$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa File: 8439542b-538e-3386-9782-0bb9b565da7c.roa (raw, json) Hash identifier: rCj426hQ8vpf9G2wbxC64FzGV0EU3Ntf7vcX+zQ8Qp0= Subject key identifier: 0C:86:F5:37:03:69:86:6B:4B:67:77:69:6F:90:81:34:91:80:9C:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FE93F3C341B33B037A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.131.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fe:93:f3:c3:41:b3:3b:03:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1875321c-a9bb-44e3-923d-775cb0d3dcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:79:1d:44:74:4c:65:5b:a3:68:e9:8e:5a: 6f:ba:7b:24:77:c4:66:48:37:ee:24:6e:d4:c9:ae: bd:c9:ed:6b:0b:3f:41:83:df:7f:94:78:9a:0d:ed: 68:fa:76:3d:3f:a3:7f:9f:0c:f0:97:63:ce:75:12: cc:a2:f9:72:ce:aa:73:6b:f8:9a:65:e2:aa:94:13: bd:5e:25:54:63:83:be:05:fe:89:48:f8:66:07:40: fb:b9:95:a6:49:fb:9f:be:40:db:6d:76:8e:02:46: 88:16:21:d4:84:8e:0c:3d:03:c6:63:f5:67:c4:7f: a8:20:f9:21:71:20:f2:82:cc:41:e6:df:13:b4:55: be:cd:99:84:6e:9d:88:7d:19:e5:ca:15:d3:17:fd: cf:c2:4d:b6:f3:9f:22:ed:38:14:1c:6d:12:83:f0: 7d:18:2b:0d:4d:15:ae:86:4d:27:f1:af:1d:b0:0b: f4:cd:bd:f2:32:9f:a8:6b:e5:af:5f:6a:c0:7b:d7: 69:51:7c:d6:12:a1:38:37:68:34:24:4e:80:ac:4b: 03:24:f4:e7:3d:11:65:c9:96:15:06:06:63:61:86: fb:58:ad:7b:ed:29:4e:30:98:ba:fb:82:25:97:cf: d9:45:66:14:0f:b6:a1:b7:3f:9e:60:9e:fa:f5:62: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:86:F5:37:03:69:86:6B:4B:67:77:69:6F:90:81:34:91:80:9C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2e:2b:39:ec:3f:77:ad:5f:fe:b5:84:8e:d7:f8:ad:fb:1e: 71:a1:b9:ec:17:95:3b:2d:08:96:35:e3:fc:9d:88:bc:4b:90: 29:78:45:07:bc:7f:45:c5:fc:5d:b6:8f:4f:f7:df:94:5b:54: e3:31:c5:43:e6:84:db:1d:5d:78:70:38:f0:e7:ce:7c:5f:58: 79:a9:ce:0b:b7:51:bf:e7:61:63:fc:36:8b:16:16:5a:6f:05: e9:41:3a:30:59:2e:90:0f:72:3b:8a:63:f6:3f:49:a7:4d:1e: 3e:5c:ec:6d:1b:97:28:86:de:01:49:fa:08:7d:58:e7:84:46: 95:08:5f:1d:21:55:43:05:27:08:ea:b8:5b:56:64:19:8f:70: a9:c5:e6:c3:24:91:03:ba:61:94:2b:fc:6d:80:71:90:e0:0b: 5f:b1:2d:cb:f6:30:7f:76:bd:df:62:89:b4:b7:0c:fc:e2:cc: a8:52:52:a4:ad:e2:01:f9:ff:6e:45:30:d9:44:ac:a5:c9:c1: eb:91:b0:6b:09:41:8e:09:7f:5f:5d:ac:fb:13:a6:5c:f0:54: 39:2c:0f:af:94:71:a8:9c:cd:db:8a:f6:2a:56:91:1c:aa:86: ed:f8:5a:b0:1d:dc:46:1e:ba:e9:a2:d7:12:81:c7:c7:ca:14: a8:62:78:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf6T88NBszsDegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTg3NTMyMWMtYTliYi00NGUzLTkyM2QtNzc1Y2IwZDNkY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR15HUR0TGVbo2jpjlpvunskd8RmSDfuJG7U ya69ye1rCz9Bg99/lHiaDe1o+nY9P6N/nwzwl2POdRLMovlyzqpza/iaZeKqlBO9 XiVUY4O+Bf6JSPhmB0D7uZWmSfufvkDbbXaOAkaIFiHUhI4MPQPGY/VnxH+oIPkh cSDygsxB5t8TtFW+zZmEbp2IfRnlyhXTF/3Pwk22858i7TgUHG0Sg/B9GCsNTRWu hk0n8a8dsAv0zb3yMp+oa+WvX2rAe9dpUXzWEqE4N2g0JE6ArEsDJPTnPRFlyZYV BgZjYYb7WK177SlOMJi6+4Ill8/ZRWYUD7ahtz+eYJ769WKdpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyG9TcDaYZrS2d3aW+QgTSRgJwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzOTU0MmItNTM4ZS0z Mzg2LTk3ODItMGJiOWI1NjVkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsuKznsP3etX/61hI7X+K37HnGhuewXlTstCJY14/ydiLxLkCl4RQe8 f0XF/F22j0/335RbVOMxxUPmhNsdXXhwOPDnznxfWHmpzgu3Ub/nYWP8NosWFlpv BelBOjBZLpAPcjuKY/Y/SadNHj5c7G0blyiG3gFJ+gh9WOeERpUIXx0hVUMFJwjq uFtWZBmPcKnF5sMkkQO6YZQr/G2AcZDgC1+xLcv2MH92vd9iibS3DPzizKhSUqSt 4gH5/25FMNlErKXJweuRsGsJQY4Jf19drPsTplzwVDksD6+UcaiczduK9ipWkRyq hu34WrAd3EYeuumi1xKBx8fKFKhieHo= -----END CERTIFICATE-----Generated at Fri May 9 10:38:01 2025 by rpki-client