:46:b7:f7:41: 05:63:ee:6a:fd:b4:48:7c:33:d5:3f:80:88:f1:d8: 2b:0e:25:28:d8:fd:f1:41:69:72:cf:45:1b:c7:63: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EA:5F:4B:5A:58:E3:8A:E6:96:7B:ED:87:57:C4:A1:A3:4E:85:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/198dda29-6b51-3f88-873c-4b13cf752b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cd:db:92:8e:89:7f:49:ca:54:f9:e9:3f:7d:22:8b:87:e9: 45:d6:23:57:12:0a:99:aa:ca:d7:8a:50:c2:35:69:44:eb:28: 37:c6:67:b2:d3:a2:be:2a:9b:68:cb:b2:ba:c9:ef:10:4a:e5: d9:35:48:45:b1:18:45:1c:82:6b:66:44:73:dd:b5:b3:91:45: 2e:87:0c:81:dc:43:03:10:42:92:e4:8a:da:af:29:13:a7:09: 24:d4:9f:5e:d9:30:07:d8:92:d4:b6:3a:c5:70:66:21:7e:90: 14:13:2b:ab:e8:4a:17:43:0a:15:fb:ef:c4:5a:1e:52:15:3a: e5:64:6c:61:41:a2:14:84:79:a2:15:1f:14:f1:b6:76:4e:2b: 12:a7:ca:93:af:83:98:a9:d1:97:99:02:e7:0d:31:e2:a7:86: 1a:ba:b4:08:f3:fe:99:4c:49:8b:5d:ab:49:70:b7:39:c1:3b: 30:6d:c9:aa:96:48:e0:ea:85:97:a4:49:61:47:7b:ec:03:2c: 27:50:c8:d6:2d:9d:9d:0a:3d:c1:1b:56:f3:1f:60:de:9d:63: a3:b7:fb:47:de:26:d9:87:a2:83:e9:89:8a:3e:7f:50:03:90: f4:68:9c:74:28:7e:ef:c2:d2:d7:ae:27:2e:bf:01:b5:54:61: a8:8f:f0:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj+FGPWJ7DoSJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmU1MDM0OTEtNzk0Yi00NmMxLWFhMTAtNGY5MGU1MzEzYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSggQoXrcs1lquDYUoDdatUlihNVR37enNb yDaDOdkA3+396usQLIIaJqz2tJuuLTl/KU7hX3fkl9LwHBECWQyP8BrjWRdqXMre A1QaBxuxbQaXKPwhZVpw1fsIex1UsHBpvrur4jd5V76HoJKX4e/eLzpB9wyUJDRx W24RjhEnxlm45pdFDqjyN/fNYJWu6orfp7+qGfv2hcLUlQ3Zz8HpaRHsxN27TyKw rfRQdJsGauSaGSvLc9lcKftY07Q5dPBBppobcAEtknkQmA45/f/oQ13+r8aKq8TC jEa390EFY+5q/bRIfDPVP4CI8dgrDiUo2P3xQWlyz0Ubx2P20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHqX0taWOOK5pZ77YdXxKGjToWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTk4ZGRhMjktNmI1MS0z Zjg4LTg3M2MtNGIxM2NmNzUyYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpmbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHN25KOiX9JylT56T99IouH6UXWI1cSCpmqyteKUMI1aUTrKDfGZ7LT or4qm2jLsrrJ7xBK5dk1SEWxGEUcgmtmRHPdtbORRS6HDIHcQwMQQpLkitqvKROn CSTUn17ZMAfYktS2OsVwZiF+kBQTK6voShdDChX778RaHlIVOuVkbGFBohSEeaIV HxTxtnZOKxKnypOvg5ip0ZeZAucNMeKnhhq6tAjz/plMSYtdq0lwtznBOzBtyaqW SODqhZekSWFHe+wDLCdQyNYtnZ0KPcEbVvMfYN6dY6O3+0feJtmHooPpiYo+f1AD kPRonHQofu/C0teuJy6/AbVUYaiP8BY= -----END CERTIFICATE-----Generated at Wed May 7 19:18:31 2025 by rpki-client