$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa File: ae53193a-5028-35cc-b3d0-cec8eba63c94.roa (raw, json) Hash identifier: UG8SRXjDhYDH+kfCXkBzH5jpD4PL20rmQkHAXQZkZ+A= Subject key identifier: A9:81:C5:9A:3D:31:B4:BC:64:3B:C2:6E:BF:DB:42:AF:98:91:73:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1721A113F6F4075AC380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.131.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:21:a1:13:f6:f4:07:5a:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f5bd8ed1-e963-475f-be83-be6723be1214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:95:50:23:a3:13:cc:c2:17:b4:9c:ac:73: 62:66:c3:70:60:e8:53:15:b3:ba:7d:54:81:0c:9e: e4:d5:7b:57:4e:3d:2a:c6:7a:31:dd:bd:4e:7f:d7: f8:a6:41:c3:d4:b1:ab:33:a6:47:ed:ef:89:02:9d: 3c:cd:49:fb:51:5b:3e:2d:3b:20:78:52:74:92:2c: ee:e7:20:77:9e:5d:6a:30:ab:db:1c:90:b4:7a:c2: 3b:78:7d:84:7a:0e:ab:38:4d:d5:56:ad:bf:8c:0f: 52:cd:73:ca:8d:49:36:ca:3a:64:fa:33:ac:ca:be: 6c:e8:d5:7e:cf:7f:2d:4d:d1:23:fd:9f:b0:0b:d3: 1f:76:8d:9e:53:a4:74:a6:2f:42:6a:6c:05:97:37: 52:c9:dd:ee:3e:01:44:0a:16:d2:39:9f:6e:9a:71: 31:50:4b:5e:18:f3:3b:7f:79:16:3e:b5:af:de:ac: 8a:93:33:68:52:c2:50:dc:b3:f3:53:05:49:e1:96: 4c:60:d0:59:93:c0:88:5b:e1:03:ad:fe:cf:86:e4: d8:6a:5a:39:d5:97:94:8b:1a:5f:c8:0b:f2:24:a4: f2:56:23:2b:21:96:38:f1:77:d5:a5:7e:20:a2:2d: a4:d6:05:02:df:e0:86:a0:f6:e7:22:78:28:26:c3: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:C5:9A:3D:31:B4:BC:64:3B:C2:6E:BF:DB:42:AF:98:91:73:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ae53193a-5028-35cc-b3d0-cec8eba63c94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2b:47:ac:c4:68:4b:6c:31:47:07:e2:ae:ad:62:30:0d:98: 23:7f:59:04:56:50:d1:93:00:3a:38:64:64:eb:99:fd:55:31: d6:12:fc:fb:5b:79:fe:a5:c3:ea:d9:43:d8:46:c5:05:62:d7: 45:b1:00:a9:6a:60:91:0f:53:8f:46:96:4e:89:00:76:14:b6: 95:77:96:e2:0c:e1:25:95:00:24:34:65:ca:c2:77:2a:2d:b6: 83:ba:b3:31:ea:ad:31:18:22:63:c5:f4:3c:5a:2e:34:53:39: 36:9a:33:0e:4c:6c:09:33:3c:f1:5f:20:d8:6d:2e:2c:07:02: 44:36:03:70:91:88:1b:88:1a:78:44:40:d4:56:a5:78:a7:03: 22:ba:f1:9a:a3:5a:3d:2a:32:9f:87:89:1a:69:69:ac:db:24: 8c:95:ce:48:37:f1:02:e0:35:07:a9:3a:03:a7:6a:14:74:29: b5:62:91:4f:cf:17:e0:dc:c2:06:d4:60:ff:1b:3c:37:bc:04: 28:9f:32:7f:73:ac:d4:10:8a:6c:b4:9a:df:c7:63:5b:50:a5: 63:37:48:b2:89:56:ed:08:56:6c:f7:7e:85:e9:ba:42:a0:7f: d3:d3:06:c8:df:d6:b8:05:ad:15:7b:8f:9c:5d:85:4e:7b:b0: a6:1a:e4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShchoRP29Adaw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjViZDhlZDEtZTk2My00NzVmLWJlODMtYmU2NzIzYmUxMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh6VUCOjE8zCF7ScrHNiZsNwYOhTFbO6fVSB DJ7k1XtXTj0qxnox3b1Of9f4pkHD1LGrM6ZH7e+JAp08zUn7UVs+LTsgeFJ0kizu 5yB3nl1qMKvbHJC0esI7eH2Eeg6rOE3VVq2/jA9SzXPKjUk2yjpk+jOsyr5s6NV+ z38tTdEj/Z+wC9Mfdo2eU6R0pi9CamwFlzdSyd3uPgFEChbSOZ9umnExUEteGPM7 f3kWPrWv3qyKkzNoUsJQ3LPzUwVJ4ZZMYNBZk8CIW+EDrf7PhuTYalo51ZeUixpf yAvyJKTyViMrIZY48XfVpX4goi2k1gUC3+CGoPbnIngoJsPvJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmBxZo9MbS8ZDvCbr/bQq+YkXOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWU1MzE5M2EtNTAyOC0z NWNjLWIzZDAtY2VjOGViYTYzYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAForR6zEaEtsMUcH4q6tYjANmCN/WQRWUNGTADo4ZGTrmf1VMdYS/Ptb ef6lw+rZQ9hGxQVi10WxAKlqYJEPU49Glk6JAHYUtpV3luIM4SWVACQ0ZcrCdyot toO6szHqrTEYImPF9DxaLjRTOTaaMw5MbAkzPPFfINhtLiwHAkQ2A3CRiBuIGnhE QNRWpXinAyK68ZqjWj0qMp+HiRppaazbJIyVzkg38QLgNQepOgOnahR0KbVikU/P F+DcwgbUYP8bPDe8BCifMn9zrNQQimy0mt/HY1tQpWM3SLKJVu0IVmz3foXpukKg f9PTBsjf1rgFrRV7j5xdhU57sKYa5FQ= -----END CERTIFICATE-----Generated at Sun May 11 10:44:30 2025 by rpki-client