$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa File: a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa (raw, json) Hash identifier: dW9VcQDn9VUVhtEv4z1ONryptVlu5mQClHE/y9zG0bA= Subject key identifier: 30:4A:19:67:8D:6B:3D:E6:EA:FB:11:75:AD:80:41:DF:71:D8:A5:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C4A64E2BD2A0F297399E0C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa Signing time: Tue 06 May 2025 23:27:21 +0000 ROA not before: Tue 06 May 2025 23:27:21 +0000 ROA not after: Mon 04 Aug 2025 23:27:21 +0000 asID: 7029 IP address blocks: 173.189.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:a6:4e:2b:d2:a0:f2:97:39:9e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 6 23:27:21 2025 GMT Not After : Aug 4 23:27:21 2025 GMT Subject: CN=99399f36-0bdb-41d3-a781-594f0ac6b327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:56:1a:52:ac:42:d6:cb:da:12:c5:13:ce: 16:dc:4c:ed:7f:7c:7c:7b:d9:18:57:b1:49:a8:81: b8:85:ed:09:29:7d:65:fd:fb:e1:67:83:73:e8:dd: 79:66:c4:d2:bf:0c:77:e6:97:b4:1c:8f:79:e9:b5: 50:a1:6e:0b:c5:82:c2:f8:9c:68:6e:37:d2:e0:72: 46:6b:c7:43:73:71:11:a1:b7:d2:56:5e:09:10:09: a0:41:39:de:b7:72:d1:39:4a:c5:73:3f:b9:28:02: 9e:31:d9:99:8b:f7:0b:69:c4:fd:1d:30:12:bd:bf: ff:54:63:a0:34:b2:02:7a:1d:30:eb:08:b9:23:87: 5a:e3:c4:5f:f7:11:80:3b:87:d8:1a:6f:f1:3f:b6: de:a3:9e:e3:1d:1c:d6:f8:55:09:48:93:4c:8a:3f: 75:34:27:fe:1f:84:52:65:85:67:66:14:ea:6f:1e: b7:3b:8a:42:10:ca:69:f4:2e:e0:06:22:2d:9a:ad: 39:a4:6c:eb:8b:f9:82:1e:9c:46:b7:e5:7b:37:38: 0e:29:e6:b2:8c:0f:d6:02:c3:f1:0a:2f:40:d8:09: e5:69:a9:a5:26:3a:bc:37:74:59:9f:db:91:9f:2a: d6:e7:de:d3:2c:6c:8c:27:e7:5e:f0:b5:d0:38:26: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4A:19:67:8D:6B:3D:E6:EA:FB:11:75:AD:80:41:DF:71:D8:A5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2ea4515-fb3a-309e-9c58-0d1fc38c0826.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:05:11:c6:30:f5:20:48:e7:d9:be:25:80:16:3c:15:32:43: 3e:d0:53:d2:38:c5:ed:7b:c0:58:2b:37:fc:6e:b0:14:ba:fe: cc:05:ca:49:a6:ef:4f:22:87:62:71:50:0a:fe:f8:37:1c:50: b7:5f:2e:43:91:f0:31:5d:de:c4:73:fd:2f:27:07:da:34:77: b9:6e:f9:b9:01:2d:e0:31:72:06:93:97:36:62:ec:24:7b:c6: 09:e6:60:39:1a:45:81:68:45:ec:a0:78:cf:d3:e1:6b:ba:96: f1:64:ab:50:b3:36:9d:c1:8b:43:ad:93:df:82:e1:e1:62:3b: 46:a7:21:a6:34:12:23:18:2e:ea:cb:58:5d:85:2e:94:b6:26: ea:46:50:a2:ae:78:b1:dc:1c:dc:8a:c0:0c:f2:f6:65:6e:12: 34:59:3e:44:e6:2e:36:6d:b3:9f:14:0c:2b:05:21:24:f4:77: e0:94:d2:6d:5a:8e:97:2d:07:22:04:fb:f5:40:e7:db:a2:b8: 21:80:e6:e9:cf:84:a0:67:51:75:19:8e:65:91:d5:71:03:a2: 3c:bd:3a:7b:79:37:fa:ba:73:c4:a3:57:68:8c:ed:29:21:76: a3:45:17:aa:67:10:21:17:07:f9:39:b4:c5:8d:9f:05:6f:f1: 33:7d:78:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnEpk4r0qDylzmeDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNjIzMjcyMVoXDTI1MDgwNDIzMjcyMVowLzEtMCsGA1UEAxMk OTkzOTlmMzYtMGJkYi00MWQzLWE3ODEtNTk0ZjBhYzZiMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/hWGlKsQtbL2hLFE84W3Eztf3x8e9kYV7FJ qIG4he0JKX1l/fvhZ4Nz6N15ZsTSvwx35pe0HI956bVQoW4LxYLC+JxobjfS4HJG a8dDc3ERobfSVl4JEAmgQTnet3LROUrFcz+5KAKeMdmZi/cLacT9HTASvb//VGOg NLICeh0w6wi5I4da48Rf9xGAO4fYGm/xP7beo57jHRzW+FUJSJNMij91NCf+H4RS ZYVnZhTqbx63O4pCEMpp9C7gBiItmq05pGzri/mCHpxGt+V7NzgOKeayjA/WAsPx Ci9A2AnlaamlJjq8N3RZn9uRnyrW597TLGyMJ+de8LXQOCZpCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBKGWeNaz3m6vsRda2AQd9x2KVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJlYTQ1MTUtZmIzYS0z MDllLTljNTgtMGQxZmMzOGMwODI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEFEcYw9SBI59m+JYAWPBUyQz7QU9I4xe17wFgrN/xusBS6/swFykmm 708ih2JxUAr++DccULdfLkOR8DFd3sRz/S8nB9o0d7lu+bkBLeAxcgaTlzZi7CR7 xgnmYDkaRYFoReygeM/T4Wu6lvFkq1CzNp3Bi0Otk9+C4eFiO0anIaY0EiMYLurL WF2FLpS2JupGUKKueLHcHNyKwAzy9mVuEjRZPkTmLjZts58UDCsFIST0d+CU0m1a jpctByIE+/VA59uiuCGA5unPhKBnUXUZjmWR1XEDojy9Ont5N/q6c8SjV2iM7Skh dqNFF6pnECEXB/k5tMWNnwVv8TN9ePY= -----END CERTIFICATE-----Generated at Sun May 11 04:12:31 2025 by rpki-client