$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa File: 4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa (raw, json) Hash identifier: lQLgPBYFfzgTKIJwSFk8EMiUafh3nu858DqwgA6ow3M= Subject key identifier: A3:38:82:22:D2:FD:10:68:38:B0:B3:DD:B4:87:E5:2D:71:1D:AA:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A143090F5B118BBB1DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.189.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:30:90:f5:b1:18:bb:b1:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=521dd970-f3e4-4397-8d5d-7ae8d1301c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:2e:c5:10:fa:0b:53:ec:99:92:25:37:e6: 78:d3:53:90:3a:fd:44:40:1f:ac:5a:ba:9f:30:e5: 61:3f:0b:31:80:67:2b:76:03:02:2c:d0:8a:85:d3: ab:d9:c6:61:55:d3:03:c1:95:ec:89:f8:00:1b:91: 0e:0a:bd:aa:7f:81:b2:26:cf:13:cb:2c:3b:30:85: 07:54:48:fd:b9:46:a0:87:00:12:02:03:2e:b4:1f: b7:4f:cf:b6:92:fb:39:49:cf:15:15:95:8b:a6:62: 39:85:9e:96:58:01:00:8a:c6:39:92:c7:91:f4:70: 65:62:14:ef:c9:26:b7:80:e7:e6:29:11:2d:2d:94: bf:08:9c:96:6d:f2:4f:1e:10:ee:9f:72:7c:b8:34: c0:d2:ea:10:84:71:85:e5:91:63:cc:40:3d:d5:d4: 30:f0:bd:df:07:11:db:01:50:c1:66:c1:2b:7d:80: b8:a6:ec:99:37:b7:e2:9b:3f:5f:71:63:e8:ee:e9: 6c:78:36:8b:eb:fe:6b:e7:d3:9d:57:f5:72:5e:fd: 4e:ab:6a:1f:52:8a:f2:4c:df:ba:09:45:f3:96:02: 6d:a7:27:52:72:f7:73:64:7a:32:bf:99:05:3c:5b: 35:fe:d5:ad:f9:38:11:2a:3d:aa:8a:57:93:ba:01: e2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:38:82:22:D2:FD:10:68:38:B0:B3:DD:B4:87:E5:2D:71:1D:AA:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f9289d2-98ca-3cbf-8f59-e1964ea684c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:22:88:42:42:03:08:4f:f9:f6:a6:cc:61:4e:c6:0d:13:41: c4:a9:43:4e:b6:42:82:a4:ab:1e:d6:6d:4f:96:90:28:22:a1: e6:8b:64:12:2a:69:01:dd:82:15:90:39:75:96:58:3c:c9:84: af:9c:de:8b:8a:db:60:c0:19:49:36:63:d7:9b:ef:99:28:83: 36:01:96:dd:c5:2f:b6:00:5b:4e:ec:4e:6a:d3:36:bf:9c:dd: 34:a0:89:f2:8a:a1:1c:94:20:40:9d:09:f9:19:06:ae:58:1c: e3:4b:c8:e2:e5:a4:d3:9b:2b:67:af:94:38:28:5a:68:c2:09: 81:f2:4e:6c:5c:d5:bf:b6:91:7c:1e:ff:00:cf:65:1f:53:7e: 33:f4:9c:7d:b8:e2:b6:f6:ae:52:aa:79:d9:bd:22:14:9d:b5: b8:2d:58:bd:2d:60:bd:97:57:fc:66:2e:24:7c:28:dc:3c:1f: 6e:e2:bb:28:7d:33:45:f1:a3:d9:1d:39:35:04:fe:7b:13:ee: 96:67:9d:a4:00:04:f9:a0:48:72:8f:14:9d:34:1e:59:37:57: 2f:77:25:9b:c0:a9:98:0d:80:c8:ae:aa:d3:a6:63:c1:1c:89: 61:fc:0e:27:82:99:63:6a:e4:b3:0f:a0:2f:cf:3d:13:2f:e2: 25:57:32:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhQwkPWxGLux2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTIxZGQ5NzAtZjNlNC00Mzk3LThkNWQtN2FlOGQxMzAxYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHcuxRD6C1PsmZIlN+Z401OQOv1EQB+sWrqf MOVhPwsxgGcrdgMCLNCKhdOr2cZhVdMDwZXsifgAG5EOCr2qf4GyJs8Tyyw7MIUH VEj9uUaghwASAgMutB+3T8+2kvs5Sc8VFZWLpmI5hZ6WWAEAisY5kseR9HBlYhTv ySa3gOfmKREtLZS/CJyWbfJPHhDun3J8uDTA0uoQhHGF5ZFjzEA91dQw8L3fBxHb AVDBZsErfYC4puyZN7fimz9fcWPo7ulseDaL6/5r59OdV/VyXv1Oq2ofUoryTN+6 CUXzlgJtpydScvdzZHoyv5kFPFs1/tWt+TgRKj2qileTugHiGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM4giLS/RBoOLCz3bSH5S1xHao5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5Mjg5ZDItOThjYS0z Y2JmLThmNTktZTE5NjRlYTY4NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMiiEJCAwhP+famzGFOxg0TQcSpQ062QoKkqx7WbU+WkCgioeaLZBIq aQHdghWQOXWWWDzJhK+c3ouK22DAGUk2Y9eb75kogzYBlt3FL7YAW07sTmrTNr+c 3TSgifKKoRyUIECdCfkZBq5YHONLyOLlpNObK2evlDgoWmjCCYHyTmxc1b+2kXwe /wDPZR9TfjP0nH244rb2rlKqedm9IhSdtbgtWL0tYL2XV/xmLiR8KNw8H27iuyh9 M0Xxo9kdOTUE/nsT7pZnnaQABPmgSHKPFJ00Hlk3Vy93JZvAqZgNgMiuqtOmY8Ec iWH8DieCmWNq5LMPoC/PPRMv4iVXMkE= -----END CERTIFICATE-----Generated at Sun May 11 22:49:15 2025 by rpki-client