$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa File: fcb87d2a-c770-3ded-9521-5c84bee112c2.roa (raw, json) Hash identifier: 42FKTOkgQ8Pk2wgllCW5/moxfKBZA8PfbKtwyUof3rA= Subject key identifier: C2:72:CE:B4:4B:35:B1:EB:BB:B0:40:BF:49:F9:21:D6:A9:64:80:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F8447F5950B2171A0A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.191.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f8:44:7f:59:50:b2:17:1a:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4bf0179b-d5a9-4f46-bebd-e0d1aa35ae99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7d:3e:59:b1:5f:9b:eb:90:a9:50:6a:5c:04: 32:43:64:b4:71:c0:d3:7d:33:4d:d4:c5:2f:fe:d5: f0:d5:d4:c0:b0:64:29:32:04:fc:86:e2:7d:87:97: 9d:e7:64:7c:08:10:8f:77:5d:1a:f0:86:d6:6b:d3: 6e:52:04:1f:30:dc:b4:40:09:cc:e4:40:a6:79:57: 4c:b0:97:aa:8f:97:98:bf:77:ac:d0:03:e8:50:7c: 8e:17:ba:81:cf:51:68:61:0c:92:a9:dc:d7:32:63: 35:80:3f:ee:14:49:c1:1d:18:54:7b:df:8d:35:27: 29:7d:3c:52:36:6e:54:4c:a8:d5:3c:e2:b9:cd:08: 5b:13:e9:3e:6c:56:02:ea:1d:58:39:1b:be:69:2a: e8:87:2c:d5:3b:32:bd:87:72:bd:87:e9:45:57:05: 53:7f:dc:c0:fa:55:0a:a6:4a:2f:74:9d:fb:77:a8: f7:46:10:2e:8e:4c:04:5e:7e:82:40:3e:7a:72:5b: 95:b0:9b:0f:8e:a7:4a:2d:ab:d5:fa:d7:48:38:86: 39:05:08:b2:46:e0:c0:fc:05:29:8b:a4:94:9d:09: 69:33:37:6f:2f:d7:e0:09:8c:21:be:2f:9a:f0:08: 0d:83:45:00:f5:b2:b6:ed:60:3a:f4:b5:c0:03:2a: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:72:CE:B4:4B:35:B1:EB:BB:B0:40:BF:49:F9:21:D6:A9:64:80:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcb87d2a-c770-3ded-9521-5c84bee112c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e3:1d:57:dc:61:b0:c7:d2:62:f3:62:6a:70:3b:46:34:df: 07:98:3a:08:3c:c0:4c:40:ad:e8:1b:2b:6b:38:86:32:bb:81: 99:69:a6:e7:80:55:a2:1a:e7:ed:61:a2:01:b3:4a:1c:61:c2: 08:b9:22:5d:ca:ae:aa:9a:ed:5b:83:05:9b:47:90:6b:64:c2: 3e:c6:5a:03:a6:92:64:b8:b1:ec:f0:a5:4e:d4:ae:0b:7f:44: 8c:78:d3:1c:b7:7d:dd:51:5b:31:7a:30:48:c8:09:6e:59:b8: 47:84:f2:0c:f0:f7:96:46:2d:ca:d6:3a:2a:f7:27:12:35:e6: f1:af:95:be:4f:53:9b:b5:a0:63:37:0e:7c:f2:f4:9a:55:bc: da:85:07:7f:c8:bd:13:2b:0c:49:dd:8d:7f:d1:c5:71:6e:57: 94:b4:f5:02:73:a1:08:de:9b:02:e0:16:05:61:80:db:3f:b7: e5:ee:31:1d:89:3a:45:18:fb:6e:94:bc:9c:99:ca:41:36:0f: 56:8a:e3:34:fb:c3:96:ed:a2:b1:87:95:7d:9c:e3:6c:83:a7: ac:a6:75:97:af:2c:19:cd:ce:34:ee:45:cb:a9:69:9b:2a:c8: af:4f:59:19:6e:a5:15:e2:cd:b1:b2:8b:26:6a:dc:18:f8:71: e7:b9:2c:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfhEf1lQshcaCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGJmMDE3OWItZDVhOS00ZjQ2LWJlYmQtZTBkMWFhMzVhZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n0+WbFfm+uQqVBqXAQyQ2S0ccDTfTNN1MUv /tXw1dTAsGQpMgT8huJ9h5ed52R8CBCPd10a8IbWa9NuUgQfMNy0QAnM5ECmeVdM sJeqj5eYv3es0APoUHyOF7qBz1FoYQySqdzXMmM1gD/uFEnBHRhUe9+NNScpfTxS Nm5UTKjVPOK5zQhbE+k+bFYC6h1YORu+aSrohyzVOzK9h3K9h+lFVwVTf9zA+lUK pkovdJ37d6j3RhAujkwEXn6CQD56cluVsJsPjqdKLavV+tdIOIY5BQiyRuDA/AUp i6SUnQlpMzdvL9fgCYwhvi+a8AgNg0UA9bK27WA69LXAAyplpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJyzrRLNbHru7BAv0n5IdapZIDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNiODdkMmEtYzc3MC0z ZGVkLTk1MjEtNWM4NGJlZTExMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbjHVfcYbDH0mLzYmpwO0Y03weYOgg8wExAregbK2s4hjK7gZlppueA VaIa5+1hogGzShxhwgi5Il3Krqqa7VuDBZtHkGtkwj7GWgOmkmS4sezwpU7Urgt/ RIx40xy3fd1RWzF6MEjICW5ZuEeE8gzw95ZGLcrWOir3JxI15vGvlb5PU5u1oGM3 Dnzy9JpVvNqFB3/IvRMrDEndjX/RxXFuV5S09QJzoQjemwLgFgVhgNs/t+XuMR2J OkUY+26UvJyZykE2D1aK4zT7w5btorGHlX2c42yDp6ymdZevLBnNzjTuRcupaZsq yK9PWRlupRXizbGyiyZq3Bj4cee5LG4= -----END CERTIFICATE-----Generated at Sun May 11 00:44:03 2025 by rpki-client