$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa File: c7fdc099-2cda-3d29-9113-013ca0b1a884.roa (raw, json) Hash identifier: wbA41XXjslG1fVW+MfX1h2i9cOf49+Jw9z17gJ6Bwxo= Subject key identifier: 04:E0:DD:AD:E5:77:F8:4D:A7:04:9F:4A:67:9C:FB:42:88:EF:C5:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1543F2A086D2F3F40860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.189.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:15:43:f2:a0:86:d2:f3:f4:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=0e1697c2-b709-493c-af7f-738e9f0530c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:ce:87:19:cb:de:b6:ab:25:1c:c9:1d:82: b6:89:dc:1d:c3:26:98:e7:df:f9:d6:c1:98:af:dc: b0:1c:4a:8b:a2:1f:77:7e:4b:d8:d5:9f:4c:fa:8d: 91:b4:9e:63:65:dd:1b:09:18:5c:29:17:7f:04:80: 59:3c:a7:c4:f2:2d:9c:79:66:1e:b1:d3:0b:be:42: 71:0f:30:be:9b:73:60:7b:fd:4c:0c:ee:e9:c0:19: 87:83:8a:70:e0:fd:94:77:29:43:3d:59:aa:fb:97: eb:65:b0:2a:4e:49:eb:70:5d:6e:cd:23:28:08:3d: 04:2b:ec:ed:5a:59:e2:3e:4b:20:35:5f:73:f5:46: d4:0a:9b:3d:47:20:a6:dd:db:d2:36:54:41:f4:7d: 47:30:df:5a:07:79:b4:94:5d:52:41:c9:f1:6f:35: a4:fa:e5:de:2d:46:78:1e:ca:bd:5e:10:dc:60:75: 1a:ae:42:1f:37:8a:c6:a7:9a:5c:e1:f5:e6:d9:7f: 6c:5b:53:13:37:f2:b0:cb:9f:46:08:73:b2:7b:48: 43:9a:dd:11:65:04:1a:50:f2:0d:c6:86:0c:92:d8: cc:2e:ba:55:33:c3:00:d7:47:1b:f4:5b:ba:6c:25: 77:9e:02:a3:fd:64:de:b5:b7:87:2d:b5:18:46:a9: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E0:DD:AD:E5:77:F8:4D:A7:04:9F:4A:67:9C:FB:42:88:EF:C5:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7fdc099-2cda-3d29-9113-013ca0b1a884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f6:2c:b1:b5:89:32:c4:f0:9d:0e:99:26:10:a7:ca:fa:76: d7:06:c5:7b:52:fd:08:cc:cc:02:36:f2:82:3c:24:94:f4:cd: 52:76:3c:39:d3:94:05:27:c1:bd:43:fd:0f:a3:4c:7d:1a:07: 5c:d3:7b:f1:f2:fc:3b:36:da:0e:e1:dd:82:b6:cd:90:35:fd: 62:e3:7e:90:6c:a4:95:0a:80:5f:82:0d:e0:5a:30:56:35:fd: 80:d1:75:5e:ce:49:5b:f1:c7:77:fb:71:2b:60:b6:91:e1:c7: 10:8d:27:e1:16:35:37:30:b0:fa:02:d3:e8:34:53:0e:89:14: 60:9b:e6:a3:cd:34:77:1d:1d:15:7b:64:2f:da:8a:5d:90:b9: 52:10:d0:37:3b:df:71:f0:6c:43:f5:4a:c9:03:75:ba:0d:4e: 37:6f:87:99:e7:a3:f2:9b:84:57:17:bc:33:33:3a:22:09:7b: a8:7f:0a:0b:fa:00:79:db:20:83:9f:0b:81:06:c9:2f:df:0c: cf:e4:25:18:58:78:cb:41:ab:15:c9:ee:b2:4d:93:84:4d:c4: a4:23:8e:1f:ef:0c:f6:c2:b4:92:fa:9d:96:9d:d2:52:25:2f: 19:3d:60:17:4b:20:e8:91:af:03:cb:e4:22:01:e3:bd:84:7c: 25:d4:5e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhVD8qCG0vP0CGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MGUxNjk3YzItYjcwOS00OTNjLWFmN2YtNzM4ZTlmMDUzMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tTOhxnL3rarJRzJHYK2idwdwyaY59/51sGY r9ywHEqLoh93fkvY1Z9M+o2RtJ5jZd0bCRhcKRd/BIBZPKfE8i2ceWYesdMLvkJx DzC+m3Nge/1MDO7pwBmHg4pw4P2UdylDPVmq+5frZbAqTknrcF1uzSMoCD0EK+zt WlniPksgNV9z9UbUCps9RyCm3dvSNlRB9H1HMN9aB3m0lF1SQcnxbzWk+uXeLUZ4 Hsq9XhDcYHUarkIfN4rGp5pc4fXm2X9sW1MTN/Kwy59GCHOye0hDmt0RZQQaUPIN xoYMktjMLrpVM8MA10cb9Fu6bCV3ngKj/WTetbeHLbUYRqnjVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATg3a3ld/hNpwSfSmec+0KI78W8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdmZGMwOTktMmNkYS0z ZDI5LTkxMTMtMDEzY2EwYjFhODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr2LLG1iTLE8J0OmSYQp8r6dtcGxXtS/QjMzAI28oI8JJT0zVJ2PDnT lAUnwb1D/Q+jTH0aB1zTe/Hy/Ds22g7h3YK2zZA1/WLjfpBspJUKgF+CDeBaMFY1 /YDRdV7OSVvxx3f7cStgtpHhxxCNJ+EWNTcwsPoC0+g0Uw6JFGCb5qPNNHcdHRV7 ZC/ail2QuVIQ0Dc733HwbEP1SskDdboNTjdvh5nno/KbhFcXvDMzOiIJe6h/Cgv6 AHnbIIOfC4EGyS/fDM/kJRhYeMtBqxXJ7rJNk4RNxKQjjh/vDPbCtJL6nZad0lIl Lxk9YBdLIOiRrwPL5CIB472EfCXUXtU= -----END CERTIFICATE-----Generated at Sat May 10 02:24:46 2025 by rpki-client