$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa File: 6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa (raw, json) Hash identifier: vFjpghMcrsgocT3bzMk2Oezu1Uk/oX8q9XskT36WOzs= Subject key identifier: B8:50:89:A1:EE:23:D2:C9:13:1F:82:71:59:3A:FD:E4:48:2B:3A:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1710456B08D4F59D9280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 174.130.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:10:45:6b:08:d4:f5:9d:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1d11f61b-a60c-4d9a-bc1a-e1801a515452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:b3:10:d1:9b:5e:17:32:27:ee:c2:85:3a: 42:3b:a5:9c:b7:a6:af:a3:33:b2:4b:37:85:9d:60: e2:72:50:ca:cd:6a:e4:c9:0f:f4:aa:51:d8:9d:fa: 6e:5a:a4:73:04:92:40:5d:59:ca:37:18:9b:ab:5e: 17:97:d0:13:a4:4c:3b:93:2f:87:5b:6f:19:fb:7b: aa:ca:56:f3:67:11:7b:69:13:9f:66:07:84:a8:16: 06:c1:bb:37:00:93:05:c6:1d:2b:26:ab:1d:33:fb: f2:88:6e:ce:f0:b1:52:57:2b:6d:4c:4d:54:78:77: 1f:47:0b:62:df:56:12:13:36:f9:6d:d5:cf:10:f9: 80:90:13:92:be:d1:83:6c:ad:13:b8:fe:f6:8e:dc: f0:1f:d0:7c:0e:b9:36:18:2f:e9:01:bb:24:a3:d7: 0e:27:2d:3f:db:42:09:26:73:a7:1c:2b:16:31:93: d6:31:ee:20:04:61:2c:46:57:20:53:ec:a2:ad:43: 35:db:fd:ca:9b:93:8d:87:52:00:f3:64:3e:32:86: ad:1f:78:f7:1c:96:75:96:2c:a2:90:78:c7:0d:87: 4c:07:97:a8:3c:31:b1:9f:eb:a0:55:15:a8:b0:a8: ce:af:72:0c:a5:1b:89:37:5f:27:90:f2:ab:f9:d2: 10:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:50:89:A1:EE:23:D2:C9:13:1F:82:71:59:3A:FD:E4:48:2B:3A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d3fb0ec-63d5-342c-8c81-bdcd51af9818.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:34:bd:e0:56:92:b3:37:16:6c:6d:10:f3:5e:88:e9:92:dc: d7:46:0b:ca:3b:9c:40:42:ca:aa:fc:a4:b9:33:e6:70:78:58: 1b:06:71:87:a5:3f:78:de:cc:63:c0:dc:ac:f6:28:5c:e7:26: 6e:05:ef:92:7e:73:70:f0:36:bb:57:fa:bc:95:34:82:9c:1d: 32:ba:c9:8b:ab:94:08:c6:f8:01:14:81:45:50:49:3f:07:be: 3e:f7:98:56:f3:7e:7f:4e:18:29:90:5e:6b:7e:26:73:fa:0b: 96:46:36:71:63:f2:8c:32:fc:4b:c0:12:5e:8e:b0:33:67:60: d0:57:4c:bc:ae:26:f8:34:79:fd:eb:1e:68:d7:4d:e3:57:b9: fb:d6:a1:b3:90:a3:36:ee:1a:85:51:2b:ad:e8:4e:29:b1:f5: 1e:b9:64:55:df:58:b0:20:07:d9:ff:d8:56:36:3e:f6:c4:53: aa:f7:50:a1:be:a3:28:cc:b8:f6:e0:07:ae:02:0e:bf:29:29: e1:2c:c2:e0:bd:2f:2a:99:5d:3a:0f:43:e1:a9:27:6d:3a:2d: b8:ad:a2:83:c8:2a:3c:b0:ec:54:a5:93:a3:70:de:e9:09:b8: 9e:2a:41:a9:af:74:d7:6a:85:ea:5d:43:34:8c:18:61:b5:30: 28:dd:b7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShcQRWsI1PWdkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWQxMWY2MWItYTYwYy00ZDlhLWJjMWEtZTE4MDFhNTE1NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6OzENGbXhcyJ+7ChTpCO6Wct6avozOySzeF nWDiclDKzWrkyQ/0qlHYnfpuWqRzBJJAXVnKNxibq14Xl9ATpEw7ky+HW28Z+3uq ylbzZxF7aROfZgeEqBYGwbs3AJMFxh0rJqsdM/vyiG7O8LFSVyttTE1UeHcfRwti 31YSEzb5bdXPEPmAkBOSvtGDbK0TuP72jtzwH9B8Drk2GC/pAbsko9cOJy0/20IJ JnOnHCsWMZPWMe4gBGEsRlcgU+yirUM12/3Km5ONh1IA82Q+MoatH3j3HJZ1liyi kHjHDYdMB5eoPDGxn+ugVRWosKjOr3IMpRuJN18nkPKr+dIQGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhQiaHuI9LJEx+CcVk6/eRIKzoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQzZmIwZWMtNjNkNS0z NDJjLThjODEtYmRjZDUxYWY5ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCroI8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE00veBWkrM3FmxtEPNeiOmS3NdGC8o7nEBCyqr8pLkz5nB4WBsGcYel P3jezGPA3Kz2KFznJm4F75J+c3DwNrtX+ryVNIKcHTK6yYurlAjG+AEUgUVQST8H vj73mFbzfn9OGCmQXmt+JnP6C5ZGNnFj8owy/EvAEl6OsDNnYNBXTLyuJvg0ef3r HmjXTeNXufvWobOQozbuGoVRK63oTimx9R65ZFXfWLAgB9n/2FY2PvbEU6r3UKG+ oyjMuPbgB64CDr8pKeEswuC9LyqZXToPQ+GpJ206LbitooPIKjyw7FSlk6Nw3ukJ uJ4qQamvdNdqhepdQzSMGGG1MCjdt3U= -----END CERTIFICATE-----Generated at Sun Jun 15 13:07:22 2025 by rpki-client