$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa File: e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa (raw, json) Hash identifier: O8tH5p+Vtxc6w/91CZ+duW1u3gwJ1b78EAujTmqQQYw= Subject key identifier: E1:A5:8F:A2:DF:83:A6:1E:3A:91:01:FB:55:CA:04:E5:E4:67:D7:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3FADCE9CB3532AE95C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.186.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:ad:ce:9c:b3:53:2a:e9:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=65d43315-2155-4044-a012-7dd016e640dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:cb:3b:14:fa:f5:5b:1d:87:e4:6e:7e:ce: 1f:fc:16:1e:c5:10:3d:8f:27:f4:d9:e9:9b:4c:11: b4:77:18:4c:af:7e:99:57:b4:8a:95:de:7e:e4:d3: f4:5e:9e:1a:dd:65:3a:3a:c5:2a:f6:b4:db:70:ab: bc:b7:5e:87:40:7d:02:14:7a:5b:97:4b:f2:30:5b: f8:89:8f:71:ff:cc:b9:65:f6:9d:4d:f9:08:a7:3f: d6:1c:f9:e1:0c:e1:e3:92:de:6f:47:0e:8f:dd:b5: 86:97:f4:93:06:d1:1c:45:67:90:10:ab:ef:af:5f: 86:d8:e3:5c:0b:27:5a:e1:39:56:82:18:ed:b9:bf: 8f:77:26:9d:25:1b:a3:85:c8:3b:e2:3e:02:e7:df: 81:a7:af:51:80:81:1e:c9:75:b3:05:e7:ea:dc:35: fc:80:37:23:86:40:fa:43:df:02:db:5e:73:3b:d8: 5d:ac:2d:b9:0a:fb:2e:87:8c:2f:02:1a:bd:2f:78: d8:c7:fa:e0:fa:6e:12:dd:b3:c5:bb:d0:3b:f8:4f: c1:20:cc:d7:21:30:04:aa:1b:72:77:5a:00:05:40: fd:8d:b2:dc:08:31:00:a9:cb:eb:c2:9f:39:f0:33: ff:2c:a4:5d:f0:19:2a:9a:62:a2:0c:aa:45:d2:5d: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A5:8F:A2:DF:83:A6:1E:3A:91:01:FB:55:CA:04:E5:E4:67:D7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8d2fddd-6fbf-3fc8-a28d-07ada0b3d8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:55:df:d0:49:54:22:fa:5f:16:ce:10:0a:6f:a0:eb:13:6f: 99:25:18:85:4c:58:18:d4:25:39:c8:40:b5:48:0e:6c:f8:f3: 35:51:8f:0c:a8:45:90:cd:2b:f2:c4:e2:cd:b9:93:c8:a4:cd: 8e:56:2d:c2:58:89:6d:5b:b3:8e:d3:92:ab:32:c7:e8:12:df: 5e:0e:ff:c6:73:68:3b:d8:34:ae:8d:97:69:54:36:9f:f8:f5: 07:2b:98:e2:ac:1f:21:d5:0d:72:a9:3f:28:fc:dd:fb:aa:a1: 0f:21:f2:23:57:57:ef:03:08:ad:b3:69:5f:7f:2b:31:01:25: 3c:59:45:ee:4b:88:a5:6d:4e:fa:85:af:a9:3e:f0:81:31:d1: 2f:e4:7a:4c:6b:78:43:d2:78:e8:e6:ce:ad:96:03:f1:30:dd: de:1d:a6:b5:4f:4f:45:84:22:bf:27:8f:b9:fa:5a:5a:15:9f: 7e:db:21:6d:2f:ae:fc:10:50:c0:51:7c:36:71:80:fb:76:87: 4f:c4:97:3a:a9:61:11:5e:be:45:97:60:9b:2f:a4:2e:a4:1e: 17:f2:4a:d2:23:d4:c3:6d:0c:d2:6d:98:16:a8:19:9e:f5:42: c6:0a:5d:7c:10:40:32:84:7f:c4:78:19:5b:80:ca:d0:35:0d: 2c:90:9a:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj+tzpyzUyrpXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjVkNDMzMTUtMjE1NS00MDQ0LWEwMTItN2RkMDE2ZTY0MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmTLOxT69Vsdh+Rufs4f/BYexRA9jyf02emb TBG0dxhMr36ZV7SKld5+5NP0Xp4a3WU6OsUq9rTbcKu8t16HQH0CFHpbl0vyMFv4 iY9x/8y5ZfadTfkIpz/WHPnhDOHjkt5vRw6P3bWGl/STBtEcRWeQEKvvr1+G2ONc Cyda4TlWghjtub+PdyadJRujhcg74j4C59+Bp69RgIEeyXWzBefq3DX8gDcjhkD6 Q98C215zO9hdrC25Cvsuh4wvAhq9L3jYx/rg+m4S3bPFu9A7+E/BIMzXITAEqhty d1oABUD9jbLcCDEAqcvrwp858DP/LKRd8BkqmmKiDKpF0l32OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGlj6Lfg6YeOpEB+1XKBOXkZ9dwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThkMmZkZGQtNmZiZi0z ZmM4LWEyOGQtMDdhZGEwYjNkOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpV39BJVCL6XxbOEApvoOsTb5klGIVMWBjUJTnIQLVIDmz48zVRjwyo RZDNK/LE4s25k8ikzY5WLcJYiW1bs47Tkqsyx+gS314O/8ZzaDvYNK6Nl2lUNp/4 9QcrmOKsHyHVDXKpPyj83fuqoQ8h8iNXV+8DCK2zaV9/KzEBJTxZRe5LiKVtTvqF r6k+8IEx0S/kekxreEPSeOjmzq2WA/Ew3d4dprVPT0WEIr8nj7n6WloVn37bIW0v rvwQUMBRfDZxgPt2h0/ElzqpYRFevkWXYJsvpC6kHhfyStIj1MNtDNJtmBaoGZ71 QsYKXXwQQDKEf8R4GVuAytA1DSyQmh8= -----END CERTIFICATE-----Generated at Wed May 7 21:40:04 2025 by rpki-client