$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa File: f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa (raw, json) Hash identifier: NVAEoQm0p6qp81QqCKjA2+dAlPahilyOOi6bHOJ5/ac= Subject key identifier: 04:1D:C4:A2:3F:76:DB:60:A1:E6:93:80:D3:99:86:FD:B2:8D:E7:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A40D1728EF4FDA050BD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.131.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:40:d1:72:8e:f4:fd:a0:50:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=17c11422-9dde-49b4-8b06-4dc384e39dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:d5:7e:e3:ab:21:3b:b0:05:52:c2:c4:c3: 1d:83:f1:39:25:39:a8:59:a7:70:43:9f:0d:47:0a: a2:6e:c7:34:21:bb:54:31:89:69:bd:9c:1d:81:ca: 2f:8d:ac:7b:85:c3:87:f3:a2:ec:d6:37:f4:c5:04: 62:42:dc:db:db:0d:15:7e:1f:6e:d8:45:29:7d:18: 6e:14:67:4c:97:20:41:e1:47:3b:73:f0:b7:28:f1: 92:f8:6e:5e:98:63:bd:53:a5:48:57:3a:4b:cf:10: 06:ac:00:17:1a:d5:32:e6:72:b2:8a:31:e4:08:f8: 6e:2e:6d:8b:95:04:00:ad:3f:15:c5:c6:95:79:21: 8f:50:ea:50:55:6b:ce:dd:9c:e0:21:3d:fc:cb:a7: a5:2b:50:39:74:0e:48:bd:65:a5:d0:d1:75:bc:5c: 67:8c:46:54:bb:57:6e:8b:1a:c1:4a:2e:eb:0c:7b: 23:7a:c4:38:f5:d6:41:2c:fa:62:59:a6:f2:f6:06: c6:4f:83:47:84:fe:b0:bf:a7:4e:fe:a8:0c:9b:68: 4d:32:d3:e8:8c:fc:f9:18:03:91:4e:b1:10:73:f7: ee:12:78:07:66:7c:02:c6:86:5e:c7:8a:e8:26:f2: e9:83:70:47:ce:5d:0b:58:bc:0b:af:a6:d2:de:b9: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:C4:A2:3F:76:DB:60:A1:E6:93:80:D3:99:86:FD:B2:8D:E7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f36c82d8-e3f2-3023-85ba-8d4a0e9a0471.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9e:c2:0d:6e:bf:14:aa:2b:2a:e5:b7:0e:0a:c4:ff:12:da: 4c:db:6a:64:b6:61:aa:44:d5:18:ba:c2:b5:95:28:6a:88:ab: 0e:77:09:c9:28:98:a0:d8:58:33:ff:48:3c:1c:52:d2:80:fe: c9:65:8a:a9:00:8b:e4:87:09:dc:c4:e5:5b:47:87:5d:76:7b: ed:76:68:31:9b:89:09:f7:e8:e7:c1:a2:1d:26:6c:91:0c:c0: 1a:4f:6a:bf:8a:58:32:6c:c8:6c:f3:78:c2:92:10:92:f6:0d: 1d:6f:e0:9d:da:15:de:48:7c:ad:c9:f3:1a:ec:8e:5d:63:d8: 01:70:03:1c:d3:51:77:de:ee:a3:b2:c1:b6:a7:fe:88:6d:9e: 6d:4f:f1:da:15:32:b0:34:a8:5c:56:83:86:10:0a:4f:bb:81: e8:7d:b8:ce:bd:d7:49:40:4e:00:59:df:ab:c9:88:fb:1d:42: fc:0f:30:50:6d:7b:89:cf:6f:0f:27:a5:03:08:a0:97:33:90: 8f:6e:03:c0:36:34:4a:9b:3c:89:0f:6b:eb:ec:84:74:b1:bc: 23:91:48:e9:25:8e:6a:38:7c:5a:2c:91:f1:77:15:7e:1e:0b: 0e:c1:78:de:11:62:b0:e8:3c:6d:1e:b8:41:cf:f6:34:33:fc: 56:0e:0f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkDRco70/aBQvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTdjMTE0MjItOWRkZS00OWI0LThiMDYtNGRjMzg0ZTM5ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4TVfuOrITuwBVLCxMMdg/E5JTmoWadwQ58N Rwqibsc0IbtUMYlpvZwdgcovjax7hcOH86Ls1jf0xQRiQtzb2w0Vfh9u2EUpfRhu FGdMlyBB4Uc7c/C3KPGS+G5emGO9U6VIVzpLzxAGrAAXGtUy5nKyijHkCPhuLm2L lQQArT8VxcaVeSGPUOpQVWvO3ZzgIT38y6elK1A5dA5IvWWl0NF1vFxnjEZUu1du ixrBSi7rDHsjesQ49dZBLPpiWaby9gbGT4NHhP6wv6dO/qgMm2hNMtPojPz5GAOR TrEQc/fuEngHZnwCxoZex4roJvLpg3BHzl0LWLwLr6bS3rlZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQdxKI/dttgoeaTgNOZhv2yjedTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2YzgyZDgtZTNmMi0z MDIzLTg1YmEtOGQ0YTBlOWEwNDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWewg1uvxSqKyrltw4KxP8S2kzbamS2YapE1Ri6wrWVKGqIqw53Ccko mKDYWDP/SDwcUtKA/slliqkAi+SHCdzE5VtHh112e+12aDGbiQn36OfBoh0mbJEM wBpPar+KWDJsyGzzeMKSEJL2DR1v4J3aFd5IfK3J8xrsjl1j2AFwAxzTUXfe7qOy wban/ohtnm1P8doVMrA0qFxWg4YQCk+7geh9uM6910lATgBZ36vJiPsdQvwPMFBt e4nPbw8npQMIoJczkI9uA8A2NEqbPIkPa+vshHSxvCORSOkljmo4fFoskfF3FX4e Cw7BeN4RYrDoPG0euEHP9jQz/FYODzc= -----END CERTIFICATE-----Generated at Sat May 10 07:21:50 2025 by rpki-client