$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61df29dc-b42b-3521-b3f6-54a4ff45f513.roa File: 61df29dc-b42b-3521-b3f6-54a4ff45f513.roa (raw, json) Hash identifier: 2VSy3aEkpdwSpOXgB6Mn8W8aaAaLpEy1A+Pnk29KizM= Subject key identifier: F5:2F:A0:51:28:E8:52:0F:B4:29:D6:ED:F5:71:68:C7:CC:C7:D0:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F866A2AE3F07968D9060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61df29dc-b42b-3521-b3f6-54a4ff45f513.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.130.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f8:66:a2:ae:3f:07:96:8d:90:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=86d8ff4e-2118-474d-8274-3c2d27f24774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:ac:81:bc:03:51:24:a1:44:8d:d6:97:09: 58:6a:56:ce:5e:73:63:e5:b3:a6:cd:01:b2:da:3f: 2d:6c:85:7b:73:1e:de:29:d5:39:91:82:85:6b:76: 4c:ed:15:f8:df:52:e9:99:31:a7:9e:10:bb:3f:54: 8a:c1:69:be:59:d1:b3:68:7e:17:22:a2:01:9b:77: 0e:a5:6e:1e:81:cc:e7:df:3a:c3:df:f5:ca:97:d2: 0a:37:28:7d:2e:d0:85:61:60:76:0e:a6:23:d7:8a: 2a:1c:bc:7a:98:80:b2:95:ad:e0:3a:dc:44:62:c4: bf:35:9c:f7:8d:43:48:c7:5f:94:c2:98:b5:d7:5d: 78:1c:99:c8:ad:db:97:f8:8e:12:38:25:7a:df:ba: 23:35:ae:1b:ca:89:00:54:a7:9e:2d:9b:01:cd:47: 8f:76:f3:47:6e:ad:e0:1f:c5:98:f9:88:27:07:b7: 8a:ed:4f:50:f3:11:ed:a4:2a:ca:26:fe:b8:dc:eb: 8d:03:ef:73:89:df:32:9e:85:88:0a:b5:c7:17:95: d8:ba:d5:e1:ae:0c:aa:89:d1:57:d3:0c:12:f3:9b: 9a:83:62:38:4c:b1:4d:56:85:39:e1:d9:65:c5:b5: 55:a6:28:09:7e:75:f2:d5:06:1f:84:41:eb:56:77: a2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2F:A0:51:28:E8:52:0F:B4:29:D6:ED:F5:71:68:C7:CC:C7:D0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61df29dc-b42b-3521-b3f6-54a4ff45f513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:43:3a:2a:14:2e:18:ef:cc:b7:f2:19:96:82:f8:67:3f:c3: 94:d5:84:e8:11:95:40:9f:cb:35:1e:89:6c:0f:d5:b1:db:5f: 49:5d:f3:1a:61:32:51:a4:44:5f:10:99:62:57:9a:8b:af:43: 28:f3:3e:dd:71:ac:30:c5:24:c2:16:c8:7d:9f:ea:6a:13:a9: 59:08:9b:ee:b7:9a:a3:5c:bc:49:f0:7d:75:e9:f4:81:b8:90: 61:56:33:78:50:7a:9b:b3:f0:c1:41:00:68:00:fa:fd:56:71: cc:d2:ef:0d:dd:f6:a2:5a:a0:9c:62:35:e8:b9:80:6c:7f:5b: 0b:1c:c0:90:bd:5c:7b:a2:97:4c:69:58:28:bc:87:56:ae:23: e0:f0:f5:e8:ca:68:45:5c:34:66:a1:9d:b0:8b:fb:91:79:9e: 0e:38:e5:af:8f:b8:4e:76:5c:5b:61:1d:59:97:82:07:e5:81: 89:31:61:48:8e:0c:8a:a0:b9:31:c3:6a:23:aa:87:82:93:36: d8:7b:82:44:97:8f:cf:6f:7c:dd:b4:ef:20:dc:f6:e9:71:1d: 00:23:d2:b8:29:7b:ff:81:04:b5:0e:1a:d8:ef:43:4f:4c:62: e7:91:6f:74:ee:c2:a3:89:8d:88:64:96:b3:7c:2d:58:e2:5b: de:4f:ae:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfhmoq4/B5aNkGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODZkOGZmNGUtMjExOC00NzRkLTgyNzQtM2MyZDI3ZjI0Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGysgbwDUSShRI3WlwlYalbOXnNj5bOmzQGy 2j8tbIV7cx7eKdU5kYKFa3ZM7RX431LpmTGnnhC7P1SKwWm+WdGzaH4XIqIBm3cO pW4egczn3zrD3/XKl9IKNyh9LtCFYWB2DqYj14oqHLx6mICyla3gOtxEYsS/NZz3 jUNIx1+Uwpi11114HJnIrduX+I4SOCV637ojNa4byokAVKeeLZsBzUePdvNHbq3g H8WY+YgnB7eK7U9Q8xHtpCrKJv643OuNA+9zid8ynoWICrXHF5XYutXhrgyqidFX 0wwS85uag2I4TLFNVoU54dllxbVVpigJfnXy1QYfhEHrVneiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUvoFEo6FIPtCnW7fVxaMfMx9CqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjFkZjI5ZGMtYjQyYi0z NTIxLWIzZjYtNTRhNGZmNDVmNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5DOioULhjvzLfyGZaC+Gc/w5TVhOgRlUCfyzUeiWwP1bHbX0ld8xph MlGkRF8QmWJXmouvQyjzPt1xrDDFJMIWyH2f6moTqVkIm+63mqNcvEnwfXXp9IG4 kGFWM3hQepuz8MFBAGgA+v1WcczS7w3d9qJaoJxiNei5gGx/WwscwJC9XHuil0xp WCi8h1auI+Dw9ejKaEVcNGahnbCL+5F5ng445a+PuE52XFthHVmXggflgYkxYUiO DIqguTHDaiOqh4KTNth7gkSXj89vfN207yDc9ulxHQAj0rgpe/+BBLUOGtjvQ09M YueRb3TuwqOJjYhklrN8LVjiW95PrjY= -----END CERTIFICATE-----Generated at Sun May 11 01:23:40 2025 by rpki-client