$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa File: a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa (raw, json) Hash identifier: Z5qBia2LTGWSVsXv4iR49+1j08LQhZ4JUSrFOwQR+Zs= Subject key identifier: B9:73:AF:A6:6C:FB:1B:98:1F:DC:30:16:02:BF:6D:19:5E:04:D1:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1C78BEB392586656E780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 174.130.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1c:78:be:b3:92:58:66:56:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=250cde40-5dbd-4f9a-abbd-f23c0bced54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:09:3e:fd:58:60:24:00:cc:fa:f6:98:32:ee: c1:28:1b:c3:2c:72:84:4e:6d:7e:0c:bc:53:45:9c: 59:8b:8f:68:98:b1:88:7b:da:5e:20:25:64:5b:92: 5e:53:b4:e7:9f:51:39:64:fc:30:97:c2:db:e7:47: e7:54:f9:74:ea:0d:d3:8a:ec:3c:de:72:40:0c:d3: fa:12:89:a3:06:9e:cc:41:2c:55:5e:b4:5b:b9:f7: 50:47:a4:9f:a4:92:de:87:cf:58:a3:6c:58:fd:1b: 82:67:ba:ed:9f:4d:b4:7d:23:59:a3:87:3d:7a:39: 1c:fb:bd:2d:cc:d4:97:43:4a:23:ac:65:a8:1f:6c: d8:a7:68:ab:61:5d:04:d9:a9:31:82:8a:e1:7c:04: 44:0a:d9:8f:ee:e8:fe:0f:fe:cd:f8:78:1e:8f:e4: 76:d6:7b:a2:31:17:00:e5:c4:64:5a:79:6c:3a:05: 62:ab:10:d7:46:c7:41:f1:51:f8:87:73:f2:c0:50: 51:8c:7e:f5:6c:dd:b5:d4:90:19:98:5f:a6:14:30: f6:3f:be:44:1f:20:e7:2c:6a:27:e3:96:23:6f:81: 50:d0:76:49:97:35:75:93:3a:ef:a1:fe:73:20:c5: 32:10:d1:b7:d1:86:02:66:34:55:e8:f7:46:85:ea: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:AF:A6:6C:FB:1B:98:1F:DC:30:16:02:BF:6D:19:5E:04:D1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:15:7b:4b:b3:b1:e8:1c:a4:21:12:7b:cb:6e:b7:99:c2:54: 9f:f8:13:26:94:3d:4c:d4:13:ed:12:e3:28:15:59:e9:50:f2: 9d:4e:ed:54:44:2b:cf:24:ea:bd:d4:23:dd:cb:13:7c:8c:f5: 24:e1:0f:78:e0:78:97:2b:31:8e:c7:0f:26:db:e5:fa:e8:45: 21:e2:e5:31:1b:65:d2:ee:2a:3a:50:a1:95:d7:bd:ca:50:8d: d4:10:5f:69:73:75:24:55:c4:9e:fe:91:2f:7d:12:ae:67:2d: b4:02:9a:ef:63:a2:fa:70:7f:39:16:e4:08:ea:d6:4c:e7:d1: 11:91:d9:b3:e7:d2:ea:2f:19:31:68:57:75:ab:f1:8f:33:b9: a8:11:cd:e3:5e:eb:5b:e7:ea:59:c9:bc:dd:ad:ad:25:f1:05: 48:fc:ae:3e:c9:59:ca:36:1a:2a:29:24:f9:3a:fd:b8:13:35: 4b:ba:35:73:dd:52:b9:d9:97:98:3b:eb:63:36:93:d0:09:a3: 82:8a:d5:03:fd:9e:bb:3c:4e:2a:ae:97:03:94:c5:52:d9:5b: de:e6:aa:26:94:d1:ad:c1:bc:a0:fd:01:db:b0:d4:81:7c:c2: bd:ab:a4:11:38:80:10:f2:24:75:58:67:7a:b2:e6:89:bb:36: 97:87:51:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhx4vrOSWGZW54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjUwY2RlNDAtNWRiZC00ZjlhLWFiYmQtZjIzYzBiY2VkNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggk+/VhgJADM+vaYMu7BKBvDLHKETm1+DLxT RZxZi49omLGIe9peICVkW5JeU7Tnn1E5ZPwwl8Lb50fnVPl06g3Tiuw83nJADNP6 EomjBp7MQSxVXrRbufdQR6SfpJLeh89Yo2xY/RuCZ7rtn020fSNZo4c9ejkc+70t zNSXQ0ojrGWoH2zYp2irYV0E2akxgorhfARECtmP7uj+D/7N+Hgej+R21nuiMRcA 5cRkWnlsOgViqxDXRsdB8VH4h3PywFBRjH71bN211JAZmF+mFDD2P75EHyDnLGon 45Yjb4FQ0HZJlzV1kzrvof5zIMUyENG30YYCZjRV6PdGheqVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlzr6Zs+xuYH9wwFgK/bRleBNEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc3YjAwODUtMWMwNC0z Y2FjLWJhNTItY2ZjMDU0NWQ0YWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUVe0uzsegcpCESe8tut5nCVJ/4EyaUPUzUE+0S4ygVWelQ8p1O7VRE K88k6r3UI93LE3yM9SThD3jgeJcrMY7HDybb5froRSHi5TEbZdLuKjpQoZXXvcpQ jdQQX2lzdSRVxJ7+kS99Eq5nLbQCmu9jovpwfzkW5Ajq1kzn0RGR2bPn0uovGTFo V3Wr8Y8zuagRzeNe61vn6lnJvN2trSXxBUj8rj7JWco2GiopJPk6/bgTNUu6NXPd UrnZl5g762M2k9AJo4KK1QP9nrs8TiqulwOUxVLZW97mqiaU0a3BvKD9Aduw1IF8 wr2rpBE4gBDyJHVYZ3qy5om7NpeHUb0= -----END CERTIFICATE-----Generated at Sat May 10 04:44:22 2025 by rpki-client