$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa File: cddb631d-a67c-3f22-942c-cd9a33ea7008.roa (raw, json) Hash identifier: Xx0QdDdBKapmqdzkDaeCfA5JrB4JwdvNgvf3iiBR5VY= Subject key identifier: 26:EF:FA:BA:54:72:AC:6B:13:3E:43:D3:71:08:2F:1F:3E:F3:65:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C10EAA7CF0E136AE0B26FC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa Signing time: Mon 05 May 2025 16:34:23 +0000 ROA not before: Mon 05 May 2025 16:34:23 +0000 ROA not after: Sun 03 Aug 2025 16:34:23 +0000 asID: 7029 IP address blocks: 173.189.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:0e:aa:7c:f0:e1:36:ae:0b:26:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 16:34:23 2025 GMT Not After : Aug 3 16:34:23 2025 GMT Subject: CN=84fe855f-aff5-4a15-9642-22c261f783aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9a:f1:b0:65:3e:ff:15:3a:e3:91:b4:6f:88: e9:19:24:56:29:92:75:f7:07:d7:58:b1:1d:ae:4d: 23:bf:eb:a9:02:99:ca:92:0e:78:72:db:ba:c2:8e: 8e:b9:59:7f:0e:56:0b:3a:6a:2f:a5:ab:34:4b:ac: 79:cd:e0:d8:16:9f:92:3d:a2:e0:8b:c9:c9:63:ff: 4d:12:a4:4a:b9:a4:33:29:a9:26:a8:61:95:87:eb: 04:cb:5e:76:17:47:63:61:c5:da:69:c9:9d:89:9e: 7a:de:03:cd:1a:7d:55:b8:a2:0c:9d:80:61:8b:15: 65:41:99:6a:1c:bb:a6:84:26:23:59:a3:1a:30:af: ed:60:0d:6d:50:17:35:d8:e1:74:4f:a2:5a:68:47: c2:e6:ce:cd:e9:50:3e:e4:39:d7:66:aa:82:a4:71: 58:35:d7:34:73:f9:48:d2:7b:91:88:38:78:a4:39: df:1f:eb:42:09:2c:03:1c:89:f4:f2:5e:ac:1f:2c: 76:bd:52:e0:88:48:c8:14:15:a2:18:af:9d:34:40: 8c:6c:ea:b3:69:ca:5f:ff:5d:f8:99:6e:99:ee:f7: 51:f1:40:16:c5:e0:a6:f3:63:7a:da:cf:69:4b:cf: 07:4e:8e:24:5e:1c:80:44:81:03:e2:8b:62:3b:bc: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:FA:BA:54:72:AC:6B:13:3E:43:D3:71:08:2F:1F:3E:F3:65:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cddb631d-a67c-3f22-942c-cd9a33ea7008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7c:62:88:f6:80:9b:0b:34:3a:86:b0:f6:34:e2:e0:c4:d3: 51:19:67:69:f3:aa:16:3b:d8:ef:8a:07:20:10:8c:6e:70:74: f0:e0:32:b7:f6:19:ee:5c:0e:86:ba:ad:99:95:53:6d:13:8a: 11:c7:27:88:4a:70:47:dc:38:f8:ab:50:0f:a9:b0:4d:be:2f: 99:82:bd:9a:b8:e3:30:90:ac:09:42:0d:31:65:f5:f6:ab:05: d4:88:96:9e:14:e5:d4:7a:b7:80:14:d0:f2:d0:8b:4e:be:38: 3c:15:00:65:ca:6c:83:23:64:09:e8:d1:37:4a:af:29:3b:0b: a5:d6:05:8a:38:09:77:65:e4:5d:de:fe:73:18:18:55:d3:5d: 54:95:b3:37:81:df:3f:16:1d:82:e1:1c:a6:40:e9:32:e9:41: 71:ca:6b:85:a2:d1:9d:30:5d:62:09:15:87:92:bc:e6:07:de: df:4b:c0:24:61:e9:a7:1d:fc:84:cd:eb:f4:ae:93:50:61:03: e8:4a:8c:2d:ea:60:a9:5f:5e:94:85:47:2f:27:2f:6e:31:7d: b1:4b:99:98:13:d4:a0:96:cf:3d:af:84:cc:7d:45:0c:80:3b: 0f:f5:16:94:15:6d:ab:62:11:00:4c:cf:a3:b9:c1:bd:da:d1: 76:ee:78:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnBDqp88OE2rgsm/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTE2MzQyM1oXDTI1MDgwMzE2MzQyM1owLzEtMCsGA1UEAxMk ODRmZTg1NWYtYWZmNS00YTE1LTk2NDItMjJjMjYxZjc4M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJrxsGU+/xU645G0b4jpGSRWKZJ19wfXWLEd rk0jv+upApnKkg54ctu6wo6OuVl/DlYLOmovpas0S6x5zeDYFp+SPaLgi8nJY/9N EqRKuaQzKakmqGGVh+sEy152F0djYcXaacmdiZ563gPNGn1VuKIMnYBhixVlQZlq HLumhCYjWaMaMK/tYA1tUBc12OF0T6JaaEfC5s7N6VA+5DnXZqqCpHFYNdc0c/lI 0nuRiDh4pDnfH+tCCSwDHIn08l6sHyx2vVLgiEjIFBWiGK+dNECMbOqzacpf/134 mW6Z7vdR8UAWxeCm82N62s9pS88HTo4kXhyARIED4otiO7wnQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbv+rpUcqxrEz5D03EILx8+82UaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2RkYjYzMWQtYTY3Yy0z ZjIyLTk0MmMtY2Q5YTMzZWE3MDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt8Yoj2gJsLNDqGsPY04uDE01EZZ2nzqhY72O+KByAQjG5wdPDgMrf2 Ge5cDoa6rZmVU20TihHHJ4hKcEfcOPirUA+psE2+L5mCvZq44zCQrAlCDTFl9far BdSIlp4U5dR6t4AU0PLQi06+ODwVAGXKbIMjZAno0TdKryk7C6XWBYo4CXdl5F3e /nMYGFXTXVSVszeB3z8WHYLhHKZA6TLpQXHKa4Wi0Z0wXWIJFYeSvOYH3t9LwCRh 6acd/ITN6/Suk1BhA+hKjC3qYKlfXpSFRy8nL24xfbFLmZgT1KCWzz2vhMx9RQyA Ow/1FpQVbatiEQBMz6O5wb3a0XbueCY= -----END CERTIFICATE-----Generated at Wed May 7 10:38:22 2025 by rpki-client