$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa File: 7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa (raw, json) Hash identifier: nJtnCnYwjzHQmfCPDjY1zBj2Gb8LfRn6yKTvg3wf7vU= Subject key identifier: A6:7F:33:CC:93:E0:20:11:31:EF:D2:2D:8D:DF:D6:D1:2B:BB:49:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849912F56062063E8C0B0497780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 173.187.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:56:06:20:63:e8:c0:b0:49:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=e686c498-4c2c-4049-8365-38cdc0cba5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ff:6e:a3:e4:42:ec:46:02:d4:be:9b:a1:a4: 3c:2b:61:ee:58:f9:35:14:db:61:73:20:0f:d8:bc: ed:f5:58:8b:73:b1:3d:6c:c7:2c:31:22:e4:3d:3e: 68:5a:b7:35:16:5a:fe:24:ba:de:73:99:91:40:3c: ec:c4:a2:5a:58:cd:68:8e:de:b0:0a:98:71:35:44: a7:13:c3:35:12:57:b6:95:1c:1f:d4:a7:86:36:0f: bd:bf:82:0f:98:6b:49:e5:7f:34:02:0a:82:e8:58: 35:ac:d8:28:56:98:73:4c:b6:ea:88:e0:89:c0:e2: 93:9c:fe:1f:37:79:84:55:a5:12:2c:52:f4:1b:04: 60:73:49:01:74:32:a7:e0:9c:b6:00:13:a3:b8:e7: 39:89:f1:3f:9b:51:20:ba:db:a2:62:af:08:6f:23: de:d7:fd:eb:75:2b:a1:a2:28:64:25:4f:75:bf:53: e7:a7:b1:0d:4a:7f:15:5f:e3:b8:42:3d:81:db:24: c0:c3:d8:cc:ff:5a:68:ba:b5:77:50:4a:6d:33:d5: 43:26:17:e7:79:91:b0:ea:11:c2:8f:e4:79:4c:bd: f6:e3:37:e4:32:53:7c:41:88:f1:b1:9a:63:d4:59: 70:e8:7b:3f:b1:0d:9f:5e:c3:10:e4:d8:b7:df:39: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7F:33:CC:93:E0:20:11:31:EF:D2:2D:8D:DF:D6:D1:2B:BB:49:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7804d292-ab74-3e7f-9460-9b74b44a4d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b8:6d:d2:be:67:fe:e0:14:47:de:bf:c5:e5:83:96:71:1f: 25:04:a4:02:16:c7:6d:d6:c2:fc:54:23:4a:dd:1e:56:7f:01: c2:f7:a8:4a:19:48:57:84:23:22:6e:db:56:82:75:d7:09:f3: 51:60:65:d1:e2:97:9c:a9:22:c5:21:cb:3e:77:fa:5f:fd:3b: 90:d7:be:d2:99:4f:f3:a4:7c:85:85:7b:5d:e7:f3:eb:b9:5a: 1a:fb:d0:cb:32:01:36:60:aa:f3:67:de:7c:17:af:3a:55:b0: 95:7a:d5:06:68:61:04:fa:72:74:82:d2:ef:53:02:67:cb:a3: 0e:0c:ea:98:c3:cd:e1:fa:6d:c4:65:83:86:ec:2b:4c:85:18: 41:43:33:e8:bb:e4:81:f8:a4:d9:fb:78:38:ef:31:83:6a:91: 87:bf:d2:71:d9:cf:19:58:f8:68:e0:d1:07:ed:e4:59:76:96: 7d:60:48:98:3d:2a:aa:05:97:a7:5d:d0:57:57:e7:ee:ef:e9: 08:b2:88:d0:7e:93:89:3d:22:05:8b:a9:e3:c2:6d:42:d5:b5: ff:54:66:21:32:f8:96:e3:c8:a6:c9:d2:0d:80:60:92:8f:ee: 8a:78:67:88:8f:1b:39:1b:23:26:58:09:8e:26:09:b1:6a:b8: 10:89:cd:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1YGIGPowLBJd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZTY4NmM0OTgtNGMyYy00MDQ5LTgzNjUtMzhjZGMwY2JhNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f9uo+RC7EYC1L6boaQ8K2HuWPk1FNthcyAP 2Lzt9ViLc7E9bMcsMSLkPT5oWrc1Flr+JLrec5mRQDzsxKJaWM1ojt6wCphxNUSn E8M1Ele2lRwf1KeGNg+9v4IPmGtJ5X80AgqC6Fg1rNgoVphzTLbqiOCJwOKTnP4f N3mEVaUSLFL0GwRgc0kBdDKn4Jy2ABOjuOc5ifE/m1EgutuiYq8IbyPe1/3rdSuh oihkJU91v1Pnp7ENSn8VX+O4Qj2B2yTAw9jM/1pourV3UEptM9VDJhfneZGw6hHC j+R5TL324zfkMlN8QYjxsZpj1Flw6Hs/sQ2fXsMQ5Ni33zlE1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ/M8yT4CARMe/SLY3f1tEru0mFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzgwNGQyOTItYWI3NC0z ZTdmLTk0NjAtOWI3NGI0NGE0ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa4bdK+Z/7gFEfev8Xlg5ZxHyUEpAIWx23WwvxUI0rdHlZ/AcL3qEoZ SFeEIyJu21aCddcJ81FgZdHil5ypIsUhyz53+l/9O5DXvtKZT/OkfIWFe13n8+u5 Whr70MsyATZgqvNn3nwXrzpVsJV61QZoYQT6cnSC0u9TAmfLow4M6pjDzeH6bcRl g4bsK0yFGEFDM+i75IH4pNn7eDjvMYNqkYe/0nHZzxlY+Gjg0Qft5Fl2ln1gSJg9 KqoFl6dd0FdX5+7v6QiyiNB+k4k9IgWLqePCbULVtf9UZiEy+JbjyKbJ0g2AYJKP 7op4Z4iPGzkbIyZYCY4mCbFquBCJzU8= -----END CERTIFICATE-----Generated at Sat May 10 09:46:31 2025 by rpki-client