$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa File: 358ede57-f871-3c57-b2bb-84395dbee947.roa (raw, json) Hash identifier: pFLEyFvwCF8rhd4soXAJ4W1HD4J7HvyvEAyglfFUCqs= Subject key identifier: 67:F1:16:13:D0:49:E4:70:D6:73:1B:53:55:0A:5C:FE:BF:17:8D:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F5C86A8E745752811DE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.187.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5c:86:a8:e7:45:75:28:11:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d4d836b2-87d2-449d-b874-78637af54484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:fd:62:a9:1e:8b:8c:16:5e:ff:5d:95:81: cf:f9:33:65:81:06:d8:75:f8:08:d0:3c:fb:40:06: 70:5e:ad:41:5a:1e:2a:15:4e:b1:c4:89:8c:30:94: 6d:61:4d:a4:e7:c0:54:11:9e:96:3d:45:7c:40:05: 66:99:78:1e:53:9d:84:82:57:62:5f:1d:61:0f:3a: 99:15:5f:f2:cf:05:9c:7c:30:3a:c1:2d:e2:61:70: 7e:00:56:b5:19:53:71:9f:ec:ce:25:84:b5:82:62: 21:e4:38:64:ba:f1:8f:b5:01:ac:c8:23:5d:e1:74: d5:52:a6:95:ba:ca:fb:c8:f8:7c:b8:2c:a0:02:d4: 18:26:a4:f3:e1:91:31:51:22:23:1b:e7:4c:4f:f6: 1d:9e:79:ef:f5:29:85:25:f2:41:d9:70:4a:54:81: cb:f0:a1:a3:6e:33:e3:dc:3b:d9:de:f3:61:ea:8e: 57:37:f3:1f:d0:30:d6:0e:d8:a9:6a:1d:73:1c:4d: 93:8f:2a:67:e3:f9:05:df:13:60:80:58:6a:b2:d8: fc:5d:fb:3b:a1:08:b1:af:6b:75:29:1e:6f:1b:fa: c0:14:c2:ab:23:8e:be:d8:e5:2c:d8:3f:81:12:f1: e3:bb:54:d7:f0:7e:4b:3e:59:91:c5:dd:f5:e6:87: 8e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F1:16:13:D0:49:E4:70:D6:73:1B:53:55:0A:5C:FE:BF:17:8D:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/358ede57-f871-3c57-b2bb-84395dbee947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e8:91:b7:c9:f1:a9:dc:00:c4:10:05:07:dc:2d:33:7b:d9: 37:13:db:92:b2:ad:a3:a2:86:0b:ab:fa:38:1e:f9:83:15:27: 72:80:02:8c:dd:df:77:9c:53:66:40:e9:c8:63:02:dd:42:6d: a8:eb:58:31:4d:58:1b:2d:b6:0e:c5:8e:18:2c:8a:d9:e0:15: dd:6b:5a:40:57:81:87:93:9c:cb:f5:8c:cf:fb:59:5e:42:67: a1:81:07:c1:73:47:34:b3:c5:97:19:3b:fb:ab:df:77:d4:64: e1:22:25:31:83:e9:ec:53:f2:b6:9d:70:25:a6:1e:01:0f:6b: fe:d5:fb:2b:43:95:4a:af:27:5c:05:53:cb:e6:08:be:8f:5c: 19:0a:3a:78:36:01:ef:b6:66:ff:1c:a1:1f:df:ab:cc:3e:a9: f6:5b:4f:7a:74:96:a9:48:de:08:5e:65:30:2e:e6:bc:53:74: 77:9e:ca:5f:b2:e5:d7:0d:32:e7:99:d3:e9:a4:2a:9b:03:7d: b9:69:f6:86:d3:80:fb:40:2f:94:ca:05:79:be:a0:ae:35:7e: 62:db:34:3f:ad:3a:5c:dc:68:4a:13:5f:aa:04:30:2f:05:a8: bf:74:d9:4b:53:af:b9:6d:63:64:6b:6d:bf:ed:08:77:4d:8b: 82:b2:00:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1yGqOdFdSgR3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDRkODM2YjItODdkMi00NDlkLWI4NzQtNzg2MzdhZjU0NDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv39Yqkei4wWXv9dlYHP+TNlgQbYdfgI0Dz7 QAZwXq1BWh4qFU6xxImMMJRtYU2k58BUEZ6WPUV8QAVmmXgeU52EgldiXx1hDzqZ FV/yzwWcfDA6wS3iYXB+AFa1GVNxn+zOJYS1gmIh5DhkuvGPtQGsyCNd4XTVUqaV usr7yPh8uCygAtQYJqTz4ZExUSIjG+dMT/Ydnnnv9SmFJfJB2XBKVIHL8KGjbjPj 3DvZ3vNh6o5XN/Mf0DDWDtipah1zHE2Tjypn4/kF3xNggFhqstj8Xfs7oQixr2t1 KR5vG/rAFMKrI46+2OUs2D+BEvHju1TX8H5LPlmRxd315oeOaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfxFhPQSeRw1nMbU1UKXP6/F438MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU4ZWRlNTctZjg3MS0z YzU3LWIyYmItODQzOTVkYmVlOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHokbfJ8ancAMQQBQfcLTN72TcT25KyraOihgur+jge+YMVJ3KAAozd 33ecU2ZA6chjAt1CbajrWDFNWBsttg7FjhgsitngFd1rWkBXgYeTnMv1jM/7WV5C Z6GBB8FzRzSzxZcZO/ur33fUZOEiJTGD6exT8radcCWmHgEPa/7V+ytDlUqvJ1wF U8vmCL6PXBkKOng2Ae+2Zv8coR/fq8w+qfZbT3p0lqlI3gheZTAu5rxTdHeeyl+y 5dcNMueZ0+mkKpsDfblp9obTgPtAL5TKBXm+oK41fmLbND+tOlzcaEoTX6oEMC8F qL902UtTr7ltY2Rrbb/tCHdNi4KyAN0= -----END CERTIFICATE-----Generated at Mon May 12 18:53:07 2025 by rpki-client