$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa File: 36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa (raw, json) Hash identifier: Yq89/aUWWZrg85dHThRialKQDOoOFUCiGUUURCNc/SI= Subject key identifier: E4:89:BC:06:63:A8:BF:66:FE:20:00:2F:04:6E:77:16:0F:A4:4B:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FE8327D9E4A4E40B7A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.130.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fe:83:27:d9:e4:a4:e4:0b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c09721df-2e06-4ebb-8937-d5733a1a0ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:19:e4:ab:cd:9e:4d:20:fe:48:dc:e2:8d: 88:86:0e:88:8a:22:19:2d:f7:4d:36:ca:41:a6:6e: 79:e4:da:67:51:92:ad:27:13:c4:88:1e:83:0f:89: af:ca:de:e5:66:3e:bf:f5:ba:a2:a9:9b:4b:d4:73: db:5f:d4:c6:38:e5:e5:66:e5:6c:27:e2:8f:7e:64: 0a:a5:b0:15:44:8a:eb:f8:85:16:28:be:b4:e8:66: d4:70:68:68:08:13:01:4b:ab:47:98:fb:e6:94:7b: 9c:24:bb:e1:e2:c2:85:3b:fc:88:5a:2f:91:8c:e8: 1c:35:c6:ea:ae:34:d6:43:df:f9:4d:d0:24:88:55: 68:f3:5d:7c:63:fa:a6:4b:a1:f4:0e:bb:7f:25:35: 9a:fe:0e:b1:ec:4c:91:0e:fd:3a:9f:f4:09:3e:89: 17:69:20:42:8e:9e:83:3a:bb:20:80:a1:9d:79:e5: 17:44:28:4b:c0:ec:f8:8a:99:18:bb:c1:32:94:be: ab:2f:af:cf:03:c4:57:ee:31:dc:28:44:0c:27:4b: a7:31:9b:a4:7c:3d:47:d4:61:c1:17:d3:9a:6d:21: fc:b9:38:b2:6a:52:ce:38:67:aa:cc:fe:81:f7:d5: 50:fc:3c:b9:c8:43:86:0a:ed:d2:43:a6:80:5e:a4: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:BC:06:63:A8:BF:66:FE:20:00:2F:04:6E:77:16:0F:A4:4B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36909cb7-5950-3bcc-b94c-a0d2a1c0d312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:03:91:43:22:5c:e9:32:d2:8e:f2:b7:80:83:73:87:f9:78: 69:8f:d5:32:dd:56:91:38:fd:da:1b:c5:56:53:d0:28:1f:f3: 66:44:d2:72:63:b0:58:d3:67:35:f9:5b:fb:47:9b:a0:12:8b: 95:0e:0f:de:6c:3a:13:3d:7f:87:af:54:94:7a:b7:7e:d2:5d: d2:63:40:b3:b7:88:84:96:46:f0:f7:4e:3c:4a:12:41:02:a1: 7e:4a:5c:4a:3c:57:f3:8d:1f:2c:69:ba:f9:df:50:6a:b7:89: 57:25:2e:72:78:ea:02:fe:4f:ef:6d:53:bb:04:f1:6f:c2:16: 0d:49:a3:ae:ce:aa:c4:f7:36:37:ce:c2:0b:f9:da:c4:96:82: 9d:1c:1b:d8:04:72:7b:25:49:02:27:be:01:55:39:20:bb:53: 3b:34:b4:e1:e4:62:17:78:47:1c:89:b2:25:9b:e2:53:b5:39: 41:5b:84:3c:7b:86:e1:43:7d:6e:e8:3d:3e:f0:7e:64:de:be: ab:3f:0d:c9:ad:19:e7:62:8c:f3:fb:07:ea:44:98:10:b4:c7: aa:44:ac:13:b0:1c:ab:e9:98:02:1f:47:8a:21:24:4e:18:ef: 71:3f:89:e6:81:01:7e:56:c0:ee:34:1f:f4:d6:e5:26:31:48: 60:8a:43:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf6DJ9nkpOQLeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzA5NzIxZGYtMmUwNi00ZWJiLTg5MzctZDU3MzNhMWEwYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp4Z5KvNnk0g/kjc4o2Ihg6IiiIZLfdNNspB pm555NpnUZKtJxPEiB6DD4mvyt7lZj6/9bqiqZtL1HPbX9TGOOXlZuVsJ+KPfmQK pbAVRIrr+IUWKL606GbUcGhoCBMBS6tHmPvmlHucJLvh4sKFO/yIWi+RjOgcNcbq rjTWQ9/5TdAkiFVo8118Y/qmS6H0Drt/JTWa/g6x7EyRDv06n/QJPokXaSBCjp6D OrsggKGdeeUXRChLwOz4ipkYu8EylL6rL6/PA8RX7jHcKEQMJ0unMZukfD1H1GHB F9OabSH8uTiyalLOOGeqzP6B99VQ/Dy5yEOGCu3SQ6aAXqSgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSJvAZjqL9m/iAALwRudxYPpEsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzY5MDljYjctNTk1MC0z YmNjLWI5NGMtYTBkMmExYzBkMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIDkUMiXOky0o7yt4CDc4f5eGmP1TLdVpE4/dobxVZT0Cgf82ZE0nJj sFjTZzX5W/tHm6ASi5UOD95sOhM9f4evVJR6t37SXdJjQLO3iISWRvD3TjxKEkEC oX5KXEo8V/ONHyxpuvnfUGq3iVclLnJ46gL+T+9tU7sE8W/CFg1Jo67OqsT3NjfO wgv52sSWgp0cG9gEcnslSQInvgFVOSC7Uzs0tOHkYhd4RxyJsiWb4lO1OUFbhDx7 huFDfW7oPT7wfmTevqs/DcmtGedijPP7B+pEmBC0x6pErBOwHKvpmAIfR4ohJE4Y 73E/ieaBAX5WwO40H/TW5SYxSGCKQ7c= -----END CERTIFICATE-----Generated at Wed May 7 11:25:59 2025 by rpki-client