$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa File: 6fded691-206d-367e-b48d-5819974e035b.roa (raw, json) Hash identifier: +JBrw+FxINhBuZ22vwc/XKp0YpJIAtTfmRHd+ce8yzY= Subject key identifier: 64:AE:D9:A6:B9:3E:86:11:88:1A:AC:72:23:D9:8E:42:5A:58:A4:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA87294B57B87C2075A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.187.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:72:94:b5:7b:87:c2:07:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=919b4c55-2a43-4396-954b-84b958fbff51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:67:12:a5:89:aa:bc:1d:05:94:f6:27:ca: 92:a2:15:33:b7:1d:1f:61:72:96:03:31:75:2b:9f: b7:ef:07:e5:92:65:74:47:d2:80:17:52:69:cc:d4: 3f:f4:a1:b6:37:6f:55:d7:58:f7:83:7c:d2:3f:12: 13:96:e8:72:aa:3d:75:59:32:0e:ab:1d:b2:e5:e3: 0d:1c:18:09:cb:df:24:e9:0e:d5:25:5f:e7:ab:58: b0:f8:60:d6:c8:85:98:89:36:fe:7d:13:89:0b:d3: 61:8f:d6:88:9a:1a:e3:6e:bb:6b:7a:8d:14:50:bf: 91:87:53:c7:51:45:03:bf:73:b8:90:1c:76:7b:fa: 09:0f:c2:f6:da:75:c9:d8:c1:3b:85:71:4a:8f:57: 49:e0:48:27:d0:da:43:fd:f3:e4:db:aa:f9:8f:5b: 6a:df:32:ee:25:75:c8:f2:81:37:2b:12:0b:35:ce: 83:79:46:34:c4:e9:52:63:68:13:9d:52:dc:00:b4: 6c:34:ae:8e:46:4b:f3:ef:b0:c0:24:25:1a:2a:a9: c9:52:35:42:6c:1e:e8:19:92:22:35:c5:d9:a8:0a: 45:c3:c1:c6:4b:e0:ce:97:bc:dc:a6:1f:a8:72:60: d8:9a:62:fe:46:b6:31:0b:93:d8:7a:a5:32:7a:09: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:D9:A6:B9:3E:86:11:88:1A:AC:72:23:D9:8E:42:5A:58:A4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6fded691-206d-367e-b48d-5819974e035b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:df:61:4a:4c:97:03:21:30:58:aa:c7:d4:34:3b:be:2e:59: ed:6a:61:77:f9:71:21:f6:b5:4d:96:e2:03:71:d8:35:1e:65: ef:00:d9:8f:c3:20:94:43:60:1e:c2:9e:2d:47:e2:31:96:9c: df:bf:2c:81:e2:4b:78:b8:97:73:13:9e:82:15:38:b5:b4:02: 0d:fb:f0:89:ae:1f:90:7c:fb:da:61:fc:72:34:47:fd:9a:1e: 2a:e0:1b:9d:5c:d6:ef:a8:f1:8f:28:49:8d:ef:74:f0:b7:43: f2:45:e8:fd:43:ed:ae:fb:22:fb:93:34:b3:04:0d:2a:75:35: 05:ed:46:42:70:0a:77:9d:ec:10:69:45:d8:94:f1:57:9d:ef: a4:b0:ff:77:c5:1a:63:1d:c4:a3:6f:b4:c1:99:a6:99:59:f0: 5c:1b:bd:7c:a0:b3:a8:6f:c1:eb:70:73:5c:ac:78:07:cb:d1: 05:f9:32:85:7d:54:09:2a:6a:0c:8d:6a:2e:97:a9:79:fd:32: 05:1c:2d:e8:bf:07:d9:69:08:7a:1a:a5:8b:c4:77:38:66:25: 7e:0f:f0:c9:9b:be:32:90:ed:51:02:ef:24:c1:7f:a5:5b:19: 1f:83:3a:79:39:32:30:bf:9b:b3:f8:25:6b:f7:ef:25:5f:fb: a2:fb:1f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6hylLV7h8IHWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk OTE5YjRjNTUtMmE0My00Mzk2LTk1NGItODRiOTU4ZmJmZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5nEqWJqrwdBZT2J8qSohUztx0fYXKWAzF1 K5+37wflkmV0R9KAF1JpzNQ/9KG2N29V11j3g3zSPxITluhyqj11WTIOqx2y5eMN HBgJy98k6Q7VJV/nq1iw+GDWyIWYiTb+fROJC9Nhj9aImhrjbrtreo0UUL+Rh1PH UUUDv3O4kBx2e/oJD8L22nXJ2ME7hXFKj1dJ4Egn0NpD/fPk26r5j1tq3zLuJXXI 8oE3KxILNc6DeUY0xOlSY2gTnVLcALRsNK6ORkvz77DAJCUaKqnJUjVCbB7oGZIi NcXZqApFw8HGS+DOl7zcph+ocmDYmmL+RrYxC5PYeqUyeglJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSu2aa5PoYRiBqsciPZjkJaWKQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmZkZWQ2OTEtMjA2ZC0z NjdlLWI0OGQtNTgxOTk3NGUwMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILfYUpMlwMhMFiqx9Q0O74uWe1qYXf5cSH2tU2W4gNx2DUeZe8A2Y/D IJRDYB7Cni1H4jGWnN+/LIHiS3i4l3MTnoIVOLW0Ag378ImuH5B8+9ph/HI0R/2a HirgG51c1u+o8Y8oSY3vdPC3Q/JF6P1D7a77IvuTNLMEDSp1NQXtRkJwCned7BBp RdiU8Ved76Sw/3fFGmMdxKNvtMGZpplZ8FwbvXygs6hvwetwc1yseAfL0QX5MoV9 VAkqagyNai6XqXn9MgUcLei/B9lpCHoapYvEdzhmJX4P8MmbvjKQ7VEC7yTBf6Vb GR+DOnk5MjC/m7P4JWv37yVf+6L7HwQ= -----END CERTIFICATE-----Generated at Sat May 10 22:08:35 2025 by rpki-client