$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa File: b677160a-b109-310e-9ba1-1747b13bff1f.roa (raw, json) Hash identifier: RHjywg0Dtx53emozemRXzWncX6dX85v9c7RLkl9AzQ8= Subject key identifier: 9C:B5:40:A3:14:1E:6D:E8:FD:7C:7E:E0:EE:85:27:22:16:19:BA:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3FDD7A3DF47820344340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.187.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:dd:7a:3d:f4:78:20:34:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2cc780ad-8524-4b69-bc4a-5d1b545270e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:9d:d5:28:a7:6c:00:5b:2f:01:44:b4:46: 60:e4:42:d8:24:35:d7:25:99:2b:a7:f3:c8:af:9e: fd:98:05:8e:92:dc:1f:68:c7:60:69:b8:ed:2f:ea: f1:15:7b:43:c5:2c:db:38:bd:bb:d6:e0:73:e9:53: ba:66:ab:3e:10:5b:a6:f8:ea:dd:a5:af:98:b2:06: 90:09:86:8b:42:1b:5b:d8:b1:ed:fb:66:fe:20:2e: 28:f9:aa:ab:93:ac:a8:7f:2e:4f:ab:4e:34:56:1f: ba:e7:6d:a3:96:a9:fa:0c:18:25:b2:b6:b2:0e:db: e5:bc:f7:10:6d:26:95:5e:3f:4d:b1:3e:34:39:35: 94:d3:1f:99:74:73:7d:3e:a8:46:d7:fb:fd:8f:e9: 3b:94:34:68:50:a9:4e:a4:b8:d5:83:3d:ac:35:a6: 52:64:aa:a1:30:3d:7f:be:e5:d4:f6:c5:16:e2:3a: 49:18:62:56:6a:a5:23:4f:9d:9d:46:4c:07:cf:a1: 9a:42:c1:89:7d:08:59:f0:e6:1a:2c:42:0a:6e:18: 7a:6c:b0:95:c7:49:0d:58:5b:75:b0:d6:f2:a7:ea: 8d:7d:ad:81:ac:ca:9d:ad:bb:2d:c3:97:76:73:79: 5f:57:55:4f:13:33:89:ef:3c:b9:94:3e:f1:41:3d: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B5:40:A3:14:1E:6D:E8:FD:7C:7E:E0:EE:85:27:22:16:19:BA:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b677160a-b109-310e-9ba1-1747b13bff1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:71:8b:35:0e:4a:10:5d:35:86:bf:6e:94:b7:e6:16:ba:b6: e8:72:6c:2d:87:21:77:d8:c3:ca:b0:ef:9c:f4:2d:3c:1b:b7: bf:ae:e4:02:e4:3d:cf:7b:1e:1f:bf:ce:ec:44:30:34:56:72: a2:38:57:20:3e:ed:b4:c7:68:35:fa:b9:1c:70:9a:e4:ee:b2: da:7b:36:87:57:0a:cb:e9:4f:fe:b5:d7:ab:69:7c:7e:a7:d1: 52:ad:54:7b:7c:5a:53:a3:45:0b:7f:4c:1c:9b:ab:d7:62:46: 8e:5e:cd:98:38:56:44:d4:07:f1:8d:20:af:f9:90:9b:51:64: f1:4f:61:69:82:1f:00:55:99:b5:8a:d5:4c:ce:ac:ad:a5:2e: da:c8:c9:12:f4:c0:ec:fa:d3:72:cb:44:02:a4:0b:cf:ea:c2: 70:f7:d8:74:45:30:9d:e8:3f:5d:1f:82:21:54:fd:30:bc:ca: 63:b0:d5:19:fe:2c:0b:ec:7c:06:b8:d8:db:06:1f:03:67:07: 04:4b:98:19:2e:3d:ca:8a:52:62:d4:df:8f:88:b7:cf:cf:1a: a5:2f:44:d8:0e:5d:e0:17:33:58:fc:06:50:6d:85:f4:1f:e6: 22:33:18:b7:15:31:8c:2c:e5:65:1c:6f:f4:c3:10:97:d0:db: 08:6d:77:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj/dej30eCA0Q0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmNjNzgwYWQtODUyNC00YjY5LWJjNGEtNWQxYjU0NTI3MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU+d1SinbABbLwFEtEZg5ELYJDXXJZkrp/PI r579mAWOktwfaMdgabjtL+rxFXtDxSzbOL271uBz6VO6Zqs+EFum+Ordpa+YsgaQ CYaLQhtb2LHt+2b+IC4o+aqrk6yofy5Pq040Vh+6522jlqn6DBglsrayDtvlvPcQ bSaVXj9NsT40OTWU0x+ZdHN9PqhG1/v9j+k7lDRoUKlOpLjVgz2sNaZSZKqhMD1/ vuXU9sUW4jpJGGJWaqUjT52dRkwHz6GaQsGJfQhZ8OYaLEIKbhh6bLCVx0kNWFt1 sNbyp+qNfa2BrMqdrbstw5d2c3lfV1VPEzOJ7zy5lD7xQT0NlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJy1QKMUHm3o/Xx+4O6FJyIWGbqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY3NzE2MGEtYjEwOS0z MTBlLTliYTEtMTc0N2IxM2JmZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1xizUOShBdNYa/bpS35ha6tuhybC2HIXfYw8qw75z0LTwbt7+u5ALk Pc97Hh+/zuxEMDRWcqI4VyA+7bTHaDX6uRxwmuTustp7NodXCsvpT/6116tpfH6n 0VKtVHt8WlOjRQt/TBybq9diRo5ezZg4VkTUB/GNIK/5kJtRZPFPYWmCHwBVmbWK 1UzOrK2lLtrIyRL0wOz603LLRAKkC8/qwnD32HRFMJ3oP10fgiFU/TC8ymOw1Rn+ LAvsfAa42NsGHwNnBwRLmBkuPcqKUmLU34+It8/PGqUvRNgOXeAXM1j8BlBthfQf 5iIzGLcVMYws5WUcb/TDEJfQ2whtd5g= -----END CERTIFICATE-----Generated at Sun May 11 03:54:30 2025 by rpki-client