$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa File: b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa (raw, json) Hash identifier: MCZJXFMzRxRoo5nGI95vTT2CdK+asUismF4vw0RYFL8= Subject key identifier: 41:2D:80:D4:77:CC:44:85:29:92:9A:4F:6A:27:26:CE:1E:DC:1E:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F09A01343C3FB3DA5472C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 174.130.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a0:13:43:c3:fb:3d:a5:47:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=757b7383-b892-4612-b0fe-29a594aecb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:de:94:83:5e:b1:79:4e:40:6b:08:6c:6f: b9:9d:07:98:18:7f:44:6d:a8:b7:32:aa:b9:ac:7b: 91:ed:da:85:ed:11:1d:16:52:ba:e3:2a:d8:76:bb: cd:2d:7a:c0:81:ae:65:73:de:60:94:71:a0:e4:bc: b8:5b:05:81:06:6c:49:b6:90:dc:13:f5:4b:2d:d2: 28:c0:a3:81:fb:f7:d5:98:43:76:42:ec:48:41:57: 75:5d:c8:cc:f4:50:8a:93:c9:8e:b1:7d:31:19:cc: 19:8b:37:0d:3a:41:9d:e5:41:3c:8d:d1:7b:ec:6f: 43:4c:ba:47:62:8f:70:08:01:32:e0:36:31:98:cb: 62:41:6b:68:eb:84:cd:11:d3:b3:c8:33:d8:83:fa: 3e:08:ee:a8:64:3b:94:13:20:09:c2:5b:82:35:8a: 4f:76:05:5f:ef:72:ea:5e:3e:6f:05:bc:cb:6a:a1: ed:66:46:9b:1f:d6:76:03:36:45:67:51:1c:09:0c: 0e:a9:61:27:6e:d7:e0:ce:a8:43:b3:81:a2:52:9d: 8d:35:e4:d3:71:7f:db:63:b3:dd:0a:27:43:32:6c: 1d:a9:09:78:06:53:f5:b3:57:a6:0c:c2:94:d2:94: 60:b6:bd:bd:92:69:96:d2:6a:7f:f7:d2:ef:01:29: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2D:80:D4:77:CC:44:85:29:92:9A:4F:6A:27:26:CE:1E:DC:1E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16c1dc2-a4ea-36f5-869e-8b0550b42112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b6:b8:a6:a8:6d:e6:13:f2:ae:51:54:ab:66:09:93:a9:43: 18:dc:2b:a1:be:89:72:7a:e1:b0:3a:b7:93:94:5c:71:08:31: 06:48:ef:f2:6c:70:d8:ca:b1:d3:80:87:28:60:60:e3:61:44: 35:42:c7:bb:10:15:b5:d1:22:3b:39:4c:21:fb:40:20:d5:80: 3a:0a:77:5c:7e:14:20:8a:85:15:fc:33:30:c2:2e:e0:46:06: 26:99:2c:26:ec:ad:9e:a1:dc:f3:ab:b3:e8:c4:a8:8f:4e:8a: b5:e2:da:8f:8c:23:78:78:11:ec:82:e4:88:f6:6c:49:fe:31: 5d:7e:27:29:87:7b:ae:2d:92:9a:b3:93:74:47:13:1f:e9:0b: bc:40:57:16:f4:b5:97:eb:be:c6:86:74:0b:f5:7a:51:5e:29: 19:b3:4c:f7:78:78:57:18:9a:70:97:88:8e:d4:77:7c:3a:f6: 46:6e:c1:c3:d8:4a:d6:91:67:a8:13:81:ec:2f:4f:94:0c:3f: df:de:76:61:e8:7c:1e:2f:98:13:4b:89:af:e3:db:b5:30:67: 7e:39:2f:c7:c2:5d:22:14:c2:64:2b:78:a5:5e:96:67:3f:68: a2:55:49:4f:a8:c8:a7:2e:a3:10:fb:6d:32:d2:4d:d6:6c:aa: a9:6d:7e:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaATQ8P7PaVHLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NzU3YjczODMtYjg5Mi00NjEyLWIwZmUtMjlhNTk0YWVjYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/elINesXlOQGsIbG+5nQeYGH9Ebai3Mqq5 rHuR7dqF7REdFlK64yrYdrvNLXrAga5lc95glHGg5Ly4WwWBBmxJtpDcE/VLLdIo wKOB+/fVmEN2QuxIQVd1XcjM9FCKk8mOsX0xGcwZizcNOkGd5UE8jdF77G9DTLpH Yo9wCAEy4DYxmMtiQWto64TNEdOzyDPYg/o+CO6oZDuUEyAJwluCNYpPdgVf73Lq Xj5vBbzLaqHtZkabH9Z2AzZFZ1EcCQwOqWEnbtfgzqhDs4GiUp2NNeTTcX/bY7Pd CidDMmwdqQl4BlP1s1emDMKU0pRgtr29kmmW0mp/99LvASkKgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEtgNR3zESFKZKaT2onJs4e3B5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjE2YzFkYzItYTRlYS0z NmY1LTg2OWUtOGIwNTUwYjQyMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi2uKaobeYT8q5RVKtmCZOpQxjcK6G+iXJ64bA6t5OUXHEIMQZI7/Js cNjKsdOAhyhgYONhRDVCx7sQFbXRIjs5TCH7QCDVgDoKd1x+FCCKhRX8MzDCLuBG BiaZLCbsrZ6h3POrs+jEqI9OirXi2o+MI3h4EeyC5Ij2bEn+MV1+JymHe64tkpqz k3RHEx/pC7xAVxb0tZfrvsaGdAv1elFeKRmzTPd4eFcYmnCXiI7Ud3w69kZuwcPY StaRZ6gTgewvT5QMP9/edmHofB4vmBNLia/j27UwZ345L8fCXSIUwmQreKVelmc/ aKJVSU+oyKcuoxD7bTLSTdZsqqltfno= -----END CERTIFICATE-----Generated at Fri May 9 00:22:06 2025 by rpki-client