$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa File: a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa (raw, json) Hash identifier: WtY38hKdqPYjiYsaI7ibFYaRRR6g6/tYgGWJ3jOA0Ng= Subject key identifier: E8:47:BA:98:33:1E:39:AE:C2:18:13:AA:51:65:17:E2:5C:9F:3C:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3F79C232FBF464D08400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 166.102.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:79:c2:32:fb:f4:64:d0:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a5f72488-2ad0-4c3a-a0a5-7af12680cd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f2:ee:a0:1d:8f:b9:f1:47:68:01:fc:62:0c: 64:72:e4:d7:cb:30:6c:f4:90:d6:06:4c:2d:a2:61: 6b:57:51:e1:31:13:30:d8:6e:7c:0d:60:e8:8b:43: d1:2c:a1:80:85:57:02:1e:c0:08:de:25:a3:f0:bf: a2:bc:f3:8c:4d:d6:bd:b2:a9:bd:4a:7c:06:90:83: 04:00:59:d0:b3:68:1a:a0:79:dc:de:9d:7c:45:d5: e0:3e:4f:9f:41:42:40:05:a5:15:ad:6d:aa:a7:55: fc:08:88:4a:c8:66:35:8f:ca:4c:c9:81:ed:c5:13: e8:7d:d1:59:40:be:c7:78:fc:68:63:6f:59:ae:67: 60:bf:ad:86:06:8d:46:67:91:3d:f0:80:aa:8a:25: 81:4e:9b:cb:19:38:ee:a9:40:5f:50:21:44:d6:88: 40:a9:85:83:30:1d:50:05:c2:9c:7e:99:80:28:b3: f4:e9:b3:de:5e:60:8d:d2:74:de:90:4b:81:a7:56: c0:0d:f4:dc:f4:04:fa:6d:56:8c:be:90:a3:93:2b: 2e:e8:eb:ad:4a:88:8b:d8:26:e2:d0:bc:68:14:8f: d6:7b:e6:be:0f:46:f5:fb:4d:3d:31:bb:9e:1c:ed: 50:9f:fa:2f:f9:85:3c:4e:84:70:59:b4:b6:a4:41: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:47:BA:98:33:1E:39:AE:C2:18:13:AA:51:65:17:E2:5C:9F:3C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9741def-cfc6-31d1-9955-5fb8d7bac79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 166.102.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3e:ca:1f:5e:9c:e0:c4:ca:bf:88:78:0c:7b:44:14:70:03: a4:0d:ab:98:a2:cf:21:0f:dc:01:ff:22:22:ba:15:13:ed:09: 91:06:9b:06:36:03:ab:b0:20:dd:b0:d6:01:96:a6:d1:f2:4e: da:90:13:4a:bd:1b:c6:f3:6a:60:38:af:70:1e:87:ab:4f:e9: a8:28:f9:d1:4c:c1:c7:45:e5:08:92:a1:28:0c:28:08:ce:5c: 4f:ba:5b:56:f1:e7:44:09:39:16:02:8a:2b:8f:b4:a2:64:d5: 35:d6:c2:53:ab:91:24:17:22:e9:e0:54:a5:b1:14:d4:91:83: 56:bc:85:16:18:81:04:9e:dc:20:04:4b:92:04:4d:03:8f:27: a8:fa:ba:aa:1f:2b:39:cf:5d:f6:d3:0a:f4:13:78:02:b4:d6: 60:ee:3c:99:a5:b6:ef:a0:43:94:ba:1d:a8:30:11:49:4a:49: e7:75:a5:2d:f7:78:88:a2:e6:c3:6b:82:16:70:5a:ca:6e:28: bb:ef:ba:4e:91:2f:79:92:bd:e9:3f:6e:aa:0c:5a:87:79:bd: 27:ac:2f:54:b4:82:4b:ec:42:b7:24:fe:b1:6a:8c:27:61:4e: 90:fe:5e:08:b7:23:a7:9c:94:83:8e:e0:c5:c2:79:59:a1:48: 64:01:58:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj95wjL79GTQhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTVmNzI0ODgtMmFkMC00YzNhLWEwYTUtN2FmMTI2ODBjZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/LuoB2PufFHaAH8YgxkcuTXyzBs9JDWBkwt omFrV1HhMRMw2G58DWDoi0PRLKGAhVcCHsAI3iWj8L+ivPOMTda9sqm9SnwGkIME AFnQs2gaoHnc3p18RdXgPk+fQUJABaUVrW2qp1X8CIhKyGY1j8pMyYHtxRPofdFZ QL7HePxoY29Zrmdgv62GBo1GZ5E98ICqiiWBTpvLGTjuqUBfUCFE1ohAqYWDMB1Q BcKcfpmAKLP06bPeXmCN0nTekEuBp1bADfTc9AT6bVaMvpCjkysu6OutSoiL2Cbi 0LxoFI/We+a+D0b1+009MbueHO1Qn/ov+YU8ToRwWbS2pEFv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhHupgzHjmuwhgTqlFlF+JcnzyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk3NDFkZWYtY2ZjNi0z MWQxLTk5NTUtNWZiOGQ3YmFjNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpmaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg+yh9enODEyr+IeAx7RBRwA6QNq5iizyEP3AH/IiK6FRPtCZEGmwY2 A6uwIN2w1gGWptHyTtqQE0q9G8bzamA4r3Aeh6tP6ago+dFMwcdF5QiSoSgMKAjO XE+6W1bx50QJORYCiiuPtKJk1TXWwlOrkSQXIungVKWxFNSRg1a8hRYYgQSe3CAE S5IETQOPJ6j6uqofKznPXfbTCvQTeAK01mDuPJmltu+gQ5S6HagwEUlKSed1pS33 eIii5sNrghZwWspuKLvvuk6RL3mSvek/bqoMWod5vSesL1S0gkvsQrck/rFqjCdh TpD+Xgi3I6eclIOO4MXCeVmhSGQBWBA= -----END CERTIFICATE-----Generated at Thu May 8 11:37:28 2025 by rpki-client