$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa File: 5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa (raw, json) Hash identifier: Afxj38rdlqMsWkpeQq+vqkiejJbwuHrYwmu3FZJi2Bo= Subject key identifier: 3E:EF:56:B7:0E:0A:AE:4E:53:CF:1C:AF:09:5C:12:DB:14:B5:68:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0C53FA0BC5CC6D252080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.184.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0c:53:fa:0b:c5:cc:6d:25:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=1710215d-20fd-4740-94b5-4b7c5e1971e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:a5:16:40:99:b5:7b:0f:e3:74:3b:18:9f: 6e:1d:8c:17:03:1c:13:f4:a8:af:99:1e:2b:8d:34: cf:57:1c:6e:5b:00:77:74:7a:7a:80:54:69:2a:8c: 5d:a0:9c:f2:38:cc:88:4b:eb:17:4e:f3:61:77:86: 09:69:8f:60:7e:ef:7f:d7:74:eb:e0:65:02:3e:18: c0:52:ca:ea:4d:c4:cd:08:49:fd:dc:56:6c:45:4d: ca:94:29:e3:2e:d9:71:97:77:59:07:28:83:66:f3: b8:2e:ba:0c:fb:28:91:8a:c8:0c:4c:91:d6:48:6b: 15:39:b1:e8:e2:ff:39:c0:b0:54:75:3b:f2:4e:64: 35:8f:ea:75:90:c2:a7:d4:a4:2e:02:2e:50:af:ad: 26:f6:65:26:2c:1a:ee:18:95:57:0f:be:20:e4:65: f8:26:be:a7:e6:d7:e8:ad:2a:e3:b6:66:fd:89:0c: fa:0b:04:9d:b4:4c:8f:08:96:be:ad:8c:10:84:6d: 83:25:42:c4:38:ed:97:48:61:1f:80:e9:cd:90:72: d5:f2:4e:a2:d5:3f:73:b8:73:2b:72:5e:c0:07:36: 91:3f:23:7f:41:19:d6:09:b2:57:37:6d:cc:97:fe: 57:ca:be:77:2f:3f:f7:2a:db:d2:f8:78:e7:92:6e: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:56:B7:0E:0A:AE:4E:53:CF:1C:AF:09:5C:12:DB:14:B5:68:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f07d9a9-b9b5-3762-81cf-dac1473000f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:7c:03:b0:47:63:36:37:73:f8:66:d2:72:ce:d5:54:f2:a0: 18:d1:a9:e1:83:bd:ad:dc:6d:27:ea:2f:95:16:c5:8e:9a:ef: ea:fc:03:43:8b:66:81:8f:8f:3d:d5:2c:46:4a:3d:44:db:5a: 85:d6:f8:6d:c6:a5:29:0c:ba:7b:ec:84:fc:0d:6d:b9:69:b0: 9d:cd:96:d1:f4:7d:7f:0b:d8:e6:ea:b2:c2:4a:57:7b:06:43: a6:3b:a8:97:41:73:77:66:fa:3c:8f:87:65:e6:cb:b7:59:a1: b3:f0:21:f8:28:0f:37:47:86:6b:3b:f5:e2:ac:93:69:58:ad: 5c:b4:5c:66:31:a1:f4:20:e9:48:e0:60:d0:28:f2:53:b3:32: c2:46:33:2d:0d:3e:2f:63:ca:99:e7:7d:03:34:6f:b4:8d:0e: 2b:3e:fd:2c:c3:37:2f:cf:25:13:8a:a0:35:0f:58:cc:88:7e: d9:60:64:b4:a8:7a:50:ee:f5:bc:27:5a:8d:1f:42:f5:8a:dc: 8d:80:0d:27:43:3c:7a:a3:59:92:c6:6b:a0:cd:23:de:ee:36: c0:58:02:e1:44:a5:a8:b5:28:f8:95:ea:03:d2:bd:b5:46:f1: 12:94:b5:73:8c:d1:ee:e5:38:b9:5a:91:ea:bf:85:e8:e7:82: 10:36:00:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgxT+gvFzG0lIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MTcxMDIxNWQtMjBmZC00NzQwLTk0YjUtNGI3YzVlMTk3MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCalFkCZtXsP43Q7GJ9uHYwXAxwT9KivmR4r jTTPVxxuWwB3dHp6gFRpKoxdoJzyOMyIS+sXTvNhd4YJaY9gfu9/13Tr4GUCPhjA UsrqTcTNCEn93FZsRU3KlCnjLtlxl3dZByiDZvO4LroM+yiRisgMTJHWSGsVObHo 4v85wLBUdTvyTmQ1j+p1kMKn1KQuAi5Qr60m9mUmLBruGJVXD74g5GX4Jr6n5tfo rSrjtmb9iQz6CwSdtEyPCJa+rYwQhG2DJULEOO2XSGEfgOnNkHLV8k6i1T9zuHMr cl7ABzaRPyN/QRnWCbJXN23Ml/5Xyr53Lz/3KtvS+Hjnkm7dHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7vVrcOCq5OU88crwlcEtsUtWjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYwN2Q5YTktYjliNS0z NzYyLTgxY2YtZGFjMTQ3MzAwMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbgIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI18A7BHYzY3c/hm0nLO1VTyoBjRqeGDva3cbSfqL5UWxY6a7+r8A0OL ZoGPjz3VLEZKPUTbWoXW+G3GpSkMunvshPwNbblpsJ3NltH0fX8L2ObqssJKV3sG Q6Y7qJdBc3dm+jyPh2Xmy7dZobPwIfgoDzdHhms79eKsk2lYrVy0XGYxofQg6Ujg YNAo8lOzMsJGMy0NPi9jypnnfQM0b7SNDis+/SzDNy/PJROKoDUPWMyIftlgZLSo elDu9bwnWo0fQvWK3I2ADSdDPHqjWZLGa6DNI97uNsBYAuFEpai1KPiV6gPSvbVG 8RKUtXOM0e7lOLlakeq/hejnghA2AKM= -----END CERTIFICATE-----Generated at Sun May 11 02:10:10 2025 by rpki-client