$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: LLaNEpUsfN5XS+nULkdQhJAHfM0BbuaLdzBbJOCUtUI= Subject key identifier: 05:8A:5B:A5:30:E3:72:DA:AB:B9:39:55:F5:65:7F:C5:75:D3:B8:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1C85C04920DBA85A3280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1c:85:c0:49:20:db:a8:5a:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=789161d6-4f74-4e7c-8f52-9c56a124a93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:44:56:58:c9:e9:8f:7f:c3:90:7e:d9:de: 2d:9c:ca:49:69:fc:3e:c2:82:35:09:2e:14:5f:ec: 64:a9:d5:04:65:b7:19:c3:4a:9b:35:3d:e9:d0:c3: fa:79:0f:78:32:65:ab:51:89:cf:67:54:bd:ba:6b: a3:ec:55:23:9a:00:25:bf:46:80:ca:f9:9a:e9:18: bf:e0:12:5b:d4:bb:40:88:b0:00:c4:93:ed:ef:eb: d1:c6:48:63:d9:14:20:3f:66:5b:e7:8b:4e:70:81: 6b:43:0a:8c:1d:4a:07:86:8c:4c:18:26:7a:31:b2: 18:a6:25:80:a4:56:ee:df:4e:80:fe:75:53:03:d5: 93:77:22:2a:d1:9b:ef:48:16:05:34:ea:83:7a:70: c5:f4:09:93:35:0a:9a:6f:be:b8:c4:df:4f:1b:e1: dd:82:eb:64:cb:cf:68:78:58:d0:08:9a:60:94:f3: 27:c5:74:d9:fd:db:d6:9f:8e:ca:39:ad:21:5b:e2: 20:3e:6e:09:bc:94:ba:a6:68:4f:29:68:1e:3e:ef: 5a:f7:b3:ca:6a:00:ef:b6:8f:95:19:69:0f:cd:31: 4f:35:cb:44:65:5a:3f:7e:df:b5:9b:b7:41:71:01: 09:cb:1e:94:0d:00:5f:62:24:f1:7e:65:96:9d:65: e9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8A:5B:A5:30:E3:72:DA:AB:B9:39:55:F5:65:7F:C5:75:D3:B8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:09:38:e7:a3:b6:d2:c9:22:27:51:4d:0e:00:62:1b:6f:e0: fb:ff:aa:3c:9b:2c:9c:9f:bf:1f:8f:f9:05:5a:aa:bc:bd:31: ba:40:a9:85:a9:3c:de:8c:41:11:51:a2:1a:f8:bb:b5:a2:19: 11:30:be:c7:08:8b:33:21:b7:f4:25:70:1b:07:d2:f8:08:80: 11:78:bb:47:ad:6c:95:45:ea:07:16:77:07:7f:df:03:a8:83: 6f:b7:0c:b8:36:10:0b:08:4a:86:84:b3:e7:98:11:f9:d7:25: df:65:2a:7e:88:6a:86:3c:e7:65:b2:b7:11:49:f4:80:1e:6b: 8c:16:ea:9c:65:84:9e:a3:c5:38:0b:e9:b5:51:fa:1e:8a:d6: 3e:65:c9:51:b2:7e:df:2c:c4:db:ee:45:36:24:dc:a7:e5:d8: 3b:f3:4a:9d:5a:4f:40:cb:3f:f5:01:a3:0d:13:64:f5:5b:d8: e7:7c:aa:0c:09:af:6d:82:b1:fb:20:86:23:fe:c5:4a:87:44: 5c:e5:d4:03:3c:1c:06:6d:38:14:5c:77:ad:11:db:10:6d:20: 64:b7:c8:af:d3:3a:a5:7a:73:36:e9:d1:83:d9:f4:48:2c:ca: 25:b4:a7:cc:df:f3:96:04:96:12:08:c4:b0:a0:74:dc:c7:0e: 94:4d:7d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhyFwEkg26haMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Nzg5MTYxZDYtNGY3NC00ZTdjLThmNTItOWM1NmExMjRhOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhENEVljJ6Y9/w5B+2d4tnMpJafw+woI1CS4U X+xkqdUEZbcZw0qbNT3p0MP6eQ94MmWrUYnPZ1S9umuj7FUjmgAlv0aAyvma6Ri/ 4BJb1LtAiLAAxJPt7+vRxkhj2RQgP2Zb54tOcIFrQwqMHUoHhoxMGCZ6MbIYpiWA pFbu306A/nVTA9WTdyIq0ZvvSBYFNOqDenDF9AmTNQqab764xN9PG+Hdgutky89o eFjQCJpglPMnxXTZ/dvWn47KOa0hW+IgPm4JvJS6pmhPKWgePu9a97PKagDvto+V GWkPzTFPNctEZVo/ft+1m7dBcQEJyx6UDQBfYiTxfmWWnWXp8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWKW6Uw43Laq7k5VfVlf8V107hPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIJOOejttLJIidRTQ4AYhtv4Pv/qjybLJyfvx+P+QVaqry9MbpAqYWp PN6MQRFRohr4u7WiGREwvscIizMht/QlcBsH0vgIgBF4u0etbJVF6gcWdwd/3wOo g2+3DLg2EAsISoaEs+eYEfnXJd9lKn6IaoY852WytxFJ9IAea4wW6pxlhJ6jxTgL 6bVR+h6K1j5lyVGyft8sxNvuRTYk3Kfl2DvzSp1aT0DLP/UBow0TZPVb2Od8qgwJ r22CsfsghiP+xUqHRFzl1AM8HAZtOBRcd60R2xBtIGS3yK/TOqV6czbp0YPZ9Egs yiW0p8zf85YElhIIxLCgdNzHDpRNfd8= -----END CERTIFICATE-----Generated at Sat May 10 19:11:32 2025 by rpki-client