$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa File: 3397442c-bfc4-3348-8721-b37de08639bd.roa (raw, json) Hash identifier: WXWCc0s/AKnnSKB0VP0Zd8sz37o5LrgeJW7jHaXm2Pw= Subject key identifier: A6:04:88:E5:74:4D:E3:9C:DE:70:16:09:9F:D0:9E:1E:97:C1:33:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA83779C6DC7EC1B6DF20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 151.213.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:37:79:c6:dc:7e:c1:b6:df:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=fd6f2162-8a61-4263-a4a9-cd5bbef6a610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1a:77:1b:e4:52:1f:e9:53:0f:3d:ff:73:93: e4:23:ca:11:74:99:04:cd:7e:c6:87:74:ad:bb:82: 75:aa:8d:dd:ab:4b:c8:73:45:8b:6d:d9:cf:48:fa: 06:99:12:f6:c6:03:d8:c8:f8:e3:36:53:e9:de:6d: a1:b0:8d:7d:7b:a8:d9:18:53:15:77:86:af:fb:ba: 5b:14:84:dc:10:20:ae:a1:c6:f5:2d:58:e6:75:0d: 99:70:ea:34:21:72:96:8c:96:e4:3e:63:06:69:be: 30:25:af:ba:d4:95:62:c5:71:aa:fc:c5:4f:d2:13: ea:7c:56:40:27:7b:85:7e:21:e0:d8:6b:d4:de:8a: 5e:6b:79:dc:2e:b8:5f:b8:21:69:57:e7:53:ba:f3: 91:25:c6:35:f4:71:f1:3e:71:a3:e9:53:7d:b1:b9: 76:11:9f:78:47:b4:77:18:2c:a3:50:50:96:6a:01: cb:8a:6a:11:22:82:cc:0f:b1:7a:81:9b:13:f9:80: 53:9a:bf:ff:b7:f0:5d:3d:d6:24:3f:74:c8:22:5d: 73:c2:02:9e:7b:40:46:e6:d1:fc:07:d8:4b:c2:52: 09:cd:37:42:ea:14:30:fa:8d:a3:0e:b7:80:d3:8a: 95:f4:30:2a:d6:81:93:90:b0:57:37:84:74:f8:e9: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:04:88:E5:74:4D:E3:9C:DE:70:16:09:9F:D0:9E:1E:97:C1:33:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3397442c-bfc4-3348-8721-b37de08639bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:84:c5:ea:84:10:43:60:e0:26:4f:df:af:2b:31:9d:95:58: fa:de:37:f6:18:61:c9:8d:fe:f1:8b:25:40:8a:b2:81:b9:89: 1f:4d:d1:fb:dc:cd:69:c7:c2:4c:4f:7b:b1:b5:8e:97:67:c5: e2:e9:4c:02:fd:7d:d2:f7:05:04:b5:cd:1d:52:8e:ed:10:cd: 50:51:8c:11:1b:20:73:9c:fe:3d:96:ba:dd:a7:50:55:de:9f: 34:50:c6:45:61:15:63:10:31:d1:cb:0b:c7:5c:ae:15:97:74: 72:a6:a1:ad:17:d8:f8:8e:05:db:3f:76:27:91:6c:e5:f1:a3: f3:3e:bc:fe:19:83:90:db:04:ef:44:32:b8:0a:ae:29:71:64: ce:62:04:0a:d8:6d:d0:63:2b:c8:ed:4f:25:1e:64:7e:e3:70: 7b:ee:c8:35:85:18:39:b0:76:2e:f5:c9:2d:6c:fe:3a:5c:37: cf:64:32:df:b4:82:77:43:00:a5:a9:df:00:1d:a5:d7:96:23: ee:55:0d:8d:09:7f:e2:51:b8:c5:29:4e:69:9d:76:26:5f:75: 3c:bf:9c:49:ce:62:77:8c:78:fd:ee:d5:1a:f6:a0:f8:86:94: 28:1e:cf:de:1f:72:5d:de:7b:68:14:b3:b7:1e:d1:33:41:4a: 4d:fa:a4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6g3ecbcfsG23yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmQ2ZjIxNjItOGE2MS00MjYzLWE0YTktY2Q1YmJlZjZhNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBp3G+RSH+lTDz3/c5PkI8oRdJkEzX7Gh3St u4J1qo3dq0vIc0WLbdnPSPoGmRL2xgPYyPjjNlPp3m2hsI19e6jZGFMVd4av+7pb FITcECCuocb1LVjmdQ2ZcOo0IXKWjJbkPmMGab4wJa+61JVixXGq/MVP0hPqfFZA J3uFfiHg2GvU3opea3ncLrhfuCFpV+dTuvORJcY19HHxPnGj6VN9sbl2EZ94R7R3 GCyjUFCWagHLimoRIoLMD7F6gZsT+YBTmr//t/BdPdYkP3TIIl1zwgKee0BG5tH8 B9hLwlIJzTdC6hQw+o2jDreA04qV9DAq1oGTkLBXN4R0+OknmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYEiOV0TeOc3nAWCZ/Qnh6XwTOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzM5NzQ0MmMtYmZjNC0z MzQ4LTg3MjEtYjM3ZGUwODYzOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9WQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyExeqEEENg4CZP368rMZ2VWPreN/YYYcmN/vGLJUCKsoG5iR9N0fvc zWnHwkxPe7G1jpdnxeLpTAL9fdL3BQS1zR1Sju0QzVBRjBEbIHOc/j2Wut2nUFXe nzRQxkVhFWMQMdHLC8dcrhWXdHKmoa0X2PiOBds/dieRbOXxo/M+vP4Zg5DbBO9E MrgKrilxZM5iBArYbdBjK8jtTyUeZH7jcHvuyDWFGDmwdi71yS1s/jpcN89kMt+0 gndDAKWp3wAdpdeWI+5VDY0Jf+JRuMUpTmmddiZfdTy/nEnOYneMeP3u1Rr2oPiG lCgez94fcl3ee2gUs7ce0TNBSk36pC8= -----END CERTIFICATE-----Generated at Sun May 11 18:50:42 2025 by rpki-client