$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa File: 4a20907c-8789-30e0-8b4e-fbd791134a9f.roa (raw, json) Hash identifier: Mn4cHUT9EOH05NkL3lUPCNvKemP8J0jKmk7i+GhQzSE= Subject key identifier: 6E:36:EA:F4:BA:61:30:A2:E6:57:7D:8A:9B:2F:3C:64:BC:4C:80:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A40120F87DF8034D01940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:12:0f:87:df:80:34:d0:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=05ff03c1-9247-4e50-b1e8-9e44736424bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:de:b5:04:05:80:45:15:2d:e1:87:e4:c5: 58:b0:45:61:df:36:e9:00:08:20:18:90:2b:9a:60: 97:01:66:b2:43:d2:a2:20:42:eb:8b:4d:e8:60:02: 8a:5e:14:39:79:e8:c8:97:f5:6b:e0:71:f4:5b:ea: a2:73:fa:d2:52:f2:2d:86:7f:9c:98:fa:a9:73:7b: 34:0d:a6:e2:b7:0d:20:38:f7:a8:00:ca:b3:57:be: a8:05:b0:18:e4:c4:a5:64:ea:3b:66:1f:d7:a4:7e: 8b:0d:0f:5c:fd:ce:20:88:f5:26:a0:db:ae:44:fc: b8:fb:34:08:ce:2a:ed:09:2f:f3:fa:9c:1f:e7:91: 06:ad:65:10:21:6b:6f:9c:07:04:8b:a1:82:77:27: f9:86:57:b7:38:39:2b:26:6a:d9:3d:ff:7e:b2:79: da:d9:b7:9b:04:6e:88:5f:32:55:ac:46:01:eb:bf: d9:dc:80:11:56:eb:8f:d3:81:82:67:fd:57:54:fe: 97:3a:04:90:98:4b:a3:f5:a2:50:67:cb:a0:84:ea: 35:31:00:32:17:3c:ec:4c:51:9c:92:93:0b:d5:03: a2:d0:0e:49:58:81:db:b9:4a:92:51:d9:cf:3e:0f: c6:6a:95:ec:83:94:ef:ee:78:d6:9c:a0:13:97:aa: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:36:EA:F4:BA:61:30:A2:E6:57:7D:8A:9B:2F:3C:64:BC:4C:80:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a20907c-8789-30e0-8b4e-fbd791134a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2e:81:f3:6d:96:ae:5c:22:32:9b:ad:27:dd:d9:b9:d5:15: 9e:cc:5d:db:aa:46:dd:bd:a2:48:96:a7:d5:3d:7d:47:6d:74: a6:a7:6f:65:bc:34:73:0c:9c:2d:39:aa:33:9d:39:b9:5b:be: c0:22:14:64:85:e5:a1:63:2b:fc:34:98:82:60:51:b4:c2:0b: 0b:c8:42:9e:b1:74:95:d1:9c:d6:5c:42:39:4f:5f:55:7d:16: b3:da:08:55:01:9d:d6:ea:b4:7b:2b:15:55:86:9c:fb:4a:22: 17:a7:25:94:03:26:0b:49:d0:e5:92:1d:b0:e5:69:b4:6f:7d: 38:a0:2f:1d:9a:9a:57:2c:34:04:2b:5d:3b:33:4b:74:a7:b1: ef:d0:d7:f7:49:ab:96:c5:67:c4:8f:c2:aa:d4:18:ab:ae:c9: 0d:0f:73:cd:d6:07:d5:a4:1c:a5:2e:df:b6:78:bd:29:be:1f: 27:4b:50:d0:59:12:3a:9f:91:3f:7b:b2:09:82:9a:ff:08:c3: 2e:40:07:7d:4e:7d:33:32:f5:a7:ea:73:d5:43:25:c9:f7:a7: 93:10:0c:dd:bf:5f:0f:32:90:fc:da:ef:ad:56:2d:bc:38:4d: 36:06:0a:9f:03:72:93:dc:cf:35:f3:a2:33:04:a2:76:12:12: 35:13:a6:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkASD4ffgDTQGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDVmZjAzYzEtOTI0Ny00ZTUwLWIxZTgtOWU0NDczNjQyNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKretQQFgEUVLeGH5MVYsEVh3zbpAAggGJAr mmCXAWayQ9KiIELri03oYAKKXhQ5eejIl/Vr4HH0W+qic/rSUvIthn+cmPqpc3s0 Dabitw0gOPeoAMqzV76oBbAY5MSlZOo7Zh/XpH6LDQ9c/c4giPUmoNuuRPy4+zQI zirtCS/z+pwf55EGrWUQIWtvnAcEi6GCdyf5hle3ODkrJmrZPf9+snna2bebBG6I XzJVrEYB67/Z3IARVuuP04GCZ/1XVP6XOgSQmEuj9aJQZ8ughOo1MQAyFzzsTFGc kpML1QOi0A5JWIHbuUqSUdnPPg/GapXsg5Tv7njWnKATl6o50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG426vS6YTCi5ld9ipsvPGS8TIBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyMDkwN2MtODc4OS0z MGUwLThiNGUtZmJkNzkxMTM0YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIugfNtlq5cIjKbrSfd2bnVFZ7MXduqRt29okiWp9U9fUdtdKanb2W8 NHMMnC05qjOdOblbvsAiFGSF5aFjK/w0mIJgUbTCCwvIQp6xdJXRnNZcQjlPX1V9 FrPaCFUBndbqtHsrFVWGnPtKIhenJZQDJgtJ0OWSHbDlabRvfTigLx2amlcsNAQr XTszS3Snse/Q1/dJq5bFZ8SPwqrUGKuuyQ0Pc83WB9WkHKUu37Z4vSm+HydLUNBZ EjqfkT97sgmCmv8Iwy5AB31OfTMy9afqc9VDJcn3p5MQDN2/Xw8ykPza761WLbw4 TTYGCp8DcpPczzXzojMEonYSEjUTpkU= -----END CERTIFICATE-----Generated at Sat May 10 09:53:02 2025 by rpki-client