$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa File: f409e796-564a-3237-9a12-bc37b08591dc.roa (raw, json) Hash identifier: MNQa/vm7EAsAqtoOckMHG5JFEAXKUKQ4If7R1eYVJjU= Subject key identifier: 2D:94:90:C6:F4:50:F2:B7:80:B3:39:19:00:E5:C2:7C:68:56:C0:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3FC5A7FDBAFE2EBFBF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.186.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:c5:a7:fd:ba:fe:2e:bf:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7468ecb8-fe4e-4036-90b1-235890ce2558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:eb:da:95:0b:98:75:5b:30:98:3f:f3:6d: cd:4c:a5:8f:70:bd:d5:ba:0d:fe:60:63:56:9b:75: 04:1c:46:9b:10:5c:32:12:ef:cd:eb:4f:66:d6:b1: ed:96:be:36:43:15:d5:24:8d:1f:64:08:19:6d:73: af:fd:fe:ff:f9:15:57:99:cb:69:25:69:bf:7c:bc: 6f:30:d6:be:8e:1e:a2:75:59:0a:97:2c:9f:52:6f: c6:ee:fe:64:24:99:62:5d:94:b2:92:c8:0f:73:01: f6:16:d5:d8:9e:10:e5:7c:fb:8c:8e:d2:c5:72:65: 20:0c:65:94:49:37:d4:02:f9:70:35:df:f0:d2:3e: 32:65:53:7b:84:ee:e6:ac:45:dd:cf:c3:ac:19:df: 04:82:4d:5d:d5:1f:b7:2d:2e:48:e2:0f:59:80:b7: 41:05:93:94:82:ad:09:68:2e:ce:0d:73:bf:8b:e1: d8:41:83:cb:d5:dd:22:52:2e:77:5f:04:ed:a8:1a: 6f:4f:b7:26:8b:6c:73:e1:b8:98:09:0d:b3:0d:e6: ce:45:98:16:6b:0e:e7:a8:e1:f2:ac:23:89:10:62: fc:ae:11:d5:52:45:06:1d:d3:c6:ed:80:1a:1c:6d: 6c:97:d3:89:aa:58:79:e9:c7:7f:11:7d:a6:67:d2: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:94:90:C6:F4:50:F2:B7:80:B3:39:19:00:E5:C2:7C:68:56:C0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cf:f4:73:d8:08:b2:f0:32:1b:f4:db:f4:f2:49:d3:62:a4: 2a:61:19:96:81:5d:fc:12:21:e9:80:34:3d:43:9b:53:43:51: 50:10:42:95:43:db:37:5e:ac:7b:6e:29:b6:d1:14:41:b8:1e: a9:fe:21:83:8e:bc:03:bf:e9:63:33:cf:67:21:89:ac:ca:e1: 38:45:38:72:7b:1a:ac:df:49:4a:d6:a1:0a:84:51:ac:1d:7e: a1:61:a7:b7:9a:84:55:28:ad:6f:24:23:ec:dc:53:7e:5e:04: 7d:52:8f:b9:a3:2b:01:5f:fa:17:74:50:36:20:90:41:e1:15: 15:7c:21:a7:6c:18:56:93:4d:33:94:c3:ed:48:99:8c:80:00: ba:e2:4c:93:3c:d9:b1:6b:41:cf:06:9b:92:96:c0:9b:2e:82: e7:de:fb:12:94:f0:cb:d0:86:f6:d7:38:71:7c:6a:5f:71:fb: c0:6d:aa:11:2d:0f:00:65:a9:80:f6:2f:fb:60:d3:bc:ef:1c: 50:fe:39:a0:2f:f5:c1:d7:c4:71:d5:14:31:4b:d3:66:d5:ff: 87:08:29:b1:60:0f:fe:ff:70:7f:48:9d:a7:e0:f7:1f:57:d2: bd:ce:20:8e:a0:9c:41:c6:44:a9:47:e8:2d:c7:17:27:2b:20: 40:d7:67:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj/Fp/26/i6/v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzQ2OGVjYjgtZmU0ZS00MDM2LTkwYjEtMjM1ODkwY2UyNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJbr2pULmHVbMJg/823NTKWPcL3Vug3+YGNW m3UEHEabEFwyEu/N609m1rHtlr42QxXVJI0fZAgZbXOv/f7/+RVXmctpJWm/fLxv MNa+jh6idVkKlyyfUm/G7v5kJJliXZSyksgPcwH2FtXYnhDlfPuMjtLFcmUgDGWU STfUAvlwNd/w0j4yZVN7hO7mrEXdz8OsGd8Egk1d1R+3LS5I4g9ZgLdBBZOUgq0J aC7ODXO/i+HYQYPL1d0iUi53XwTtqBpvT7cmi2xz4biYCQ2zDebORZgWaw7nqOHy rCOJEGL8rhHVUkUGHdPG7YAaHG1sl9OJqlh56cd/EX2mZ9LkpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2UkMb0UPK3gLM5GQDlwnxoVsCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQwOWU3OTYtNTY0YS0z MjM3LTlhMTItYmMzN2IwODU5MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjP9HPYCLLwMhv02/TySdNipCphGZaBXfwSIemAND1Dm1NDUVAQQpVD 2zderHtuKbbRFEG4Hqn+IYOOvAO/6WMzz2chiazK4ThFOHJ7GqzfSUrWoQqEUawd fqFhp7eahFUorW8kI+zcU35eBH1Sj7mjKwFf+hd0UDYgkEHhFRV8IadsGFaTTTOU w+1ImYyAALriTJM82bFrQc8Gm5KWwJsugufe+xKU8MvQhvbXOHF8al9x+8BtqhEt DwBlqYD2L/tg07zvHFD+OaAv9cHXxHHVFDFL02bV/4cIKbFgD/7/cH9Inafg9x9X 0r3OII6gnEHGRKlH6C3HFycrIEDXZ4E= -----END CERTIFICATE-----Generated at Sun May 11 01:16:24 2025 by rpki-client