$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f41f92cb-08e9-3823-af53-0041ef6c9963.roa File: f41f92cb-08e9-3823-af53-0041ef6c9963.roa (raw, json) Hash identifier: uEdS2Umi/GeMgjlBumeb/cSZadtaEFmTOzOKBEQ59lM= Subject key identifier: 4F:57:20:7F:BC:5E:3F:94:C1:48:28:2B:C5:61:4E:CE:14:A2:14:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A48577F79929457429C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f41f92cb-08e9-3823-af53-0041ef6c9963.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11143 IP address blocks: 173.189.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:57:7f:79:92:94:57:42:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=38c8be74-bc1f-4345-a609-68142f325006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:aa:a0:b2:c3:9d:6d:1e:85:8f:7b:0a:6a: 8a:51:56:d6:e9:5c:61:9d:8d:fa:a3:44:4e:b6:68: 8a:b6:3f:f0:43:22:75:7e:4d:03:9e:53:31:bf:95: 1d:dd:be:ff:42:e8:e6:9c:66:68:62:c6:b3:37:c2: 9c:94:95:52:46:c3:d1:87:50:39:dd:aa:e7:f3:30: b7:50:37:35:ee:dd:3c:26:16:78:ce:f5:ce:4b:c8: f2:5d:74:e5:0e:9f:2b:d3:c1:ac:17:7a:1c:62:27: c8:99:cf:c1:0b:cf:b1:bb:3b:2e:70:86:c9:1c:19: 1b:e7:65:f3:3b:1b:02:16:39:e2:55:97:f4:3b:5b: 2b:cf:33:a5:24:6c:69:ca:53:49:c7:8a:65:c8:2a: 8b:cd:e6:95:5a:80:66:86:3b:0c:57:b6:8c:d0:ca: 1a:2e:87:90:31:1a:87:67:6d:d1:44:f3:f8:44:d8: 48:2c:7a:ec:b4:d8:f6:5e:e9:81:85:19:99:74:68: 29:45:12:d3:62:fd:7c:e0:a9:eb:c9:a7:71:d6:43: 5e:32:0f:5d:8b:7f:84:d8:59:d0:0a:39:dc:aa:e3: 7b:a4:bb:b1:6e:2a:c6:be:19:3b:fb:1c:a1:0a:2d: 7e:c1:b7:8b:d6:db:eb:29:ae:d1:7d:5f:2b:51:f5: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:20:7F:BC:5E:3F:94:C1:48:28:2B:C5:61:4E:CE:14:A2:14:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f41f92cb-08e9-3823-af53-0041ef6c9963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:9a:d8:03:06:74:83:6d:1e:1e:e2:1f:93:c5:78:60:e1:01: ff:3c:17:39:4e:74:f0:76:e5:09:9d:57:92:f7:ad:c6:2c:5b: 45:ed:6f:56:69:b8:7d:d2:a2:24:74:bc:79:28:e3:02:1a:46: 93:7a:ff:05:aa:cd:20:c5:6e:ef:a6:fa:b9:35:2a:f8:8c:9c: d5:67:f0:48:7f:bd:09:dd:38:49:b4:62:0a:1a:6a:55:aa:01: 96:1a:53:ba:2b:11:f8:f4:bf:84:da:3f:17:d5:bc:e5:b8:bb: 15:f9:a0:e5:4b:f3:9c:68:37:8d:a3:fb:de:cc:30:68:4f:2e: 06:01:0f:bc:49:c1:f4:e3:c0:70:20:9b:21:6f:e1:ce:d0:3f: 55:68:38:a8:fd:ad:3a:70:00:6d:68:45:6c:b4:f0:0a:dc:20: b1:3d:d5:da:19:54:50:d7:5e:ba:d4:25:ab:fe:63:70:0c:6b: 05:7a:7d:85:2f:fb:f9:93:7b:c2:33:d2:47:89:d5:d1:47:71: dd:77:d4:cc:d7:a2:ee:55:49:6e:64:ba:b2:43:cb:bb:60:34: b0:25:42:97:31:45:ec:5a:e7:3b:5d:22:e4:4d:6a:5d:f4:8a: 26:52:3d:17:84:bc:eb:e9:93:40:7c:b0:93:0e:cb:29:30:6b: e0:95:59:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkhXf3mSlFdCnGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzhjOGJlNzQtYmMxZi00MzQ1LWE2MDktNjgxNDJmMzI1MDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw2qoLLDnW0ehY97CmqKUVbW6VxhnY36o0RO tmiKtj/wQyJ1fk0DnlMxv5Ud3b7/QujmnGZoYsazN8KclJVSRsPRh1A53arn8zC3 UDc17t08JhZ4zvXOS8jyXXTlDp8r08GsF3ocYifImc/BC8+xuzsucIbJHBkb52Xz OxsCFjniVZf0O1srzzOlJGxpylNJx4plyCqLzeaVWoBmhjsMV7aM0MoaLoeQMRqH Z23RRPP4RNhILHrstNj2XumBhRmZdGgpRRLTYv184Knryadx1kNeMg9di3+E2FnQ CjncquN7pLuxbirGvhk7+xyhCi1+wbeL1tvrKa7RfV8rUfUmEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9XIH+8Xj+UwUgoK8VhTs4UohTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQxZjkyY2ItMDhlOS0z ODIzLWFmNTMtMDA0MWVmNmM5OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArb2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2a2AMGdINtHh7iH5PFeGDhAf88FzlOdPB25QmdV5L3rcYsW0Xtb1Zp uH3SoiR0vHko4wIaRpN6/wWqzSDFbu+m+rk1KviMnNVn8Eh/vQndOEm0YgoaalWq AZYaU7orEfj0v4TaPxfVvOW4uxX5oOVL85xoN42j+97MMGhPLgYBD7xJwfTjwHAg myFv4c7QP1VoOKj9rTpwAG1oRWy08ArcILE91doZVFDXXrrUJav+Y3AMawV6fYUv +/mTe8Iz0keJ1dFHcd131MzXou5VSW5kurJDy7tgNLAlQpcxRexa5ztdIuRNal30 iiZSPReEvOvpk0B8sJMOyykwa+CVWao= -----END CERTIFICATE-----Generated at Sat May 10 19:13:34 2025 by rpki-client