$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa File: 4768268f-c950-35a6-997d-7ddaad2b5ac6.roa (raw, json) Hash identifier: SGX7DpK9B+imj2ohiU2x39SMmfJVuJdSA2YYAQfLAJk= Subject key identifier: 70:C7:E4:22:B1:25:AF:C6:77:07:A9:76:E5:EB:9D:BE:A0:57:9D:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA889EA0C4C41DEF1CB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.187.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:89:ea:0c:4c:41:de:f1:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=0913ac9e-139a-42c9-97e3-82ce03c9dae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:98:b8:ef:d0:2f:7d:76:f3:1f:dc:7e:d7: 03:e6:32:04:5d:3c:88:90:63:88:7f:cd:54:31:30: ce:dc:4f:48:57:a6:8d:29:f1:15:3a:9b:ff:bc:21: c1:1d:79:69:5b:88:b6:80:db:ff:d5:ad:75:30:03: 44:9b:8b:cc:9b:0d:5f:6c:40:90:a6:01:97:45:76: 30:4f:bf:2b:24:7f:88:36:b3:6c:9c:0e:03:7a:6a: bb:4a:55:a4:3c:84:49:ae:f8:dc:9f:bd:97:be:30: d8:55:b5:99:9e:d8:6d:a1:e7:6e:d1:6b:14:95:eb: 60:1e:c3:3b:aa:ad:23:ed:17:a4:10:41:5e:9a:cf: b1:4c:a7:eb:70:af:e5:f5:6d:cf:da:08:aa:de:7b: 98:f7:06:f4:0e:53:07:69:16:38:6c:88:49:40:22: f0:6c:92:3c:6f:c1:c5:43:29:c7:0c:34:13:55:1d: fb:ba:5f:f0:57:d6:03:0a:62:b7:98:be:3a:be:52: 9b:d9:b9:3a:57:9f:90:a8:c4:cb:56:6e:9b:96:15: cc:ad:4c:7d:04:c2:3b:2e:d7:95:8f:3c:5d:03:5c: d6:56:ad:c8:37:2e:0c:d2:94:1c:6d:28:d6:89:2c: 64:54:aa:b5:80:c4:8a:f9:37:ee:59:3f:bf:40:8f: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:E4:22:B1:25:AF:C6:77:07:A9:76:E5:EB:9D:BE:A0:57:9D:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4768268f-c950-35a6-997d-7ddaad2b5ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8f:d2:52:f2:22:24:4e:96:1d:4f:f4:b3:40:71:72:05:00: 66:7b:4b:d5:72:93:0a:5e:e2:96:6d:74:f3:2d:7f:25:00:27: 0c:e0:ee:d5:31:af:e7:b4:6c:9f:ba:e8:52:b8:7e:fe:66:b8: 05:d4:25:fa:f7:d6:98:26:ef:c1:0a:01:ea:cc:e4:41:bc:01: 51:51:cf:b7:9c:ca:d5:d7:2d:ef:88:a9:bf:1e:6d:30:c6:02: f9:8f:4f:a8:6e:c9:5e:83:e7:e8:92:2b:bd:7d:f9:a1:d4:8e: 6a:a1:7d:a9:07:4c:7d:67:6a:8c:91:2f:6f:22:93:b4:50:71: 3f:0b:96:f0:aa:96:c1:d6:5a:82:ac:ca:66:f9:9d:e3:09:d5: ae:f0:e1:50:d4:d7:aa:e8:93:78:b7:1e:50:56:c6:93:eb:24: 17:41:5d:0f:cb:e1:35:45:c4:ff:91:13:49:5a:3c:6f:ec:63: 12:3d:39:be:a8:07:f9:02:32:2f:f0:49:86:47:a1:a3:02:30: ba:da:7a:2d:a5:0f:e6:e8:92:1e:91:ee:6a:8e:86:65:1b:b9: d4:fd:c8:62:55:c3:0a:e5:d9:67:9f:b8:1c:ef:41:8c:86:9b: 15:26:c9:dc:93:8f:82:e2:02:62:31:26:ae:4e:6c:ce:d8:a5: 61:86:12:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6iJ6gxMQd7xy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MDkxM2FjOWUtMTM5YS00MmM5LTk3ZTMtODJjZTAzYzlkYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBuYuO/QL3128x/cftcD5jIEXTyIkGOIf81U MTDO3E9IV6aNKfEVOpv/vCHBHXlpW4i2gNv/1a11MANEm4vMmw1fbECQpgGXRXYw T78rJH+INrNsnA4Demq7SlWkPIRJrvjcn72XvjDYVbWZnthtoedu0WsUletgHsM7 qq0j7RekEEFems+xTKfrcK/l9W3P2giq3nuY9wb0DlMHaRY4bIhJQCLwbJI8b8HF QynHDDQTVR37ul/wV9YDCmK3mL46vlKb2bk6V5+QqMTLVm6blhXMrUx9BMI7LteV jzxdA1zWVq3INy4M0pQcbSjWiSxkVKq1gMSK+TfuWT+/QI8GEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDH5CKxJa/GdwepduXrnb6gV51BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDc2ODI2OGYtYzk1MC0z NWE2LTk5N2QtN2RkYWFkMmI1YWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbvCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6P0lLyIiROlh1P9LNAcXIFAGZ7S9Vykwpe4pZtdPMtfyUAJwzg7tUx r+e0bJ+66FK4fv5muAXUJfr31pgm78EKAerM5EG8AVFRz7ecytXXLe+Iqb8ebTDG AvmPT6huyV6D5+iSK719+aHUjmqhfakHTH1naoyRL28ik7RQcT8LlvCqlsHWWoKs ymb5neMJ1a7w4VDU16rok3i3HlBWxpPrJBdBXQ/L4TVFxP+RE0laPG/sYxI9Ob6o B/kCMi/wSYZHoaMCMLraei2lD+bokh6R7mqOhmUbudT9yGJVwwrl2WefuBzvQYyG mxUmydyTj4LiAmIxJq5ObM7YpWGGEuE= -----END CERTIFICATE-----Generated at Sat May 10 18:40:21 2025 by rpki-client