$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa File: ceef92dd-ffef-35a7-9def-455b260a3f30.roa (raw, json) Hash identifier: T2xOOMMv9HgWLtU9TsDbUmspjc6E6dVMM8ABEg6czlI= Subject key identifier: 8D:12:64:6B:09:B7:47:7D:98:0E:76:44:11:63:86:DD:8D:31:99:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA8B6E1FA89EC7C8C0BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.188.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:b6:e1:fa:89:ec:7c:8c:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=137a0d16-b1ba-4d24-84fb-f345d0d4fcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:4d:af:24:a9:52:37:cb:49:86:68:65:cf: e6:f5:17:f1:24:7f:cf:7f:50:34:51:fd:eb:cf:c3: 43:d0:00:45:eb:19:f9:b2:f2:56:0e:67:0f:5d:d2: 62:85:36:4e:4f:d2:b0:52:df:8b:2d:e2:28:16:37: 97:79:75:17:19:38:47:60:08:dd:36:61:ab:94:63: 73:d6:e2:d7:d8:3a:af:15:6c:47:15:5e:18:af:28: 40:c4:59:e2:1d:cd:98:2d:fa:3d:c4:ca:42:7f:2f: 0b:4e:89:72:43:ba:14:93:87:9a:06:a0:5d:3f:8d: 10:00:f4:b6:fa:65:64:45:0c:f0:34:ef:b9:ab:ba: bb:ae:16:14:10:19:30:85:3f:ae:35:67:d7:86:22: f9:40:76:26:77:de:cc:21:98:87:f8:65:10:b0:62: 76:e4:d4:90:09:9c:2f:28:ee:02:ac:88:e1:0a:31: b5:91:92:55:c7:60:d9:ad:bb:ef:c3:70:22:f5:f7: c6:e0:39:d4:c4:6b:b4:d0:5d:c1:7f:3d:78:ff:34: 6a:bc:30:0d:02:55:c6:3a:d6:b3:f9:a1:d0:3e:65: c3:39:4a:4d:d9:d7:13:36:1c:9a:90:a4:2b:2d:7f: 39:e4:7d:d2:e5:f9:d3:d8:7b:ca:14:3a:2a:55:f3: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:12:64:6B:09:B7:47:7D:98:0E:76:44:11:63:86:DD:8D:31:99:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ceef92dd-ffef-35a7-9def-455b260a3f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d9:5f:96:6b:76:63:1f:b6:2d:cf:2a:9b:b6:9e:d0:36:f1: a5:a4:5c:fb:83:6f:23:25:28:1e:6f:60:3e:cb:ff:a1:c5:7b: 1d:b2:19:0f:8e:51:8a:9f:a5:cc:e3:b0:64:6b:0b:c0:5a:4e: 20:bd:40:92:be:a8:cb:52:0e:7d:44:7a:57:b6:38:c2:27:de: e1:ae:25:16:76:49:5d:aa:79:8e:30:4f:62:e4:95:23:7b:5b: e0:c5:3b:2f:82:98:89:64:e4:9a:65:70:2a:25:35:40:e7:81: 87:c1:7c:96:09:d6:dd:5c:e8:97:5b:bc:14:8b:e1:05:9c:d8: bd:2f:94:fd:36:56:f1:2d:7c:3f:9a:97:1d:d8:d2:0e:4c:a8: 65:0a:bd:09:b9:f7:c4:7d:c0:d0:a2:5e:78:c0:a4:d5:d2:06: a6:94:b6:a2:30:f2:38:6c:1e:e0:e7:e2:fd:9c:13:9b:0f:e8: db:bb:61:89:2a:27:af:08:97:a6:56:c6:6e:7b:ae:6f:38:c0: ae:3e:24:ac:9a:ca:92:cc:00:71:36:46:d9:c4:ad:e0:ee:37: d2:70:d3:ba:45:9e:11:04:8f:58:d2:2d:2a:53:94:09:9f:00: e4:13:57:66:9b:04:03:59:d4:bf:b6:37:50:d3:d0:02:18:cb: 28:30:8a:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6i24fqJ7HyMC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTM3YTBkMTYtYjFiYS00ZDI0LTg0ZmItZjM0NWQwZDRmY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq75NrySpUjfLSYZoZc/m9RfxJH/Pf1A0Uf3r z8ND0ABF6xn5svJWDmcPXdJihTZOT9KwUt+LLeIoFjeXeXUXGThHYAjdNmGrlGNz 1uLX2DqvFWxHFV4YryhAxFniHc2YLfo9xMpCfy8LTolyQ7oUk4eaBqBdP40QAPS2 +mVkRQzwNO+5q7q7rhYUEBkwhT+uNWfXhiL5QHYmd97MIZiH+GUQsGJ25NSQCZwv KO4CrIjhCjG1kZJVx2DZrbvvw3Ai9ffG4DnUxGu00F3Bfz14/zRqvDANAlXGOtaz +aHQPmXDOUpN2dcTNhyakKQrLX855H3S5fnT2HvKFDoqVfMMewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0SZGsJt0d9mA52RBFjht2NMZnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VlZjkyZGQtZmZlZi0z NWE3LTlkZWYtNDU1YjI2MGEzZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITZX5ZrdmMfti3PKpu2ntA28aWkXPuDbyMlKB5vYD7L/6HFex2yGQ+O UYqfpczjsGRrC8BaTiC9QJK+qMtSDn1Eele2OMIn3uGuJRZ2SV2qeY4wT2LklSN7 W+DFOy+CmIlk5JplcColNUDngYfBfJYJ1t1c6JdbvBSL4QWc2L0vlP02VvEtfD+a lx3Y0g5MqGUKvQm598R9wNCiXnjApNXSBqaUtqIw8jhsHuDn4v2cE5sP6Nu7YYkq J68Il6ZWxm57rm84wK4+JKyaypLMAHE2RtnEreDuN9Jw07pFnhEEj1jSLSpTlAmf AOQTV2abBANZ1L+2N1DT0AIYyygwigc= -----END CERTIFICATE-----Generated at Wed May 7 07:53:59 2025 by rpki-client