$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6fd30bc-fb00-3656-90cd-317c03dd58ec.roa File: d6fd30bc-fb00-3656-90cd-317c03dd58ec.roa (raw, json) Hash identifier: wsxpqfztnB27EGOReqDiJmFxM+WGWAx+Eg4nvpIzypM= Subject key identifier: 74:C8:1C:02:9B:57:66:D0:96:2F:A2:25:55:F9:C3:61:CD:B2:3E:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1A2A640FC32615579480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6fd30bc-fb00-3656-90cd-317c03dd58ec.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.188.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:2a:64:0f:c3:26:15:57:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=08cc8bde-422a-442f-8e43-a124db85c318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:24:1a:3f:a6:93:b4:c0:e0:f0:da:68:07: 22:33:51:8c:21:f7:55:14:18:7c:c4:0e:fd:71:59: df:47:57:8b:61:ab:68:59:8b:50:f3:19:ae:d2:d9: 40:f0:02:58:2f:39:ba:e8:a4:a5:a1:28:e6:e5:cd: fd:d3:8c:1d:0a:f4:8c:b6:06:17:5f:c6:a7:45:cb: 5c:63:45:0e:ad:8d:7c:3b:9d:88:5b:a3:5d:65:30: fc:76:4c:7a:d6:69:a7:66:97:c7:7a:0a:8e:1a:12: b4:fe:f9:17:e8:a9:4c:1f:69:78:61:7e:73:bd:30: e4:d5:f3:c1:ef:6c:77:b9:49:93:a5:85:28:23:97: c4:b2:66:fc:52:dc:31:93:55:c1:f3:fe:16:c2:1f: c9:6d:45:f7:19:97:fe:4b:95:3e:e6:6a:1e:8a:af: 3d:f9:52:26:bd:b9:6c:d3:43:87:4f:c6:e0:83:3c: de:94:12:79:cf:53:e7:e3:3b:85:fb:02:48:8a:96: 9a:8d:0d:ae:42:ff:7a:ed:d2:4e:98:b9:46:bc:e1: 88:98:57:c3:f9:7c:45:75:c9:a9:97:b2:76:57:cb: f3:20:6a:04:32:b1:2d:38:b7:e6:21:6e:39:3c:7f: 86:84:0a:d8:a4:c8:4d:c9:a9:be:b8:84:22:29:3f: fc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C8:1C:02:9B:57:66:D0:96:2F:A2:25:55:F9:C3:61:CD:B2:3E:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6fd30bc-fb00-3656-90cd-317c03dd58ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d5:6e:bd:7a:8b:13:6e:89:52:c9:ce:7e:5e:68:88:3e:50: f7:5c:4f:b3:74:c1:ef:b3:a6:2e:de:8f:4d:c9:c3:38:f4:a3: 54:cb:df:ee:6c:48:70:e2:85:32:22:9f:56:84:05:00:61:81: 1d:87:cd:9f:e2:4c:68:51:4a:af:f5:ce:2c:0a:6a:26:b2:4b: e7:25:f1:97:4b:38:7f:e5:dc:04:42:bb:6c:83:1a:f8:46:87: cf:7d:49:0d:e4:4b:f0:46:e4:e0:75:25:12:2d:f8:01:98:a8: d4:c3:a9:c7:bd:28:0f:8e:bf:3b:ef:4e:c1:f8:6c:d3:6e:ec: 27:cc:5f:51:ce:fe:6a:2a:93:23:ad:b7:09:7c:d4:e4:e9:dc: 3b:94:4a:60:30:ac:a6:eb:f5:76:71:59:d9:5c:a9:b1:5b:5a: 4f:d9:17:cb:30:9b:1a:75:93:9e:9d:9b:a1:2a:2c:55:61:e5: a3:a1:4a:84:17:db:d9:13:15:ec:6f:1a:01:93:02:60:5f:61: 20:fe:28:26:88:fa:82:6d:82:8c:8c:15:70:83:bf:4c:df:54: b6:3f:63:ac:f2:db:ff:10:61:3c:bb:3a:58:d3:9b:93:76:98: e6:1d:67:f7:0e:42:55:8f:b2:24:d2:43:f1:87:0a:eb:65:d4: db:ab:e7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhoqZA/DJhVXlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDhjYzhiZGUtNDIyYS00NDJmLThlNDMtYTEyNGRiODVjMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4QkGj+mk7TA4PDaaAciM1GMIfdVFBh8xA79 cVnfR1eLYatoWYtQ8xmu0tlA8AJYLzm66KSloSjm5c3904wdCvSMtgYXX8anRctc Y0UOrY18O52IW6NdZTD8dkx61mmnZpfHegqOGhK0/vkX6KlMH2l4YX5zvTDk1fPB 72x3uUmTpYUoI5fEsmb8Utwxk1XB8/4Wwh/JbUX3GZf+S5U+5moeiq89+VImvbls 00OHT8bggzzelBJ5z1Pn4zuF+wJIipaajQ2uQv967dJOmLlGvOGImFfD+XxFdcmp l7J2V8vzIGoEMrEtOLfmIW45PH+GhArYpMhNyam+uIQiKT/8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTIHAKbV2bQli+iJVX5w2HNsj64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZmZDMwYmMtZmIwMC0z NjU2LTkwY2QtMzE3YzAzZGQ1OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrby4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHVbr16ixNuiVLJzn5eaIg+UPdcT7N0we+zpi7ej03Jwzj0o1TL3+5s SHDihTIin1aEBQBhgR2HzZ/iTGhRSq/1ziwKaiayS+cl8ZdLOH/l3ARCu2yDGvhG h899SQ3kS/BG5OB1JRIt+AGYqNTDqce9KA+OvzvvTsH4bNNu7CfMX1HO/moqkyOt twl81OTp3DuUSmAwrKbr9XZxWdlcqbFbWk/ZF8swmxp1k56dm6EqLFVh5aOhSoQX 29kTFexvGgGTAmBfYSD+KCaI+oJtgoyMFXCDv0zfVLY/Y6zy2/8QYTy7OljTm5N2 mOYdZ/cOQlWPsiTSQ/GHCutl1Nur5/I= -----END CERTIFICATE-----Generated at Mon May 12 18:27:16 2025 by rpki-client