$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa File: 885c11da-75ed-30f3-be92-905354edd7ef.roa (raw, json) Hash identifier: a9oG1AcAVikJFjtpa6HJpsjqwWf68aINaimudHQWN9Q= Subject key identifier: 8E:07:94:2D:8C:4C:3C:8D:7A:07:0B:D1:C0:CC:A1:20:52:75:82:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA248085C6E82D64F8F000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:24:80:85:c6:e8:2d:64:f8:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=542404e3-cb46-4db8-8057-0e5f94bf82a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:bb:c1:3d:ea:a6:80:7c:c4:9e:5c:70:24: 64:ee:61:d7:c5:88:93:9d:02:53:2e:45:06:32:02: 08:85:c9:8e:90:d5:fc:44:62:50:0d:13:34:68:63: e2:43:58:fd:39:5e:c9:74:cf:db:4b:db:90:5a:30: 96:91:3a:2c:01:34:ff:ba:11:54:3d:76:5b:1a:6e: 30:cb:fb:fe:46:6c:6d:b4:6b:9c:81:a5:84:64:bc: 1f:e2:07:5f:5e:b3:f3:6e:ed:4b:22:d8:32:70:eb: aa:3f:d3:50:b9:fa:74:56:9c:41:3f:67:7b:60:4e: 9b:df:be:6c:95:fb:c0:2d:ca:bd:f0:15:2a:97:6e: 6e:71:5a:5d:da:cc:36:70:e3:c0:ee:b8:ad:02:8a: 30:69:6d:df:b6:26:c0:e8:4d:49:a3:91:bd:aa:46: 1b:d7:8c:a2:11:d5:6d:c7:51:73:2c:70:52:af:26: 80:52:5a:63:e6:54:f1:1a:7b:dc:4a:13:8a:af:2e: 1d:7c:72:b3:97:af:9f:22:16:e3:25:48:d8:5f:55: ce:cc:b5:c8:0a:1b:c2:9a:6d:15:10:ec:98:58:d2: ef:51:c6:33:73:fa:85:29:ab:d3:8c:26:5b:ef:ba: 3e:d0:c4:81:b7:43:0f:b9:a2:55:1b:31:85:d9:a6: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:07:94:2D:8C:4C:3C:8D:7A:07:0B:D1:C0:CC:A1:20:52:75:82:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/885c11da-75ed-30f3-be92-905354edd7ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:38:19:17:43:66:fe:2e:42:d8:8a:c9:09:4c:3f:88:05:b5: a0:1e:54:d7:12:4e:ce:9d:ca:0b:db:65:1a:86:c0:bc:c9:f5: 24:87:ef:28:dd:50:b6:17:ac:fb:7c:1a:b7:4f:37:db:23:6b: 47:e5:a5:8f:9b:c1:92:98:b3:7a:6c:dc:a6:7c:45:77:c1:cd: 32:09:45:21:e2:7d:c2:12:78:b8:be:eb:1e:3a:26:2b:f4:18: ca:67:f6:3d:b3:1e:df:0a:6e:f6:54:42:27:a0:1b:6b:0e:1e: ed:c9:a5:bb:4c:37:00:63:0f:1c:45:b2:24:0d:f5:64:c2:5b: 7c:f9:c3:8c:c8:90:e3:5e:30:85:dd:88:8e:17:69:8c:78:66: 9d:b3:16:83:5c:e7:bb:da:f8:34:ab:ff:58:9e:3a:68:60:28: 88:9b:8c:fe:85:7c:02:8c:78:85:ed:19:1e:ed:13:9a:a2:48: 5b:33:a5:51:45:7c:9f:15:8d:fd:ef:84:44:79:97:e0:b9:5a: c6:06:e9:b9:38:fb:88:12:5b:7e:6d:d0:c2:a6:70:15:a2:d7: 39:01:fc:03:b0:67:75:c6:c5:59:49:77:ed:fe:49:40:29:58: 43:71:01:3a:79:17:1f:b1:c3:40:91:e8:6a:84:2e:d9:cd:6f: ce:dc:f7:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiSAhcboLWT48AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk NTQyNDA0ZTMtY2I0Ni00ZGI4LTgwNTctMGU1Zjk0YmY4MmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutu7wT3qpoB8xJ5ccCRk7mHXxYiTnQJTLkUG MgIIhcmOkNX8RGJQDRM0aGPiQ1j9OV7JdM/bS9uQWjCWkTosATT/uhFUPXZbGm4w y/v+RmxttGucgaWEZLwf4gdfXrPzbu1LItgycOuqP9NQufp0VpxBP2d7YE6b375s lfvALcq98BUql25ucVpd2sw2cOPA7ritAoowaW3ftibA6E1Jo5G9qkYb14yiEdVt x1FzLHBSryaAUlpj5lTxGnvcShOKry4dfHKzl6+fIhbjJUjYX1XOzLXIChvCmm0V EOyYWNLvUcYzc/qFKavTjCZb77o+0MSBt0MPuaJVGzGF2abszQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4HlC2MTDyNegcL0cDMoSBSdYKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODg1YzExZGEtNzVlZC0z MGYzLWJlOTItOTA1MzU0ZWRkN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG44GRdDZv4uQtiKyQlMP4gFtaAeVNcSTs6dygvbZRqGwLzJ9SSH7yjd ULYXrPt8GrdPN9sja0flpY+bwZKYs3ps3KZ8RXfBzTIJRSHifcISeLi+6x46Jiv0 GMpn9j2zHt8KbvZUQiegG2sOHu3JpbtMNwBjDxxFsiQN9WTCW3z5w4zIkONeMIXd iI4XaYx4Zp2zFoNc57va+DSr/1ieOmhgKIibjP6FfAKMeIXtGR7tE5qiSFszpVFF fJ8Vjf3vhER5l+C5WsYG6bk4+4gSW35t0MKmcBWi1zkB/AOwZ3XGxVlJd+3+SUAp WENxATp5Fx+xw0CR6GqELtnNb87c95w= -----END CERTIFICATE-----Generated at Tue May 13 07:58:54 2025 by rpki-client