$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa File: 4ee3a52f-4216-30e6-9301-7439d905414e.roa (raw, json) Hash identifier: RCvvUVkF23kQNsGjNkgtwJMwdq2iJdTOAljj4pjrMLE= Subject key identifier: B6:6C:66:9A:D0:87:16:FA:69:45:81:8A:0D:66:CA:25:53:BD:69:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A40DD58E7117614555D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.131.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:dd:58:e7:11:76:14:55:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4d6923ee-f5eb-4edf-a79f-404646fb1c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:47:61:db:b8:d8:4e:c4:4e:77:ec:9a:91: c0:27:ff:10:66:0d:a4:3a:72:d9:8a:a1:66:dd:7f: a4:3d:cf:c9:2b:08:f3:7b:25:9d:ad:a9:64:e7:77: 01:60:5f:00:3d:9b:56:e5:6b:d4:d3:3e:52:da:83: b7:41:ad:92:89:0f:c1:23:99:26:88:45:cb:6c:4c: ec:cd:94:67:de:ea:10:2f:c4:e0:5f:51:94:85:19: 00:16:c0:52:d8:51:da:88:06:14:f8:e6:f7:b9:e5: 60:51:16:04:f4:65:b9:5a:18:67:76:e3:71:d8:41: ef:b9:f3:0a:78:ff:e4:0a:d1:88:32:31:93:2d:0e: 45:45:2f:e6:63:55:f3:73:56:04:5c:4c:71:e6:14: 04:0f:ad:5b:04:b7:b4:af:95:39:f7:d5:fe:a1:41: 06:55:48:29:5b:b7:5f:67:37:a6:6a:42:75:07:c8: 7e:cc:e3:76:bf:1d:6d:77:f1:90:50:ca:1d:0c:0e: f6:30:0f:bd:43:bf:6c:1c:ba:10:aa:0c:88:07:96: 43:fc:ef:18:f1:31:89:eb:73:d9:6d:d3:93:2f:26: fe:c6:ea:ef:2b:bc:6d:08:ce:fa:ae:30:88:23:65: f6:e1:f9:0c:9f:9f:6c:81:84:7f:0a:6b:9d:38:97: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6C:66:9A:D0:87:16:FA:69:45:81:8A:0D:66:CA:25:53:BD:69:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ba:23:13:c8:b8:3b:5a:14:93:9f:d3:02:38:f1:d6:14:1e: e2:fc:fe:16:77:1d:27:39:2c:76:5e:cc:68:63:17:85:52:db: 08:d0:9c:7f:b4:89:21:0e:5c:1e:00:95:61:d7:f8:c8:5f:0b: 53:15:bb:3a:ca:86:14:bc:25:74:6b:c2:27:0b:98:bc:a1:d2: 3b:9b:96:a1:94:5e:3c:db:82:fa:4c:45:c1:86:4c:69:16:4a: 57:0d:ac:52:d0:bb:32:fd:65:4b:93:74:3a:ea:c9:51:48:d1: b9:00:05:a2:94:2b:e4:96:9c:71:e0:12:9e:21:11:a7:27:01: de:90:1e:fa:80:88:32:01:be:fb:e1:fa:31:01:5f:ca:90:e5: 05:c3:d7:97:1e:d1:76:6e:6d:44:5a:6b:45:d0:7d:69:85:4b: 3a:31:48:97:d2:b8:84:12:4e:4f:e3:81:40:31:55:fe:06:ad: f4:5e:27:d8:98:1d:61:b8:d2:85:e6:5f:4b:69:1c:3b:82:ce: 20:2d:bd:f8:53:0c:33:8f:40:4d:32:57:e4:f0:df:06:9a:59: 29:b4:72:7e:ef:e9:2d:c7:50:d4:4c:ac:07:04:19:58:d4:d8: d5:49:85:31:91:ec:d7:5b:84:77:f6:94:69:e0:8b:4f:cc:1c: 3a:96:6c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkDdWOcRdhRVXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NGQ2OTIzZWUtZjVlYi00ZWRmLWE3OWYtNDA0NjQ2ZmIxYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzJHYdu42E7ETnfsmpHAJ/8QZg2kOnLZiqFm 3X+kPc/JKwjzeyWdralk53cBYF8APZtW5WvU0z5S2oO3Qa2SiQ/BI5kmiEXLbEzs zZRn3uoQL8TgX1GUhRkAFsBS2FHaiAYU+Ob3ueVgURYE9GW5WhhnduNx2EHvufMK eP/kCtGIMjGTLQ5FRS/mY1Xzc1YEXExx5hQED61bBLe0r5U599X+oUEGVUgpW7df ZzemakJ1B8h+zON2vx1td/GQUModDA72MA+9Q79sHLoQqgyIB5ZD/O8Y8TGJ63PZ bdOTLyb+xurvK7xtCM76rjCII2X24fkMn59sgYR/CmudOJdJfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZsZprQhxb6aUWBig1myiVTvWkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVlM2E1MmYtNDIxNi0z MGU2LTkzMDEtNzQzOWQ5MDU0MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE26IxPIuDtaFJOf0wI48dYUHuL8/hZ3HSc5LHZezGhjF4VS2wjQnH+0 iSEOXB4AlWHX+MhfC1MVuzrKhhS8JXRrwicLmLyh0jublqGUXjzbgvpMRcGGTGkW SlcNrFLQuzL9ZUuTdDrqyVFI0bkABaKUK+SWnHHgEp4hEacnAd6QHvqAiDIBvvvh +jEBX8qQ5QXD15ce0XZubURaa0XQfWmFSzoxSJfSuIQSTk/jgUAxVf4GrfReJ9iY HWG40oXmX0tpHDuCziAtvfhTDDOPQE0yV+Tw3waaWSm0cn7v6S3HUNRMrAcEGVjU 2NVJhTGR7NdbhHf2lGngi0/MHDqWbFw= -----END CERTIFICATE-----Generated at Sun May 11 09:42:41 2025 by rpki-client