$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa File: 3275fb34-b71c-3a20-bf7f-7e5042160434.roa (raw, json) Hash identifier: Ky0b56NIxzoTutElA1faleQGYJcmaaIIz96zILW6J68= Subject key identifier: 4C:29:50:21:2A:9D:01:1D:B4:F7:4F:CD:7D:01:3A:C2:DC:9E:A8:FF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F856EFDA76A6B8C7C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.213.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f8:56:ef:da:76:a6:b8:c7:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2ba689d1-30cc-4c03-ac3a-5ed53096e0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:b2:27:0d:98:96:27:88:9f:84:bc:c9:17: d8:bf:db:e0:66:43:f5:4b:5b:9d:6f:31:f6:e3:74: 48:d0:0c:bd:a7:a9:13:e8:a4:5d:82:be:b1:52:fa: 82:05:28:d9:90:f5:a5:bb:06:48:03:68:47:c6:ca: 99:f4:5c:98:78:de:34:3d:d5:9d:a2:37:ad:a6:4c: 06:c4:ae:e6:3a:8e:af:2b:76:86:09:bb:ab:69:86: 86:57:f1:41:f7:17:fb:50:1b:c6:bc:43:de:e6:e7: 5b:30:40:5a:a4:e4:9a:84:17:73:0c:fc:5e:f7:7b: 70:d6:83:d8:1c:bf:70:90:6b:70:68:87:51:8e:3a: 66:e7:f8:df:5d:bb:48:8a:3a:48:62:26:77:4b:91: 01:57:7a:08:92:61:6d:ef:97:85:06:ab:e2:57:6c: eb:77:89:8e:f9:1b:73:74:ec:2e:9f:01:60:96:d6: a4:27:2e:bc:ff:e4:5d:3d:1a:70:8d:a1:af:a6:01: 9e:93:31:36:1e:58:6d:b2:25:00:69:46:4c:67:3c: 90:46:49:27:4a:3e:6d:bd:66:22:9b:83:84:01:69: 5a:dc:69:98:f7:19:52:65:76:c7:c8:f8:b5:55:bd: d7:90:24:6c:fd:ca:c8:39:3f:5f:d5:86:f4:b2:f1: e3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:50:21:2A:9D:01:1D:B4:F7:4F:CD:7D:01:3A:C2:DC:9E:A8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3275fb34-b71c-3a20-bf7f-7e5042160434.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:80:c8:ca:53:93:0c:10:61:87:79:a7:1f:b0:8e:57:a9:49: cf:f3:56:51:6d:f8:19:b2:bc:4d:92:51:e7:ce:bd:14:80:32: 20:b3:5e:f0:05:15:97:4d:c0:06:16:a9:68:0d:59:3f:be:30: f0:f2:be:64:3d:a6:9a:91:1e:97:ab:4d:b7:6a:2d:12:06:8d: 29:73:9c:67:a8:d4:77:b9:28:6d:2b:e2:1b:6d:66:e0:86:14: 9d:c0:43:7d:11:29:64:0e:9c:85:9f:ad:2a:6a:c7:c6:ed:b3: d2:c8:1a:c1:7f:1e:49:40:87:67:7e:40:66:4c:7b:32:a0:7a: a9:55:cf:48:56:0e:70:fb:7d:6c:2f:18:49:41:bb:3c:b6:bd: d0:08:27:08:dc:48:5e:23:57:d0:01:b3:d3:30:60:9d:45:47: 99:5b:29:59:9f:9a:59:2e:45:8d:7a:37:4b:90:f4:25:5c:c5: f3:9d:66:54:e4:41:b5:e8:a7:42:17:96:b2:61:ae:8d:cc:ba: df:0d:d5:58:65:31:03:6b:82:e7:94:fe:30:d6:74:25:1c:e9: bf:67:64:d2:c1:e7:d9:0f:e0:57:f7:bc:27:c8:dc:4a:d0:71: b3:d4:0f:f4:8d:6c:5d:db:da:10:6b:82:e1:73:32:63:0b:9c: 02:24:b6:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfhW79p2prjHyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmJhNjg5ZDEtMzBjYy00YzAzLWFjM2EtNWVkNTMwOTZlMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNeyJw2YlieIn4S8yRfYv9vgZkP1S1udbzH2 43RI0Ay9p6kT6KRdgr6xUvqCBSjZkPWluwZIA2hHxsqZ9FyYeN40PdWdojetpkwG xK7mOo6vK3aGCburaYaGV/FB9xf7UBvGvEPe5udbMEBapOSahBdzDPxe93tw1oPY HL9wkGtwaIdRjjpm5/jfXbtIijpIYiZ3S5EBV3oIkmFt75eFBqviV2zrd4mO+Rtz dOwunwFgltakJy68/+RdPRpwjaGvpgGekzE2HlhtsiUAaUZMZzyQRkknSj5tvWYi m4OEAWla3GmY9xlSZXbHyPi1Vb3XkCRs/crIOT9f1Yb0svHjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwpUCEqnQEdtPdPzX0BOsLcnqj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzI3NWZiMzQtYjcxYy0z YTIwLWJmN2YtN2U1MDQyMTYwNDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOAyMpTkwwQYYd5px+wjlepSc/zVlFt+BmyvE2SUefOvRSAMiCzXvAF FZdNwAYWqWgNWT++MPDyvmQ9ppqRHperTbdqLRIGjSlznGeo1He5KG0r4httZuCG FJ3AQ30RKWQOnIWfrSpqx8bts9LIGsF/HklAh2d+QGZMezKgeqlVz0hWDnD7fWwv GElBuzy2vdAIJwjcSF4jV9ABs9MwYJ1FR5lbKVmfmlkuRY16N0uQ9CVcxfOdZlTk QbXop0IXlrJhro3Mut8N1VhlMQNrgueU/jDWdCUc6b9nZNLB59kP4Ff3vCfI3ErQ cbPUD/SNbF3b2hBrguFzMmMLnAIkth8= -----END CERTIFICATE-----Generated at Sun May 11 09:29:18 2025 by rpki-client