$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95261e55-915b-31f9-95c5-d1dac188ab8a.roa File: 95261e55-915b-31f9-95c5-d1dac188ab8a.roa (raw, json) Hash identifier: VekH7WGODbo7ohO+mcIfl+Zsx7mpccvt2J2C2DzYTBc= Subject key identifier: 78:A0:D3:29:21:15:FE:FF:E8:41:FA:7F:D5:AF:FB:F4:25:52:11:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C49B7F2165347FA63985FD40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95261e55-915b-31f9-95c5-d1dac188ab8a.roa Signing time: Tue 06 May 2025 23:05:34 +0000 ROA not before: Tue 06 May 2025 23:05:34 +0000 ROA not after: Mon 04 Aug 2025 23:05:34 +0000 asID: 7029 IP address blocks: 173.189.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:9b:7f:21:65:34:7f:a6:39:85:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 6 23:05:34 2025 GMT Not After : Aug 4 23:05:34 2025 GMT Subject: CN=6349c205-ae93-497f-a76a-27111cdaaf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:de:39:ca:95:ad:e2:da:b6:91:73:03:71: ac:b0:b8:a5:5c:ba:5a:ef:de:d9:d8:ef:3f:a8:88: 1b:82:05:18:69:86:4c:36:47:39:d5:64:3e:6d:fc: 3e:b7:45:10:63:ed:cd:0a:f2:28:bf:63:29:c8:e7: d5:4d:f9:42:38:7e:47:f3:6e:73:9b:75:a5:b5:45: 33:7e:b1:66:8c:8c:37:17:db:c5:cd:c1:e2:e5:8a: 0f:c8:2b:4a:5b:a5:21:36:88:be:e6:53:2b:95:38: c1:b6:55:54:d9:93:41:b5:9f:88:9c:1a:d6:ff:04: 43:09:91:b0:5d:ee:cb:c4:a1:b7:4d:8f:0d:bf:93: 7f:5f:66:e4:8d:46:cf:49:45:5f:f5:4a:63:bd:8a: c6:ff:88:02:82:16:db:15:a1:1b:0c:0e:5c:b0:dc: 75:56:d8:88:9a:c2:a6:07:43:e3:af:31:fe:1b:7d: 5e:a7:39:2d:71:ee:fb:b0:ae:3a:b7:fc:0f:8d:c6: 8d:56:91:cf:7c:cd:2c:df:ad:3b:37:cc:52:12:31: d8:33:61:4f:eb:0e:37:7e:72:24:d4:7a:bf:c4:8f: a3:a0:ba:4e:4b:27:d2:08:53:0a:69:1c:3f:0d:f2: 7f:92:be:22:bf:7a:0a:fb:b4:7d:3d:44:9e:5e:07: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:D3:29:21:15:FE:FF:E8:41:FA:7F:D5:AF:FB:F4:25:52:11:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95261e55-915b-31f9-95c5-d1dac188ab8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:98:23:e3:5e:d2:fd:ba:66:fc:26:c1:15:5b:c5:70:7a:46: 33:8a:3d:b3:1f:b2:32:a5:95:97:3b:12:56:72:36:10:c2:23: a5:3a:9d:cf:f6:1b:8b:19:66:c5:ae:03:68:23:0c:10:56:89: 30:5b:de:18:cb:e3:49:d1:4c:78:98:92:ad:c6:cd:3d:ef:51: 2c:31:5d:0d:6a:f8:07:97:dc:3a:d8:a2:27:65:c7:11:7a:93: 69:e9:c5:bf:5b:15:37:81:52:6c:7b:a8:cf:1f:a5:a0:5f:9e: c2:02:63:27:aa:74:c5:c2:32:a1:ac:9c:aa:26:f7:9a:63:bf: cb:3d:84:4a:90:37:bc:91:f1:6e:70:97:6d:17:c3:d8:36:08: c9:cb:f6:f7:59:f3:59:0f:10:0c:a0:b0:68:6f:6a:d4:54:02: 85:5c:87:a4:92:7c:70:e9:23:f7:28:42:9b:3a:82:b5:5a:e1: 46:ee:a8:fa:00:bf:d4:0c:37:30:60:9f:c6:e8:5e:dc:94:66: 50:c8:af:b8:60:9f:3a:9a:31:8c:1e:9b:a9:14:e2:42:1d:d3: e9:91:cd:f2:f2:d6:e1:3a:a9:af:cf:96:88:44:e3:ef:c7:d5: 6e:db:ae:7a:c2:2d:34:35:34:99:ca:85:6a:62:64:ed:4a:1a: 82:da:75:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEm38hZTR/pjmF/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNjIzMDUzNFoXDTI1MDgwNDIzMDUzNFowLzEtMCsGA1UEAxMk NjM0OWMyMDUtYWU5My00OTdmLWE3NmEtMjcxMTFjZGFhZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z/eOcqVreLatpFzA3GssLilXLpa797Z2O8/ qIgbggUYaYZMNkc51WQ+bfw+t0UQY+3NCvIov2MpyOfVTflCOH5H825zm3WltUUz frFmjIw3F9vFzcHi5YoPyCtKW6UhNoi+5lMrlTjBtlVU2ZNBtZ+InBrW/wRDCZGw Xe7LxKG3TY8Nv5N/X2bkjUbPSUVf9UpjvYrG/4gCghbbFaEbDA5csNx1VtiImsKm B0PjrzH+G31epzktce77sK46t/wPjcaNVpHPfM0s3607N8xSEjHYM2FP6w43fnIk 1Hq/xI+joLpOSyfSCFMKaRw/DfJ/kr4iv3oK+7R9PUSeXgdNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHig0ykhFf7/6EH6f9Wv+/QlUhHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTUyNjFlNTUtOTE1Yi0z MWY5LTk1YzUtZDFkYWMxODhhYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWYI+Ne0v26ZvwmwRVbxXB6RjOKPbMfsjKllZc7ElZyNhDCI6U6nc/2 G4sZZsWuA2gjDBBWiTBb3hjL40nRTHiYkq3GzT3vUSwxXQ1q+AeX3DrYoidlxxF6 k2npxb9bFTeBUmx7qM8fpaBfnsICYyeqdMXCMqGsnKom95pjv8s9hEqQN7yR8W5w l20Xw9g2CMnL9vdZ81kPEAygsGhvatRUAoVch6SSfHDpI/coQps6grVa4UbuqPoA v9QMNzBgn8boXtyUZlDIr7hgnzqaMYwem6kU4kId0+mRzfLy1uE6qa/PlohE4+/H 1W7brnrCLTQ1NJnKhWpiZO1KGoLadR8= -----END CERTIFICATE-----Generated at Sat May 10 22:32:10 2025 by rpki-client