$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00fbb03a-e185-3767-bad4-d851767ac181.roa File: 00fbb03a-e185-3767-bad4-d851767ac181.roa (raw, json) Hash identifier: A4wYZNYLKwZmp9fjX+qH9ciQCurCLCfCTAwUKwzcYwA= Subject key identifier: 22:55:78:6A:78:83:DC:85:93:76:1E:A0:41:CF:6F:60:B2:CB:EF:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9535757B7CE656441500A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00fbb03a-e185-3767-bad4-d851767ac181.roa Signing time: Fri 02 May 2025 22:06:17 +0000 ROA not before: Fri 02 May 2025 22:06:17 +0000 ROA not after: Thu 31 Jul 2025 22:06:17 +0000 asID: 7029 IP address blocks: 151.213.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:53:57:57:b7:ce:65:64:41:50:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 2 22:06:17 2025 GMT Not After : Jul 31 22:06:17 2025 GMT Subject: CN=cdeca875-11e0-472d-9294-096963a3a3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:8e:d3:c4:8f:74:29:0f:b9:08:40:14:c9: 53:ba:82:fa:ba:4c:c0:24:32:e5:17:a9:e8:55:1f: 89:6b:bf:28:8b:08:c7:94:f4:e3:85:ff:b4:12:02: e7:4f:bd:23:ac:ed:fe:0d:1f:23:5f:04:db:cd:6b: 6b:d4:db:47:48:ba:ee:1d:98:92:22:77:f1:79:24: 9d:22:62:79:3d:6d:07:d3:05:d2:7e:ed:18:af:45: e4:10:0d:19:4f:49:08:2b:51:78:90:e8:71:ee:dd: 00:5f:ed:cc:b4:aa:49:73:2d:ed:40:cf:12:2d:5f: 75:51:a4:fe:f9:8e:6e:a8:07:b2:b8:44:17:07:d6: 25:c2:57:b7:5e:1f:a2:ed:bc:ba:c9:ac:28:0d:8e: b6:d9:49:1c:10:ee:6a:29:52:79:a8:35:e8:6a:ea: 61:bf:94:5f:1f:de:01:d8:be:67:12:93:92:07:04: 41:d4:d1:d4:7e:1c:45:5d:30:12:8b:88:f9:99:58: 35:54:04:a6:db:c6:e2:3c:33:c7:25:34:8a:16:ea: 5b:8d:80:b6:ba:25:a4:14:45:92:55:75:fd:a3:58: 2f:8c:c5:36:6c:ff:b0:5e:2f:77:ad:cf:8f:3b:2d: de:98:67:7d:25:7c:c9:8c:17:43:65:8f:e6:f4:b3: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:55:78:6A:78:83:DC:85:93:76:1E:A0:41:CF:6F:60:B2:CB:EF:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/00fbb03a-e185-3767-bad4-d851767ac181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:85:7f:50:18:db:f7:31:63:3a:8a:35:e9:97:04:0f:e0:8d: c5:8e:86:44:bb:a7:02:09:7b:2b:f5:3b:a3:df:a6:ca:b3:ab: 08:e5:ca:70:37:d2:fb:b2:b5:18:5d:5e:47:2e:03:37:24:67: 91:18:dd:8c:24:cf:e2:8a:35:9b:40:9c:09:dd:a9:af:b8:ff: e2:5a:63:d4:d1:47:8f:5e:95:95:40:ad:d7:f1:4b:b3:32:74: 5b:92:5b:92:f2:9a:70:f0:16:86:45:97:d8:30:ae:2a:33:96: 41:51:11:3a:50:94:0d:ee:eb:47:75:95:e1:da:90:c1:54:f3: 85:9e:38:ad:94:1f:42:a2:af:fb:9f:0a:13:90:0f:61:b2:97: dc:3e:c6:e4:76:d1:17:93:cf:61:ed:0c:7a:63:6a:31:00:f3: 9a:2d:7d:7f:26:27:8a:23:64:ae:a2:11:d9:35:a3:37:2e:3d: 87:8b:6d:b1:09:d2:dc:ea:52:e5:2d:da:43:d8:46:59:cc:d3: a3:4b:d4:7e:4f:51:f2:1d:44:26:4c:dd:dc:b5:46:63:7c:20: b2:8f:1f:14:d7:b3:94:16:aa:a9:ee:ed:51:8b:e6:ac:39:8f: f9:da:d2:47:23:2e:71:0c:68:fa:b4:bf:74:8c:8f:6d:d0:15: 4b:28:e9:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5U1dXt85lZEFQCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMjIyMDYxN1oXDTI1MDczMTIyMDYxN1owLzEtMCsGA1UEAxMk Y2RlY2E4NzUtMTFlMC00NzJkLTkyOTQtMDk2OTYzYTNhM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufOO08SPdCkPuQhAFMlTuoL6ukzAJDLlF6no VR+Ja78oiwjHlPTjhf+0EgLnT70jrO3+DR8jXwTbzWtr1NtHSLruHZiSInfxeSSd ImJ5PW0H0wXSfu0Yr0XkEA0ZT0kIK1F4kOhx7t0AX+3MtKpJcy3tQM8SLV91UaT+ +Y5uqAeyuEQXB9Ylwle3Xh+i7by6yawoDY622UkcEO5qKVJ5qDXoauphv5RfH94B 2L5nEpOSBwRB1NHUfhxFXTASi4j5mVg1VASm28biPDPHJTSKFupbjYC2uiWkFEWS VXX9o1gvjMU2bP+wXi93rc+POy3emGd9JXzJjBdDZY/m9LPEcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJVeGp4g9yFk3YeoEHPb2Cyy+/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDBmYmIwM2EtZTE4NS0z NzY3LWJhZDQtZDg1MTc2N2FjMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyFf1AY2/cxYzqKNemXBA/gjcWOhkS7pwIJeyv1O6PfpsqzqwjlynA3 0vuytRhdXkcuAzckZ5EY3Ywkz+KKNZtAnAndqa+4/+JaY9TRR49elZVArdfxS7My dFuSW5LymnDwFoZFl9gwriozlkFRETpQlA3u60d1leHakMFU84WeOK2UH0Kir/uf ChOQD2Gyl9w+xuR20ReTz2HtDHpjajEA85otfX8mJ4ojZK6iEdk1ozcuPYeLbbEJ 0tzqUuUt2kPYRlnM06NL1H5PUfIdRCZM3dy1RmN8ILKPHxTXs5QWqqnu7VGL5qw5 j/na0kcjLnEMaPq0v3SMj23QFUso6bY= -----END CERTIFICATE-----Generated at Sun May 11 03:51:56 2025 by rpki-client