$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa File: afd73cfa-d554-3b30-bffa-b30f657362a8.roa (raw, json) Hash identifier: ioxsf7Lkka88wO978aNq4lROOselCGzc5LcBDTOPVB4= Subject key identifier: 19:89:B7:BB:FB:58:0A:8B:FC:6B:4C:CA:14:2E:4E:33:28:3E:3B:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A16E08F30ED086A726920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.191.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:16:e0:8f:30:ed:08:6a:72:69:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a73f1236-21b3-478e-8642-8dba5fbe4e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:2f:9a:fc:6d:a3:0d:1b:99:43:38:d7:71: d7:38:fc:8f:07:b2:30:f6:a1:21:4b:b3:0d:e1:b5: 64:82:48:fb:43:04:5f:1e:29:76:fd:7a:66:82:11: ff:c9:86:2d:de:5d:e6:c9:d8:43:57:a1:e8:62:a2: d2:12:e5:c7:45:5a:37:d8:9a:2e:e3:48:b8:6f:36: 0b:0b:c2:7d:86:f8:47:c8:4e:cb:5d:ee:55:57:57: f1:62:42:5d:3d:47:79:9d:eb:dc:f5:33:fc:17:32: 9e:46:2f:bc:40:49:c1:b4:7e:a8:89:09:2e:ce:84: 31:38:51:98:41:d6:a7:6d:29:72:93:46:2f:71:7e: 71:b0:75:e6:23:b4:2f:2d:85:a7:03:f9:24:45:39: 8e:aa:95:e0:5f:44:70:d8:cd:d5:ca:4d:81:66:bd: 66:1a:cc:c9:2a:72:5a:57:b3:32:00:b2:c5:91:9c: bc:39:ef:b9:93:8e:8b:fc:4b:8f:f7:18:c8:37:be: 83:69:5d:66:79:01:3d:27:55:bc:b0:e4:cc:3e:14: 58:c6:44:a4:0c:8a:df:f0:c4:cd:d7:32:2f:a5:4a: 11:39:d1:3b:23:09:67:92:63:07:d5:97:33:3e:6e: 76:f8:95:d9:6c:77:64:e8:32:8e:d5:84:4b:98:69: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:89:B7:BB:FB:58:0A:8B:FC:6B:4C:CA:14:2E:4E:33:28:3E:3B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afd73cfa-d554-3b30-bffa-b30f657362a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:40:3e:32:76:52:48:a3:d8:6a:13:82:e0:97:86:04:6a:8a: fb:18:55:6a:87:13:75:a4:c2:32:6e:49:28:a9:56:0e:52:5b: 23:04:1a:3d:e2:12:50:b2:a0:0a:88:89:ad:51:af:c3:25:92: e4:07:42:0d:77:22:8a:7d:ed:b5:15:ed:41:a3:a9:e4:7d:a3: 8d:e9:27:f4:04:6e:cd:6f:c3:c5:71:47:1b:b8:ce:01:dd:0c: b7:07:37:b6:53:eb:68:34:e5:e3:c5:68:bf:15:45:73:fe:2c: e7:18:32:13:b1:57:f5:96:42:66:e5:35:2a:28:23:a3:ad:4b: eb:e4:58:66:ca:f5:bc:45:e8:20:36:00:48:92:57:f2:35:05: b0:fa:b4:86:d4:65:a1:3b:41:a6:4d:c7:b6:85:0b:35:8e:44: 12:eb:e8:fc:f8:a4:26:78:e3:24:23:f7:41:37:84:50:e4:93: 4b:b6:cd:92:d9:3d:32:a2:9a:cf:a0:88:e2:52:52:cd:3c:1a: ad:29:a8:fb:1e:4e:ec:e3:74:2f:db:0a:ff:be:d9:ae:07:ec: 2c:8e:25:7d:eb:5e:3c:82:8c:2e:6a:e8:bb:7e:47:a9:56:7a: 18:b0:27:ac:9f:f1:07:6e:0c:08:1d:4a:74:1c:63:cf:55:25: f0:d3:2e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShbgjzDtCGpyaSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTczZjEyMzYtMjFiMy00NzhlLTg2NDItOGRiYTVmYmU0ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm78vmvxtow0bmUM413HXOPyPB7Iw9qEhS7MN 4bVkgkj7QwRfHil2/XpmghH/yYYt3l3mydhDV6HoYqLSEuXHRVo32Jou40i4bzYL C8J9hvhHyE7LXe5VV1fxYkJdPUd5nevc9TP8FzKeRi+8QEnBtH6oiQkuzoQxOFGY QdanbSlyk0YvcX5xsHXmI7QvLYWnA/kkRTmOqpXgX0Rw2M3Vyk2BZr1mGszJKnJa V7MyALLFkZy8Oe+5k46L/EuP9xjIN76DaV1meQE9J1W8sOTMPhRYxkSkDIrf8MTN 1zIvpUoROdE7IwlnkmMH1ZczPm52+JXZbHdk6DKO1YRLmGnsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmJt7v7WAqL/GtMyhQuTjMoPjuhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZkNzNjZmEtZDU1NC0z YjMwLWJmZmEtYjMwZjY1NzM2MmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlAPjJ2Ukij2GoTguCXhgRqivsYVWqHE3WkwjJuSSipVg5SWyMEGj3i ElCyoAqIia1Rr8MlkuQHQg13Iop97bUV7UGjqeR9o43pJ/QEbs1vw8VxRxu4zgHd DLcHN7ZT62g05ePFaL8VRXP+LOcYMhOxV/WWQmblNSooI6OtS+vkWGbK9bxF6CA2 AEiSV/I1BbD6tIbUZaE7QaZNx7aFCzWORBLr6Pz4pCZ44yQj90E3hFDkk0u2zZLZ PTKims+giOJSUs08Gq0pqPseTuzjdC/bCv++2a4H7CyOJX3rXjyCjC5q6Lt+R6lW ehiwJ6yf8QduDAgdSnQcY89VJfDTLt0= -----END CERTIFICATE-----Generated at Sun May 11 01:04:16 2025 by rpki-client