$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa File: 3827e8ef-545e-37f5-861b-ae19730b2106.roa (raw, json) Hash identifier: fyIQCFvnxuExPVnRqKU+Iyran+uCl1d/5u8V1nG1p/w= Subject key identifier: 2A:58:9B:2F:A3:1A:B2:DB:73:0F:44:AF:5D:9C:A9:E4:AB:2C:1E:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F09A0578FE605F1C0116B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 174.131.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a0:57:8f:e6:05:f1:c0:11:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=4cb33a2e-b1f7-4691-8728-3f2b7f9c08f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:fb:2c:e1:54:d7:d1:d7:fc:3b:da:49:1f: c3:5b:91:d6:d0:8b:74:03:6f:31:40:28:8d:ae:a2: df:69:dc:4a:ef:1a:9f:43:37:a3:fc:61:4d:1a:b5: a2:95:7c:e0:56:c0:07:5c:81:97:82:27:29:01:67: f9:98:3c:30:be:30:30:4e:9e:73:07:dd:12:0d:0f: f1:4a:ea:9c:14:4b:9b:29:0b:0d:f4:5f:e5:9d:ef: 84:0c:4f:a0:9b:3c:0d:3b:41:43:33:76:bd:13:67: db:2f:94:a5:f0:bb:5f:d7:0e:2f:d2:58:a6:26:1b: 69:6e:bb:4b:3d:88:e5:05:95:69:c0:df:8d:a9:6b: 0c:6a:74:29:da:11:6b:11:82:41:86:31:8a:82:ec: f6:ea:4b:92:a3:a3:aa:98:93:a5:8a:20:0c:b8:55: 0f:cf:54:3b:ac:9a:e0:ce:3b:9f:9a:aa:73:03:f7: 57:79:51:12:0b:f6:2d:38:e1:18:60:c3:21:95:7c: a3:d4:98:4d:3e:01:eb:a4:37:16:62:13:fc:43:5f: 4a:ac:d6:55:85:4e:30:66:c0:6a:e9:69:b2:ff:90: 2b:30:e1:83:9d:ec:b1:cd:ba:6b:36:59:7c:cf:8a: b3:f7:1d:df:a2:ac:6d:20:35:c7:fb:06:f0:71:92: 2e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:9B:2F:A3:1A:B2:DB:73:0F:44:AF:5D:9C:A9:E4:AB:2C:1E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3827e8ef-545e-37f5-861b-ae19730b2106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ac:9c:3b:3a:43:60:19:fd:0b:4f:e9:e3:5f:8f:db:0a:e3: 67:64:c7:d6:f0:58:ff:87:11:57:24:3e:5a:90:1e:c6:98:f6: 01:11:46:4d:fc:bc:86:03:3b:80:cb:c0:d7:77:37:58:7d:8d: d2:67:1d:c4:e8:cd:03:cc:ab:13:97:77:01:cb:05:90:1b:49: 07:b5:1c:53:9a:26:24:bc:1a:48:61:5b:06:02:b3:56:ae:80: bb:fb:48:4e:1e:8d:5f:db:e4:4a:1b:2c:1c:38:46:52:af:ff: 30:9b:94:ba:3f:0d:e6:81:7d:40:5c:8f:dc:a0:51:17:29:c1: 59:32:63:ad:9b:34:28:31:17:59:dc:a7:a5:93:73:0d:b9:2c: c5:f3:fa:86:ad:81:f1:10:aa:65:cb:a8:7a:d0:a8:2c:94:b0: e6:b2:3a:3e:61:34:c6:58:08:3e:f1:f0:a1:66:8d:f2:d5:f4: 0d:82:3f:4c:60:dd:4a:b9:2c:10:10:79:ff:3c:ba:a4:4f:8c: e6:90:76:c9:69:33:ac:42:82:6e:45:00:4e:57:ac:07:fb:c3: 5a:b3:0f:56:bf:75:8e:f5:2d:a0:57:42:75:88:c4:44:17:da: ef:5b:88:1e:24:a7:46:3b:e1:fc:ed:3c:5c:ce:a9:30:33:b6: 03:25:56:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaBXj+YF8cARa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NGNiMzNhMmUtYjFmNy00NjkxLTg3MjgtM2YyYjdmOWMwOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIv7LOFU19HX/DvaSR/DW5HW0It0A28xQCiN rqLfadxK7xqfQzej/GFNGrWilXzgVsAHXIGXgicpAWf5mDwwvjAwTp5zB90SDQ/x SuqcFEubKQsN9F/lne+EDE+gmzwNO0FDM3a9E2fbL5Sl8Ltf1w4v0limJhtpbrtL PYjlBZVpwN+NqWsManQp2hFrEYJBhjGKguz26kuSo6OqmJOliiAMuFUPz1Q7rJrg zjufmqpzA/dXeVESC/YtOOEYYMMhlXyj1JhNPgHrpDcWYhP8Q19KrNZVhU4wZsBq 6Wmy/5ArMOGDneyxzbprNll8z4qz9x3foqxtIDXH+wbwcZIuGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpYmy+jGrLbcw9Er12cqeSrLB7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzgyN2U4ZWYtNTQ1ZS0z N2Y1LTg2MWItYWUxOTczMGIyMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroO6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSsnDs6Q2AZ/QtP6eNfj9sK42dkx9bwWP+HEVckPlqQHsaY9gERRk38 vIYDO4DLwNd3N1h9jdJnHcTozQPMqxOXdwHLBZAbSQe1HFOaJiS8GkhhWwYCs1au gLv7SE4ejV/b5EobLBw4RlKv/zCblLo/DeaBfUBcj9ygURcpwVkyY62bNCgxF1nc p6WTcw25LMXz+oatgfEQqmXLqHrQqCyUsOayOj5hNMZYCD7x8KFmjfLV9A2CP0xg 3Uq5LBAQef88uqRPjOaQdslpM6xCgm5FAE5XrAf7w1qzD1a/dY71LaBXQnWIxEQX 2u9biB4kp0Y74fztPFzOqTAztgMlVoU= -----END CERTIFICATE-----Generated at Tue Apr 29 16:40:38 2025 by rpki-client