$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa File: a065ddd0-cdc2-360e-a988-03ed946a51b3.roa (raw, json) Hash identifier: 93EKVZ3hecLdncQ8twOSu3Kjt8ZzL5H9vs+A+7In0hI= Subject key identifier: 36:11:CD:B5:07:87:C4:31:A1:61:DF:75:7A:21:45:0D:CA:88:1F:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A143F3CADAE8B6F8A2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.190.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:3f:3c:ad:ae:8b:6f:8a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=23c7eeda-c651-47b6-92b1-8bad769c0ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:5e:53:93:d3:72:2f:b7:bd:f4:b3:35:9a: 69:c7:4d:4c:27:9f:b4:4b:03:bf:eb:da:ae:5f:f3: 8c:f5:68:ff:51:f5:1c:1c:78:7c:75:35:a3:6f:eb: 36:47:d4:d7:6c:e9:11:8d:15:7f:05:e2:a6:32:4e: e1:85:23:e3:48:ea:69:50:94:90:7c:5f:0f:02:3a: 7e:8d:30:ca:d7:5b:c8:c2:6c:c6:b4:1f:30:57:2d: df:a1:1a:42:5f:da:1a:ff:e8:08:f0:eb:9d:86:56: 19:55:3b:de:9e:69:d2:48:6d:01:57:02:94:ab:00: d7:27:91:d8:0b:7a:f8:d2:2f:c0:50:d0:85:a4:d0: d3:92:ac:42:c7:ea:e5:3d:9b:8e:11:7f:7c:1c:4a: 6b:03:d9:d5:2d:e7:f0:83:a1:ef:f5:59:41:1b:eb: c9:f6:5e:bf:3d:17:80:d6:d3:d2:fa:2c:b9:b9:d4: 85:a3:a6:8b:84:2d:0c:d3:fb:62:7c:92:00:18:13: 6d:6b:97:90:1e:d5:a2:21:33:bb:6c:b7:96:d3:5e: d1:40:cf:4a:b4:78:43:ed:a2:a7:75:30:2c:56:01: 11:a4:1d:f0:9d:a5:29:29:b2:57:e6:8c:ed:0c:04: 1e:9c:7c:1b:a7:14:99:ad:90:67:91:a8:43:83:c4: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:11:CD:B5:07:87:C4:31:A1:61:DF:75:7A:21:45:0D:CA:88:1F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a065ddd0-cdc2-360e-a988-03ed946a51b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:b1:5b:dd:7d:0e:c4:cb:11:be:f3:5a:4e:5f:d5:b3:31:93: cd:e5:b5:e3:68:e8:24:7b:40:71:ef:0d:16:b9:54:54:e3:2c: 53:c1:10:2a:40:2a:ac:82:19:d1:8f:0d:7b:56:dd:50:4a:0a: 88:b3:6b:d0:cd:99:84:0f:dc:c5:69:9a:d8:55:cb:fc:31:92: 63:dd:a6:0a:9d:66:41:34:e4:aa:ca:85:9d:90:e8:43:52:6c: ab:46:ab:eb:78:cb:4d:4f:ee:14:3a:99:8c:bf:ee:7d:03:1d: d8:82:1d:88:85:99:ec:ec:84:60:8a:e9:bd:eb:12:85:78:89: 24:54:fe:32:21:41:4e:c1:28:4b:f7:88:fc:93:ff:a7:3e:73: 04:70:e7:78:ce:ac:4c:85:72:e5:eb:fb:1d:85:fe:0e:6d:98: d6:20:1a:08:32:05:1a:55:ad:3a:21:39:10:e6:cc:11:1a:25: 1a:40:e3:28:da:70:f7:18:63:db:d1:3c:29:39:64:a5:19:db: b2:00:93:db:b0:76:a7:48:b6:46:5d:8b:25:0f:3c:42:35:db: 4b:44:1e:6a:4d:fd:ba:cd:48:cf:61:28:b3:e2:92:4a:da:41: 94:fb:30:8a:c2:f5:a2:30:5d:c8:ea:0d:2f:25:55:61:23:9a: 87:2d:4d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhQ/PK2ui2+KI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjNjN2VlZGEtYzY1MS00N2I2LTkyYjEtOGJhZDc2OWMwYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybBeU5PTci+3vfSzNZppx01MJ5+0SwO/69qu X/OM9Wj/UfUcHHh8dTWjb+s2R9TXbOkRjRV/BeKmMk7hhSPjSOppUJSQfF8PAjp+ jTDK11vIwmzGtB8wVy3foRpCX9oa/+gI8OudhlYZVTvenmnSSG0BVwKUqwDXJ5HY C3r40i/AUNCFpNDTkqxCx+rlPZuOEX98HEprA9nVLefwg6Hv9VlBG+vJ9l6/PReA 1tPS+iy5udSFo6aLhC0M0/tifJIAGBNta5eQHtWiITO7bLeW017RQM9KtHhD7aKn dTAsVgERpB3wnaUpKbJX5oztDAQenHwbpxSZrZBnkahDg8TodQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYRzbUHh8QxoWHfdXohRQ3KiB9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA2NWRkZDAtY2RjMi0z NjBlLWE5ODgtMDNlZDk0NmE1MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaxW919DsTLEb7zWk5f1bMxk83lteNo6CR7QHHvDRa5VFTjLFPBECpA KqyCGdGPDXtW3VBKCoiza9DNmYQP3MVpmthVy/wxkmPdpgqdZkE05KrKhZ2Q6ENS bKtGq+t4y01P7hQ6mYy/7n0DHdiCHYiFmezshGCK6b3rEoV4iSRU/jIhQU7BKEv3 iPyT/6c+cwRw53jOrEyFcuXr+x2F/g5tmNYgGggyBRpVrTohORDmzBEaJRpA4yja cPcYY9vRPCk5ZKUZ27IAk9uwdqdItkZdiyUPPEI120tEHmpN/brNSM9hKLPikkra QZT7MIrC9aIwXcjqDS8lVWEjmoctTWA= -----END CERTIFICATE-----Generated at Sat May 10 05:21:42 2025 by rpki-client