$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa File: 2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa (raw, json) Hash identifier: snZRFyCxx52TmTlxUgMZ8jHsCvjx8l9rQ7i7yP5lyuM= Subject key identifier: 4D:1F:30:5A:3D:0E:52:DA:7C:A7:18:BE:D8:F1:66:0E:57:75:DB:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A406AF2DC1FE5EE1621FC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.221.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:6a:f2:dc:1f:e5:ee:16:21:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=388b8f2b-ea72-41e8-9a06-b00930f76768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9a:61:c9:ba:99:e8:b2:60:d7:58:6f:ab:2d: 10:bc:05:13:cb:c6:88:0a:4d:6c:94:bb:16:2f:8f: 23:99:68:0a:f0:76:07:69:22:94:60:f9:71:6e:fb: 47:66:8a:a8:1c:0c:19:35:8d:07:73:8e:a4:07:62: 4f:fc:ef:46:de:17:e7:4d:39:33:ae:a0:39:23:19: 0b:45:0b:87:22:cb:b9:85:4b:9c:85:eb:1d:b4:47: 1d:90:a3:a8:5f:fe:aa:a9:c0:5e:b7:9b:97:da:6b: c8:66:08:9f:bc:65:52:b4:0b:95:f3:69:0b:20:7c: a2:31:26:59:ce:76:19:44:b7:ec:b6:86:1c:76:55: a3:2a:b3:35:7e:f8:29:24:2c:79:ee:80:21:98:f6: e6:50:37:0d:e7:c8:92:4c:e6:40:50:9b:8e:91:2e: 4c:c5:1d:2c:29:66:db:2e:d5:02:1a:98:5b:c7:db: 23:c9:7c:c8:7e:a8:20:7e:e9:e5:0d:8f:c8:37:a9: da:fa:24:23:36:e0:d6:0b:fe:32:d2:09:62:33:ec: 4c:41:99:e2:d3:8c:76:55:54:9d:03:46:c7:89:76: 32:1a:f7:19:0d:3e:b3:01:d9:83:7f:7c:85:dd:7d: 84:7f:f9:8d:7e:7b:a0:56:9a:dd:63:bb:48:b8:c6: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:30:5A:3D:0E:52:DA:7C:A7:18:BE:D8:F1:66:0E:57:75:DB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e82b07b-7fa0-3cad-8572-c0e6447403dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:f2:c0:5d:87:56:db:9a:4a:16:46:fb:a1:d4:2f:a4:16:3e: 47:90:4a:98:db:78:fc:a2:40:a6:76:b6:a3:8d:c2:fc:27:2f: 81:9a:e2:89:49:44:a5:7e:2a:71:f1:03:8b:11:26:68:87:dc: 26:6e:88:8e:60:8a:0c:46:f9:75:b2:11:ef:ce:98:c2:c0:80: c6:6e:65:c9:e3:80:a0:47:63:05:af:e3:49:94:b8:4c:b8:26: c0:46:8a:18:1f:40:ef:01:b6:86:80:73:78:93:49:db:bb:2f: 2f:0f:6c:36:b9:9a:8a:2c:3a:4f:58:61:8c:b3:ad:6a:73:6f: a8:b7:8e:31:fa:83:70:ed:2d:d3:5a:a4:6b:c5:55:56:28:82: 94:bb:ae:44:0a:a9:e5:18:31:ca:7a:26:82:43:55:14:34:65: fc:22:d5:c0:e7:d3:34:34:f2:86:40:c9:4b:17:60:96:9d:70: 0b:9e:36:a9:6a:7a:fc:6f:95:b9:4a:53:26:b7:08:2d:8e:e2: 81:30:b0:63:c8:f3:bc:94:1e:e8:ab:bb:36:8d:08:cc:30:ec: d1:26:fa:a5:9f:52:8b:e0:af:9b:b5:86:b5:a1:3b:57:78:9c: 67:4b:e5:6b:75:ca:9f:07:ec:cf:42:03:d3:82:82:a9:50:b4: 13:e9:c0:8f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkBq8twf5e4WIfwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Mzg4YjhmMmItZWE3Mi00MWU4LTlhMDYtYjAwOTMwZjc2NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJphybqZ6LJg11hvqy0QvAUTy8aICk1slLsW L48jmWgK8HYHaSKUYPlxbvtHZoqoHAwZNY0Hc46kB2JP/O9G3hfnTTkzrqA5IxkL RQuHIsu5hUuchesdtEcdkKOoX/6qqcBet5uX2mvIZgifvGVStAuV82kLIHyiMSZZ znYZRLfstoYcdlWjKrM1fvgpJCx57oAhmPbmUDcN58iSTOZAUJuOkS5MxR0sKWbb LtUCGphbx9sjyXzIfqggfunlDY/IN6na+iQjNuDWC/4y0gliM+xMQZni04x2VVSd A0bHiXYyGvcZDT6zAdmDf3yF3X2Ef/mNfnugVprdY7tIuMZmmwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFE0fMFo9DlLafKcYvtjxZg5XddubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmU4MmIwN2ItN2ZhMC0z Y2FkLTg1NzItYzBlNjQ0NzQwM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArd0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUvLAXYdW25pKFkb7odQvpBY+R5BKmNt4/KJApna2o43C/CcvgZriiUlE pX4qcfEDixEmaIfcJm6IjmCKDEb5dbIR786YwsCAxm5lyeOAoEdjBa/jSZS4TLgm wEaKGB9A7wG2hoBzeJNJ27svLw9sNrmaiiw6T1hhjLOtanNvqLeOMfqDcO0t01qk a8VVViiClLuuRAqp5RgxynomgkNVFDRl/CLVwOfTNDTyhkDJSxdglp1wC542qWp6 /G+VuUpTJrcILY7igTCwY8jzvJQe6Ku7No0IzDDs0Sb6pZ9Si+Cvm7WGtaE7V3ic Z0vla3XKnwfsz0ID04KCqVC0E+nAjw== -----END CERTIFICATE-----Generated at Sat May 10 02:54:44 2025 by rpki-client