$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6f3c963-24ee-3927-a81e-fbe2d53c7669.roa File: f6f3c963-24ee-3927-a81e-fbe2d53c7669.roa (raw, json) Hash identifier: +VOLcOaB534CbIassz1/RBlCUh359UDzMYLC6RHDfys= Subject key identifier: E9:BE:37:87:9B:79:5B:3A:33:68:A4:4C:69:60:08:A2:84:B6:75:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48F50255C4D44AFE137C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6f3c963-24ee-3927-a81e-fbe2d53c7669.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 173.188.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8f:50:25:5c:4d:44:af:e1:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=449e114a-f6b9-4156-a12e-123907548479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:76:46:73:82:b9:9e:0e:69:15:67:1d:7c: ba:a6:66:90:a2:aa:45:a1:18:d8:dc:3f:03:9b:57: ae:df:3a:fd:32:a2:e7:a1:9b:69:50:bf:a2:23:cb: d8:db:4c:4f:5b:bf:4d:a5:8c:c2:e7:45:a1:41:f8: 4b:3b:59:c7:a6:fc:9c:fb:a4:94:90:cf:e1:23:c6: 11:67:20:db:57:50:60:ea:c3:18:25:14:3c:31:a3: 90:00:5c:7f:dd:54:a9:89:e2:ec:f1:27:d1:05:5b: 3d:44:f7:2f:7b:6a:f5:2f:23:18:2b:f4:41:af:b9: 16:b6:71:1a:f2:b0:d9:09:a1:4c:35:10:da:62:53: 43:92:5e:e2:4b:2a:54:22:c0:49:ee:21:11:0e:d1: a0:4e:3d:3d:65:41:1a:82:45:99:37:6b:9e:85:31: 02:1b:48:72:e9:ef:0f:ec:a0:0a:08:fb:86:a4:1d: ff:7b:73:97:0b:cf:8c:2a:79:ef:e3:d6:d2:d5:95: d9:c5:ba:d6:b8:3f:de:e0:1c:dd:94:74:22:09:92: 8c:f8:42:1d:a3:61:fd:06:51:52:01:90:36:98:b3: 91:7a:a8:78:d1:76:29:cf:78:88:67:87:29:81:39: b9:6b:5e:a2:e0:1c:e3:3a:fc:0a:7f:c4:b1:01:f8: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BE:37:87:9B:79:5B:3A:33:68:A4:4C:69:60:08:A2:84:B6:75:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6f3c963-24ee-3927-a81e-fbe2d53c7669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ad:92:63:cb:bf:b3:5c:5a:c2:62:d0:2a:1d:74:8c:81:54: 17:74:c7:20:0a:e4:88:b4:b4:1c:c7:db:5b:a5:38:da:d1:34: d3:7e:69:b6:99:47:b4:72:cc:b8:a9:b0:ba:5f:7b:52:14:ae: 7c:32:ea:0a:ef:e8:d9:a2:ee:b3:67:40:71:27:48:40:15:f0: da:f4:37:30:39:2a:f3:b7:48:72:77:0a:1d:e8:b8:21:95:71: d9:1c:02:9a:fc:02:16:51:32:ad:da:6f:11:8f:49:d2:e4:41: 81:63:51:61:09:fc:32:5c:7f:34:cb:04:be:7c:6e:f8:54:b1: c1:10:b6:ab:68:12:44:7e:22:90:06:43:27:7d:3e:a5:48:28: 94:48:3c:ee:d8:8f:0a:a4:c3:53:a6:d5:bf:db:a8:6a:ca:3e: 97:af:0b:c7:f2:d8:bd:42:39:cb:d7:f2:c5:7e:86:d6:56:50: c8:d5:e3:bb:a5:0b:77:aa:ca:e8:04:96:3e:5f:14:9b:5b:f2: c1:bb:86:77:5f:d2:47:e2:16:04:aa:a6:ad:44:cc:22:8f:f0: eb:a3:53:d4:ca:74:2b:07:f0:63:41:8c:6a:d6:6f:1d:88:c8: ce:f9:17:fd:36:ae:18:df:9d:30:5a:ea:e4:3c:9f:63:d3:fa: 0d:f5:ba:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI9QJVxNRK/hN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NDQ5ZTExNGEtZjZiOS00MTU2LWExMmUtMTIzOTA3NTQ4NDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMN2RnOCuZ4OaRVnHXy6pmaQoqpFoRjY3D8D m1eu3zr9MqLnoZtpUL+iI8vY20xPW79NpYzC50WhQfhLO1nHpvyc+6SUkM/hI8YR ZyDbV1Bg6sMYJRQ8MaOQAFx/3VSpieLs8SfRBVs9RPcve2r1LyMYK/RBr7kWtnEa 8rDZCaFMNRDaYlNDkl7iSypUIsBJ7iERDtGgTj09ZUEagkWZN2uehTECG0hy6e8P 7KAKCPuGpB3/e3OXC8+MKnnv49bS1ZXZxbrWuD/e4BzdlHQiCZKM+EIdo2H9BlFS AZA2mLOReqh40XYpz3iIZ4cpgTm5a16i4BzjOvwKf8SxAfhPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm+N4ebeVs6M2ikTGlgCKKEtnWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjZmM2M5NjMtMjRlZS0z OTI3LWE4MWUtZmJlMmQ1M2M3NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIatkmPLv7NcWsJi0CoddIyBVBd0xyAK5Ii0tBzH21ulONrRNNN+abaZ R7RyzLipsLpfe1IUrnwy6grv6Nmi7rNnQHEnSEAV8Nr0NzA5KvO3SHJ3Ch3ouCGV cdkcApr8AhZRMq3abxGPSdLkQYFjUWEJ/DJcfzTLBL58bvhUscEQtqtoEkR+IpAG Qyd9PqVIKJRIPO7Yjwqkw1Om1b/bqGrKPpevC8fy2L1COcvX8sV+htZWUMjV47ul C3eqyugElj5fFJtb8sG7hndf0kfiFgSqpq1EzCKP8OujU9TKdCsH8GNBjGrWbx2I yM75F/02rhjfnTBa6uQ8n2PT+g31ujc= -----END CERTIFICATE-----Generated at Fri May 9 02:54:12 2025 by rpki-client