$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa File: 46a1b189-748a-3544-b289-361d8367ae39.roa (raw, json) Hash identifier: xofhcSHh1khhkfkIpjHHRxdaxjE4FMT8uEQXDcB1cyA= Subject key identifier: 16:EF:35:82:AE:1A:E3:99:BB:B3:0F:AF:DA:B3:FF:9E:34:27:83:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A40A2CE7008A5969D9AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.130.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:a2:ce:70:08:a5:96:9d:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e024529e-19ce-4b67-b147-384de48d2917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:d1:b4:e2:c2:18:5f:e7:98:d4:55:dd:dc: 43:a6:10:2f:15:90:d9:6f:9b:b0:d6:eb:0d:e5:7e: 9a:92:dd:62:7c:02:f7:85:66:02:fa:2b:ac:53:ba: 6a:a0:0b:58:71:95:a8:f0:d5:05:71:8b:f9:3f:35: 9d:41:b2:bd:73:15:a1:de:47:c7:87:f5:3c:43:41: 9b:24:4c:5a:8c:52:3d:94:01:12:39:0a:76:3b:02: f7:ad:22:d3:5e:33:44:e8:f0:1c:fe:50:57:5a:b3: 8a:a8:ee:c5:56:c7:e9:cc:d5:1d:01:40:0a:4b:6f: 1e:30:32:ed:a9:89:be:c6:b2:0e:e5:0b:31:22:bd: 71:1f:4a:c8:f6:cf:1b:63:d3:69:69:88:83:07:7d: d2:40:2b:db:f4:89:16:a5:70:21:f3:c0:c0:7e:74: 15:71:3f:3e:8f:71:db:88:c2:6b:e8:26:3b:db:d9: 4a:2b:d8:e1:09:b9:3d:6a:09:c8:99:cb:fe:59:31: fa:2a:d6:e9:c2:d5:19:38:da:2d:c1:fb:9e:46:68: 03:17:f7:3b:47:55:97:3a:ef:41:08:4a:77:4c:2f: 88:24:a0:9e:bd:08:fa:5e:04:27:ea:66:2b:82:26: a6:ab:63:a4:85:c1:ed:6a:4b:ae:c7:1a:ec:3a:c4: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:35:82:AE:1A:E3:99:BB:B3:0F:AF:DA:B3:FF:9E:34:27:83:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46a1b189-748a-3544-b289-361d8367ae39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:16:df:3e:d5:43:6b:f4:94:7f:12:c0:be:96:82:8d:40:4b: e7:aa:81:82:9b:38:62:50:f3:17:44:07:05:c7:d6:62:67:31: 7a:a5:f0:fb:32:73:d6:e2:61:2f:44:7d:20:76:32:7a:4a:a9: 4c:00:ab:7e:d9:34:e8:fd:cc:b7:32:2f:78:5a:c5:ae:a2:ff: 80:f1:5a:a9:30:20:7c:f7:2d:12:cb:26:c2:53:63:eb:d3:db: c0:00:3e:00:94:05:44:36:10:55:24:1a:a7:1d:e8:ae:92:92: d9:d8:d9:78:97:a3:75:b0:9d:b6:d4:ee:1f:19:53:0f:ed:cf: e4:e9:77:57:a1:77:fc:57:ee:f2:52:25:90:78:de:56:2c:5b: 61:a1:75:96:79:e0:09:40:b5:32:ad:fa:e5:f1:30:7a:50:13: 60:ee:05:66:7d:a4:e6:ae:0f:63:6c:56:6a:a6:15:75:b6:78: 6a:2d:3e:36:76:8c:84:83:3b:a8:7d:d1:24:63:33:46:04:43: a4:b5:cd:89:e1:2e:cd:9b:67:07:b1:2c:84:9f:d1:fe:38:d5: a5:40:b0:7c:96:97:69:5c:f1:b3:c9:bc:0d:e5:e3:78:e5:ad: 8b:14:70:14:b4:af:a3:18:51:b7:0e:f9:7f:e6:2a:30:5c:8f: 88:09:a9:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkCiznAIpZadmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTAyNDUyOWUtMTljZS00YjY3LWIxNDctMzg0ZGU0OGQyOTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY/RtOLCGF/nmNRV3dxDphAvFZDZb5uw1usN 5X6akt1ifAL3hWYC+iusU7pqoAtYcZWo8NUFcYv5PzWdQbK9cxWh3kfHh/U8Q0Gb JExajFI9lAESOQp2OwL3rSLTXjNE6PAc/lBXWrOKqO7FVsfpzNUdAUAKS28eMDLt qYm+xrIO5QsxIr1xH0rI9s8bY9NpaYiDB33SQCvb9IkWpXAh88DAfnQVcT8+j3Hb iMJr6CY729lKK9jhCbk9agnImcv+WTH6KtbpwtUZONotwfueRmgDF/c7R1WXOu9B CEp3TC+IJKCevQj6XgQn6mYrgiamq2OkhcHtakuuxxrsOsTnqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbvNYKuGuOZu7MPr9qz/540J4PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZhMWIxODktNzQ4YS0z NTQ0LWIyODktMzYxZDgzNjdhZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcW3z7VQ2v0lH8SwL6Wgo1AS+eqgYKbOGJQ8xdEBwXH1mJnMXql8Psy c9biYS9EfSB2MnpKqUwAq37ZNOj9zLcyL3haxa6i/4DxWqkwIHz3LRLLJsJTY+vT 28AAPgCUBUQ2EFUkGqcd6K6SktnY2XiXo3WwnbbU7h8ZUw/tz+Tpd1ehd/xX7vJS JZB43lYsW2GhdZZ54AlAtTKt+uXxMHpQE2DuBWZ9pOauD2NsVmqmFXW2eGotPjZ2 jISDO6h90SRjM0YEQ6S1zYnhLs2bZwexLISf0f441aVAsHyWl2lc8bPJvA3l43jl rYsUcBS0r6MYUbcO+X/mKjBcj4gJqQY= -----END CERTIFICATE-----Generated at Tue May 13 08:00:53 2025 by rpki-client