$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa File: bdcc1688-3489-357f-95be-95cce13504c4.roa (raw, json) Hash identifier: C9Foz85iF1I4eF1kPzXQ0X2MpFiy6sIaln1O8mSc7bk= Subject key identifier: 7F:09:64:CC:61:8E:55:42:6A:8D:A6:B0:3C:E2:FD:D6:A9:05:09:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2438F6EA5B9376E1D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.189.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:24:38:f6:ea:5b:93:76:e1:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=fba683ae-4e73-456e-b57e-5ecca4710aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:ce:32:62:d6:35:d5:71:45:be:52:c8:50: 33:21:a9:d9:7d:2d:66:90:a0:46:b8:e3:11:46:0e: 78:18:f6:a7:3f:1a:61:79:e4:7c:bc:ee:09:8f:14: e4:83:7d:cb:a9:36:c3:fe:f5:e5:97:8f:fb:5d:37: 85:76:58:fb:c2:0f:8f:3b:5a:04:e8:d0:b8:52:e0: f0:5a:68:16:f1:7c:fb:0a:c5:4c:51:ef:62:de:0d: 79:57:aa:a0:34:15:07:7b:57:26:4f:fa:bf:2c:2c: e0:3d:4a:6e:6c:3b:d1:95:9e:17:00:a5:c9:b8:8a: 6d:6a:79:77:f7:d3:3d:44:06:28:05:2e:05:ba:e3: fe:0b:5a:9d:8c:1a:be:ae:ae:72:19:93:80:20:69: 2f:02:41:a2:6b:c0:0b:e6:d7:6a:51:56:98:eb:7e: 38:c9:d8:cb:9f:70:4b:d8:85:af:21:76:ee:1b:21: 5c:b3:d4:62:4c:81:e8:b8:72:53:72:6a:cb:de:c5: 91:94:03:d0:6c:ed:94:34:67:5d:59:dd:36:ff:2f: 75:69:7c:c7:ec:a5:d7:fc:66:89:f2:03:8d:ff:22: 24:97:81:d1:74:66:b9:96:46:70:9d:3f:2a:2a:90: 53:ea:e1:a6:1e:ac:e3:9a:45:a6:81:62:6b:7d:60: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:64:CC:61:8E:55:42:6A:8D:A6:B0:3C:E2:FD:D6:A9:05:09:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bdcc1688-3489-357f-95be-95cce13504c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2a:28:5a:9c:e6:17:d7:55:15:ae:d8:29:f7:f2:c2:51:b5: 0a:1a:b0:21:36:27:26:00:b3:bc:3f:a5:d5:8c:1a:30:f7:f6: 6e:12:fe:a0:05:f2:25:33:8c:91:81:ab:3f:fb:bf:79:e5:0d: f4:23:77:01:ca:21:44:10:4c:ce:1d:3e:99:a9:65:35:3b:f3: 47:f8:2d:dc:7b:64:be:4e:12:02:7b:ea:5e:31:43:52:e5:b1: 11:65:a9:ad:19:1e:0d:65:fe:5c:1b:3f:29:8a:15:f9:b7:ba: c7:ef:26:e6:90:2a:75:6e:fd:1d:11:3e:18:0e:b1:1b:d9:0e: bd:f5:32:0f:15:4f:a9:e4:e3:cb:d2:b5:86:b3:ee:30:0d:ed: 8e:2d:77:20:0b:25:b1:0c:af:c6:b8:9d:da:4a:bc:ae:d6:9a: e4:6a:06:06:68:19:a9:a6:1d:ec:c1:62:95:c1:b6:5e:22:5e: 86:6d:37:90:ef:94:f6:dd:81:6e:e5:31:c0:6c:75:91:b4:e6: 96:8e:51:0e:65:3e:bb:22:d7:96:c8:86:7c:79:d4:03:7f:ec: 97:7a:83:1d:69:db:52:34:0a:b9:fb:ab:90:c0:5f:fc:e4:b9: 73:d0:4b:64:92:49:d4:6c:49:5d:05:67:9a:74:6a:be:d5:7c: af:8f:ab:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiQ49upbk3bh0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmJhNjgzYWUtNGU3My00NTZlLWI1N2UtNWVjY2E0NzEwYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8LOMmLWNdVxRb5SyFAzIanZfS1mkKBGuOMR Rg54GPanPxpheeR8vO4JjxTkg33LqTbD/vXll4/7XTeFdlj7wg+PO1oE6NC4UuDw WmgW8Xz7CsVMUe9i3g15V6qgNBUHe1cmT/q/LCzgPUpubDvRlZ4XAKXJuIptanl3 99M9RAYoBS4FuuP+C1qdjBq+rq5yGZOAIGkvAkGia8AL5tdqUVaY6344ydjLn3BL 2IWvIXbuGyFcs9RiTIHouHJTcmrL3sWRlAPQbO2UNGddWd02/y91aXzH7KXX/GaJ 8gON/yIkl4HRdGa5lkZwnT8qKpBT6uGmHqzjmkWmgWJrfWAgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8JZMxhjlVCao2msDzi/dapBQkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmRjYzE2ODgtMzQ4OS0z NTdmLTk1YmUtOTVjY2UxMzUwNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrb1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsqKFqc5hfXVRWu2Cn38sJRtQoasCE2JyYAs7w/pdWMGjD39m4S/qAF 8iUzjJGBqz/7v3nlDfQjdwHKIUQQTM4dPpmpZTU780f4Ldx7ZL5OEgJ76l4xQ1Ll sRFlqa0ZHg1l/lwbPymKFfm3usfvJuaQKnVu/R0RPhgOsRvZDr31Mg8VT6nk48vS tYaz7jAN7Y4tdyALJbEMr8a4ndpKvK7WmuRqBgZoGammHezBYpXBtl4iXoZtN5Dv lPbdgW7lMcBsdZG05paOUQ5lPrsi15bIhnx51AN/7Jd6gx1p21I0Crn7q5DAX/zk uXPQS2SSSdRsSV0FZ5p0ar7VfK+Pqws= -----END CERTIFICATE-----Generated at Wed May 14 11:54:59 2025 by rpki-client