$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa File: 741043d5-25b2-3b17-899c-4e53d971fee2.roa (raw, json) Hash identifier: UO+L9Qi6oIFKSwBZ+4JSZ/ypEODuhVgLxBCYYsCsw7g= Subject key identifier: D8:A3:14:23:5A:7D:3F:8F:DA:0E:F5:9B:C1:8D:54:91:16:B5:F2:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A40791637BC22A5473300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.221.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:79:16:37:bc:22:a5:47:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7d2c4b40-11ac-41dc-9610-2bd42da2d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:ff:95:c0:6f:6f:22:90:ce:ef:81:f2:67: 2f:9a:99:4b:0e:a9:03:3a:fd:96:04:fe:52:bf:a2: 15:e9:e3:fb:f4:61:d7:21:93:3e:fe:74:3a:a7:7e: 5c:92:b7:da:f1:98:e8:13:9a:8a:eb:2c:db:84:82: 52:92:da:e0:bd:8e:36:18:c5:8d:ad:a6:13:22:21: aa:c0:f0:b1:e1:b0:2b:8b:18:3e:29:d7:da:2e:2c: d8:07:ed:8c:a3:f6:d9:56:3b:02:66:34:95:bf:b3: b7:5f:ea:a3:6d:5c:72:87:2b:26:fb:45:9c:84:4c: d9:a1:62:5a:1b:dd:92:7b:30:99:45:1d:da:e0:3a: c8:59:98:55:d4:1c:94:8c:df:b4:f5:54:9c:c7:8d: 3d:d1:64:4e:4e:1c:52:23:8e:bc:1a:7f:5f:9c:f4: 0d:00:5a:1c:c2:05:8f:a5:36:92:6b:90:d4:d3:2b: d1:20:58:46:16:60:25:f6:f8:32:11:83:13:70:26: 46:1f:65:15:65:8f:e7:a7:43:4f:4a:12:13:20:16: 19:a1:33:bc:60:0c:e6:fd:91:ba:89:fa:3d:7e:27: 09:58:9a:dc:ba:2b:ea:03:de:7a:7e:4f:18:bc:e9: 63:cd:14:e0:2f:da:2b:77:7a:d1:e6:33:fd:cc:20: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A3:14:23:5A:7D:3F:8F:DA:0E:F5:9B:C1:8D:54:91:16:B5:F2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/741043d5-25b2-3b17-899c-4e53d971fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.221.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9b:30:31:9e:fb:23:9e:40:f1:80:7b:85:54:1b:dc:b4:0a: 1b:79:3d:12:22:4a:c5:29:e0:85:9f:6a:29:25:bd:6e:db:1f: e7:45:8e:75:e0:12:06:64:01:38:94:96:c6:6e:2b:d0:87:42: 47:fc:52:7b:c8:90:91:19:4f:e6:03:d8:0a:2c:62:70:8c:3c: 07:0f:cd:52:f8:69:20:9d:27:cd:75:3c:a0:f4:4b:a9:11:f1: 9b:97:1a:84:d9:ce:47:16:0c:18:8e:0b:12:9c:a0:5b:9a:ab: 64:21:65:49:38:7e:e9:2e:2e:1b:81:33:17:4c:05:20:7c:0f: d0:6d:d7:1c:bf:b9:87:9f:95:80:fb:b6:88:44:17:57:a1:93: f8:1d:ac:31:48:82:7b:bb:64:94:ea:5a:0a:55:ca:78:92:b4: 4d:62:c7:26:b0:46:72:7a:ef:dc:1b:44:07:d5:0e:79:1b:8c: 2d:68:76:0a:25:48:7c:f7:6a:50:a0:8e:20:5b:33:f5:7e:de: 35:36:cf:34:7d:46:a7:e5:26:90:f2:ad:ad:77:fd:57:aa:70: a1:e9:2e:df:d0:79:82:13:60:f2:36:66:a6:8f:83:a0:da:ac: fd:3d:77:d2:1c:74:4f:b4:7b:55:78:76:50:75:01:3d:16:11: 40:40:5a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkB5Fje8IqVHMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2QyYzRiNDAtMTFhYy00MWRjLTk2MTAtMmJkNDJkYTJkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC7/lcBvbyKQzu+B8mcvmplLDqkDOv2WBP5S v6IV6eP79GHXIZM+/nQ6p35ckrfa8ZjoE5qK6yzbhIJSktrgvY42GMWNraYTIiGq wPCx4bArixg+KdfaLizYB+2Mo/bZVjsCZjSVv7O3X+qjbVxyhysm+0WchEzZoWJa G92SezCZRR3a4DrIWZhV1ByUjN+09VScx4090WROThxSI468Gn9fnPQNAFocwgWP pTaSa5DU0yvRIFhGFmAl9vgyEYMTcCZGH2UVZY/np0NPShITIBYZoTO8YAzm/ZG6 ifo9ficJWJrcuivqA956fk8YvOljzRTgL9ord3rR5jP9zCBMtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNijFCNafT+P2g71m8GNVJEWtfLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQxMDQzZDUtMjViMi0z YjE3LTg5OWMtNGU1M2Q5NzFmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKbMDGe+yOeQPGAe4VUG9y0Cht5PRIiSsUp4IWfaiklvW7bH+dFjnXg EgZkATiUlsZuK9CHQkf8UnvIkJEZT+YD2AosYnCMPAcPzVL4aSCdJ811PKD0S6kR 8ZuXGoTZzkcWDBiOCxKcoFuaq2QhZUk4fukuLhuBMxdMBSB8D9Bt1xy/uYeflYD7 tohEF1ehk/gdrDFIgnu7ZJTqWgpVyniStE1ixyawRnJ679wbRAfVDnkbjC1odgol SHz3alCgjiBbM/V+3jU2zzR9RqflJpDyra13/VeqcKHpLt/QeYITYPI2ZqaPg6Da rP09d9IcdE+0e1V4dlB1AT0WEUBAWks= -----END CERTIFICATE-----Generated at Wed May 7 08:53:04 2025 by rpki-client