$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa File: 9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa (raw, json) Hash identifier: 14cZ5nS91KCaK7GsrKRRS+x0eHAA65Q1h2T8MHR4wBk= Subject key identifier: 88:2A:AB:07:E5:76:47:18:FA:83:5D:D0:50:BA:22:EA:9C:05:CB:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C20A0779A3BE6E44364E1100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.185.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:07:79:a3:be:6e:44:36:4e:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=70f7db61-2b41-4414-89dd-3b12ea53c731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:8d:9a:cc:84:0c:77:ae:cf:f4:09:0e:63: 1f:74:99:d9:e4:00:da:59:eb:d5:15:9c:65:0f:36: 00:84:89:1b:ad:74:d2:25:ae:98:e2:ad:bd:e8:a1: d0:e8:bb:6a:ca:f9:19:94:48:bc:58:34:1a:21:7e: 9e:c2:aa:c1:1a:ba:fa:ae:75:a7:ba:1a:f6:70:69: cd:a2:2c:b4:ea:51:42:9d:c1:3c:82:c9:b8:09:b9: be:86:21:9c:3a:d1:26:bd:fc:5a:a7:06:eb:7f:b4: 97:83:dc:cb:81:e8:d5:b7:83:91:ce:bd:ca:64:e5: a6:3d:bf:7e:5a:54:f7:3e:c8:9c:31:4f:e7:fb:8e: 70:98:b4:79:b8:8a:62:c3:69:31:68:1a:c9:07:2b: 1e:30:bb:08:59:70:ae:e5:27:fc:b3:78:26:ba:26: 6f:d2:09:98:10:6d:df:7f:18:ac:cb:c4:a5:b0:a8: dd:28:ef:3b:72:b1:c8:d2:fc:73:ca:d1:9b:4b:48: 3a:04:96:ed:62:f1:8c:ca:0f:68:10:87:7d:c1:46: 66:eb:66:d4:47:c4:d9:7d:70:c6:3f:95:de:78:78: f7:25:95:9e:c8:a5:2f:3e:3a:c7:79:62:e8:6c:12: 81:87:7a:17:f6:e4:0b:7a:d7:8c:b9:b7:13:64:f7: e9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2A:AB:07:E5:76:47:18:FA:83:5D:D0:50:BA:22:EA:9C:05:CB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cc0c1dd-cb09-3709-bb88-090ec6e939dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8c:29:e0:69:b5:5f:30:2f:6e:a0:bf:58:e0:60:49:ba:6c: 6b:0f:9f:6c:3c:d4:f3:ac:99:b5:34:78:bc:34:d7:e0:c4:86: fb:a1:2d:88:1f:18:41:01:a3:01:f0:2f:9f:41:40:bc:4b:bb: cc:09:d7:fe:6b:50:8a:1a:5c:17:8e:ba:78:f0:51:b8:bc:78: 58:70:b6:a1:7e:2a:c5:69:00:8a:fb:16:f7:ad:3d:fa:ad:81: 13:5f:1a:4a:9b:31:0f:07:de:2a:27:3c:35:02:6b:ba:4d:30: 66:0d:0a:ae:a6:de:c1:09:81:d5:6a:56:92:25:8d:2a:bf:0c: a2:d7:7e:5f:81:c0:64:c0:79:e4:e0:08:4b:82:c1:02:23:93: 99:d9:7a:3b:68:3f:81:7f:c8:0d:d9:c2:bf:e9:13:00:13:81: 7f:7f:41:fe:43:12:39:e6:9b:a9:7c:68:42:e5:6e:83:4c:b6: 36:dc:25:65:ef:00:53:18:12:54:ed:8d:dc:0a:28:75:aa:c5: 17:3b:17:80:70:b2:51:38:ad:7f:4d:9a:d2:cd:d3:10:c0:17: bc:27:c1:99:f2:7e:0f:28:68:1b:1e:eb:5e:e7:87:2b:54:65: 9d:d8:a3:aa:c0:fc:39:3e:91:15:f8:21:92:f2:53:fc:77:e2: 51:52:55:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgd5o75uRDZOEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NzBmN2RiNjEtMmI0MS00NDE0LTg5ZGQtM2IxMmVhNTNjNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0SNmsyEDHeuz/QJDmMfdJnZ5ADaWevVFZxl DzYAhIkbrXTSJa6Y4q296KHQ6LtqyvkZlEi8WDQaIX6ewqrBGrr6rnWnuhr2cGnN oiy06lFCncE8gsm4Cbm+hiGcOtEmvfxapwbrf7SXg9zLgejVt4ORzr3KZOWmPb9+ WlT3PsicMU/n+45wmLR5uIpiw2kxaBrJByseMLsIWXCu5Sf8s3gmuiZv0gmYEG3f fxisy8SlsKjdKO87crHI0vxzytGbS0g6BJbtYvGMyg9oEId9wUZm62bUR8TZfXDG P5XeeHj3JZWeyKUvPjrHeWLobBKBh3oX9uQLeteMubcTZPfpgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgqqwfldkcY+oNd0FC6IuqcBct1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNjMGMxZGQtY2IwOS0z NzA5LWJiODgtMDkwZWM2ZTkzOWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSMKeBptV8wL26gv1jgYEm6bGsPn2w81POsmbU0eLw01+DEhvuhLYgf GEEBowHwL59BQLxLu8wJ1/5rUIoaXBeOunjwUbi8eFhwtqF+KsVpAIr7FvetPfqt gRNfGkqbMQ8H3ionPDUCa7pNMGYNCq6m3sEJgdVqVpIljSq/DKLXfl+BwGTAeeTg CEuCwQIjk5nZejtoP4F/yA3Zwr/pEwATgX9/Qf5DEjnmm6l8aELlboNMtjbcJWXv AFMYElTtjdwKKHWqxRc7F4BwslE4rX9NmtLN0xDAF7wnwZnyfg8oaBse617nhytU ZZ3Yo6rA/Dk+kRX4IZLyU/x34lFSVUw= -----END CERTIFICATE-----Generated at Sun May 11 09:15:37 2025 by rpki-client