$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa File: c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa (raw, json) Hash identifier: 6ihhm7unXaRwZF0Ak3V4jsk5za8gZ8Jcj4H+V0seZW8= Subject key identifier: 69:DF:54:D6:9A:4C:89:70:DC:D5:21:0A:91:8F:4D:05:05:56:DC:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4AC6EBF90D1EABB73500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 30522 IP address blocks: 173.189.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:c6:eb:f9:0d:1e:ab:b7:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6f7b693a-27ce-4052-8d9f-e592478c994f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:34:77:ea:47:95:71:57:0e:42:45:78:6b: ba:67:12:b6:4a:1f:2b:a1:9f:2d:96:a0:0e:8e:be: f5:de:60:c9:10:c2:dc:d3:67:d3:7d:b2:36:2e:4f: 60:b3:e8:c5:c4:2f:9d:9c:0f:54:85:0f:10:63:e6: 10:a0:64:14:1d:30:1b:44:14:a3:8c:3f:7f:69:7c: c3:c2:c5:7e:a4:dd:b8:e7:33:3d:17:e6:b4:e0:68: f9:a4:3a:f7:ef:db:06:23:67:75:f4:cd:e0:61:18: d3:c9:b2:26:39:84:cb:23:2b:67:2d:c2:a9:a3:43: 83:87:06:d7:4c:16:fb:35:9f:d9:f6:73:f6:2b:8e: c0:6b:6f:30:c7:c6:96:a5:f9:b5:40:55:5b:39:55: 2a:90:8e:cb:cc:a8:02:a2:51:c1:2f:ab:00:66:60: ce:ca:6c:1a:87:7a:15:cb:20:0d:03:d5:05:f6:1c: 16:6f:24:43:74:9a:43:4e:d2:03:d4:1f:eb:88:2a: 24:73:44:25:7d:f7:a0:2e:cf:97:4d:63:ad:59:fa: 25:b0:99:97:c6:c2:de:20:d7:c0:c8:6b:99:fd:45: 43:46:d8:89:16:63:f8:fa:f1:59:7f:30:96:58:0d: fb:54:94:3e:81:17:f6:c1:01:67:80:6e:38:50:80: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:54:D6:9A:4C:89:70:DC:D5:21:0A:91:8F:4D:05:05:56:DC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d1be9e-dee5-3009-b5fe-30872df65cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3c:98:23:fa:6f:47:b1:ec:dc:4c:e6:54:40:4b:3e:d6:45: b1:bf:78:85:13:72:08:31:cb:c7:be:0c:ff:d2:33:a6:bb:9e: 75:9f:06:af:d3:7b:ab:c8:41:9b:9f:90:0a:23:8a:d0:39:8a: e9:da:86:ba:ae:03:06:1d:3e:d0:db:72:8d:ff:92:40:67:d9: d8:60:c1:74:9a:f2:e7:7a:c9:1d:60:3d:b2:2f:21:77:9b:1b: 89:84:d4:49:70:42:fc:1b:76:93:83:31:26:47:15:79:6f:02: 48:5e:7f:75:55:2a:ff:7f:0b:5e:4d:51:bb:98:bf:a3:ae:93: 20:c7:4e:9a:8a:ac:63:d4:22:20:f9:4d:7d:6d:54:96:c0:23: 10:73:b0:f0:ab:74:e2:19:90:e7:4a:65:1d:25:2e:c2:75:ca: cc:5b:0e:6b:98:f6:97:bf:bb:33:d5:90:ea:33:3c:76:e2:4b: 0d:49:bc:ae:6a:81:7a:c2:59:bf:50:d2:8a:93:0c:07:1b:2d: 56:0e:a7:66:71:c0:b2:2d:35:4c:d2:6f:67:53:b8:04:c4:47: b5:6f:57:b5:0e:04:ac:78:29:d5:23:24:38:95:bb:4d:08:97: ea:93:4e:35:95:45:c6:0e:2f:2d:43:f0:4e:e7:84:9e:91:a2: 3b:aa:c7:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkrG6/kNHqu3NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmY3YjY5M2EtMjdjZS00MDUyLThkOWYtZTU5MjQ3OGM5OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/40d+pHlXFXDkJFeGu6ZxK2Sh8roZ8tlqAO jr713mDJEMLc02fTfbI2Lk9gs+jFxC+dnA9UhQ8QY+YQoGQUHTAbRBSjjD9/aXzD wsV+pN245zM9F+a04Gj5pDr379sGI2d19M3gYRjTybImOYTLIytnLcKpo0ODhwbX TBb7NZ/Z9nP2K47Aa28wx8aWpfm1QFVbOVUqkI7LzKgColHBL6sAZmDOymwah3oV yyANA9UF9hwWbyRDdJpDTtID1B/riCokc0QlffegLs+XTWOtWfolsJmXxsLeINfA yGuZ/UVDRtiJFmP4+vFZfzCWWA37VJQ+gRf2wQFngG44UIArxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnfVNaaTIlw3NUhCpGPTQUFVtydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMWJlOWUtZGVlNS0z MDA5LWI1ZmUtMzA4NzJkZjY1Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB08mCP6b0ex7NxM5lRASz7WRbG/eIUTcggxy8e+DP/SM6a7nnWfBq/T e6vIQZufkAojitA5iunahrquAwYdPtDbco3/kkBn2dhgwXSa8ud6yR1gPbIvIXeb G4mE1ElwQvwbdpODMSZHFXlvAkhef3VVKv9/C15NUbuYv6OukyDHTpqKrGPUIiD5 TX1tVJbAIxBzsPCrdOIZkOdKZR0lLsJ1ysxbDmuY9pe/uzPVkOozPHbiSw1JvK5q gXrCWb9Q0oqTDAcbLVYOp2ZxwLItNUzSb2dTuATER7VvV7UOBKx4KdUjJDiVu00I l+qTTjWVRcYOLy1D8E7nhJ6Rojuqx84= -----END CERTIFICATE-----Generated at Sat May 10 14:57:30 2025 by rpki-client