$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa File: 4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa (raw, json) Hash identifier: T9qGLlrILsWtinm+e1NmX8gp8ioLB2aPzqudbFskt6o= Subject key identifier: 87:D1:69:69:F0:EE:99:D7:81:B8:A3:16:7B:A9:0D:ED:7F:58:3E:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA85AC07BC7FE89BDEC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.186.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:5a:c0:7b:c7:fe:89:bd:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=bd63cd47-cb46-4aca-a7e0-8daaa32042f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e4:86:8d:bf:15:cd:c3:7b:a2:03:d1:f0:56: 95:70:63:76:c9:47:8d:66:df:d4:00:f7:0c:62:1e: 35:68:6b:b0:9f:13:ba:0f:5d:f6:f0:41:4e:d8:60: ea:a8:ef:33:1a:d1:3b:a8:3b:39:92:6a:e2:e8:eb: c8:ad:d1:54:f1:75:8f:7b:b5:08:f6:1d:0e:2b:9c: 34:f6:11:97:9b:f7:e3:51:9d:fc:69:33:29:8a:67: f8:7a:1b:c2:63:4b:32:81:ec:db:e6:fe:43:62:02: c5:92:de:7c:9f:40:99:ab:3c:04:e3:8e:95:8e:2b: be:1a:b8:1e:14:ee:34:8c:d0:20:6d:11:5c:2b:be: e6:86:22:ce:c4:a8:9a:75:b3:fc:d0:c1:04:6b:2a: 7d:76:68:a5:51:82:d5:92:5c:6a:3e:70:bb:9f:76: 72:3c:db:e7:61:c8:29:5a:35:78:47:f1:93:3f:79: bb:5b:a2:ec:fd:20:d0:10:7c:0d:a5:7b:0a:a8:47: cf:e9:a1:f2:05:99:f5:2f:c7:88:7c:3d:4c:a3:17: ed:6b:af:c9:35:0c:fa:71:4e:9c:dd:0f:07:d5:cb: 58:a6:4f:d4:3c:fd:95:89:10:a5:cf:de:f9:e6:ed: 59:8e:d4:49:fd:7a:63:c0:f0:7e:9f:72:a7:fd:6c: 42:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D1:69:69:F0:EE:99:D7:81:B8:A3:16:7B:A9:0D:ED:7F:58:3E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cbad804-a322-3d7f-97d0-82cb1a24bf4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d4:ba:af:81:cf:6a:f5:9c:24:77:8c:fc:1a:b5:fc:ac:50: 1d:3d:73:98:45:6a:d0:64:0e:72:a0:37:f3:6a:54:a2:88:21: 30:b1:08:7f:ed:49:13:c0:e1:5d:e7:a4:6b:13:c3:d0:86:50: 11:4a:bb:a4:66:2a:8c:5f:3c:55:ef:9a:4a:51:0b:9c:79:99: 20:7c:33:b5:7d:0a:be:dc:43:8a:1e:fb:a7:0e:4f:58:03:34: 5a:94:1c:8a:58:03:0a:a3:55:87:c6:08:ca:15:13:1d:81:5d: ae:36:a8:bb:90:1e:57:f1:58:75:8c:64:e1:99:81:3a:5c:3c: ca:8c:b7:ad:ca:c5:7c:22:87:f0:ed:69:7c:25:9f:0c:ce:a2: d1:7e:c6:19:cc:72:4c:a4:71:97:09:ed:fb:62:eb:3f:43:01: 55:1b:62:4c:4c:a4:79:43:be:e2:1c:f8:18:f8:40:3d:54:44: 8e:95:b3:25:b0:2a:f0:9f:92:d5:c6:7a:53:b7:9a:8f:df:6d: c3:1e:92:2a:86:63:5a:89:5f:f7:46:94:40:6a:80:ff:cd:54: 55:93:e5:7f:de:1a:0e:00:1d:cb:91:75:e0:50:1d:b0:8d:a3: 51:77:37:dd:83:82:c0:cf:c6:f7:8e:ea:15:9d:fa:45:58:40: 9d:c6:4c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6hawHvH/om97AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YmQ2M2NkNDctY2I0Ni00YWNhLWE3ZTAtOGRhYWEzMjA0MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheSGjb8VzcN7ogPR8FaVcGN2yUeNZt/UAPcM Yh41aGuwnxO6D1328EFO2GDqqO8zGtE7qDs5kmri6OvIrdFU8XWPe7UI9h0OK5w0 9hGXm/fjUZ38aTMpimf4ehvCY0sygezb5v5DYgLFkt58n0CZqzwE446Vjiu+Grge FO40jNAgbRFcK77mhiLOxKiadbP80MEEayp9dmilUYLVklxqPnC7n3ZyPNvnYcgp WjV4R/GTP3m7W6Ls/SDQEHwNpXsKqEfP6aHyBZn1L8eIfD1Moxfta6/JNQz6cU6c 3Q8H1ctYpk/UPP2ViRClz9755u1ZjtRJ/XpjwPB+n3Kn/WxC5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfRaWnw7pnXgbijFnupDe1/WD7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNiYWQ4MDQtYTMyMi0z ZDdmLTk3ZDAtODJjYjFhMjRiZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Uuq+Bz2r1nCR3jPwatfysUB09c5hFatBkDnKgN/NqVKKIITCxCH/t SRPA4V3npGsTw9CGUBFKu6RmKoxfPFXvmkpRC5x5mSB8M7V9Cr7cQ4oe+6cOT1gD NFqUHIpYAwqjVYfGCMoVEx2BXa42qLuQHlfxWHWMZOGZgTpcPMqMt63KxXwih/Dt aXwlnwzOotF+xhnMckykcZcJ7fti6z9DAVUbYkxMpHlDvuIc+Bj4QD1URI6VsyWw KvCfktXGelO3mo/fbcMekiqGY1qJX/dGlEBqgP/NVFWT5X/eGg4AHcuRdeBQHbCN o1F3N92DgsDPxveO6hWd+kVYQJ3GTBY= -----END CERTIFICATE-----Generated at Wed May 7 09:11:22 2025 by rpki-client