$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c85e054-6f9c-3a89-986a-3964903db4ee.roa File: 7c85e054-6f9c-3a89-986a-3964903db4ee.roa (raw, json) Hash identifier: Tiuj0iOF+zypPZeR5SMde6IVExj0fWdRAtS0FRhqMrk= Subject key identifier: CB:48:C1:1F:FF:E9:92:E4:D9:51:31:8B:5F:5F:BB:F7:82:E7:BD:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B48AD58D4FFEF8E37EA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c85e054-6f9c-3a89-986a-3964903db4ee.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 174.130.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b4:8a:d5:8d:4f:fe:f8:e3:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=4db81dcb-f554-4ac3-aeab-091a599047b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:fd:22:a4:2d:dc:69:67:4c:fd:ea:d1:79: f7:cd:ad:5e:9c:35:0b:65:4d:cd:24:a6:91:ce:75: 5a:8f:1f:01:ca:56:dd:31:0d:30:b7:73:0d:da:2c: e1:80:d7:ce:6a:39:bd:5d:2e:61:32:0d:68:8a:b4: 20:8b:38:46:a1:dd:68:7c:c7:66:3e:db:6f:bf:a1: 91:37:99:f3:c5:62:80:0b:2c:07:7b:d2:b4:3f:e5: bc:b3:de:dd:16:cd:7e:6f:ed:11:ab:e7:e0:f5:97: 30:f1:76:a8:a7:67:ed:85:47:b8:41:18:5d:c3:db: db:f0:89:ee:b6:06:20:c0:84:d3:27:e2:c9:83:9d: f2:d2:65:3c:20:f3:e6:09:38:5c:7a:06:9e:18:a9: ac:3d:44:86:25:00:4b:48:0d:3c:a7:0c:55:b7:c1: b1:e7:13:66:5e:c5:34:30:7b:a3:d5:ed:f4:18:cb: 18:f4:b8:15:08:26:39:bd:cf:54:d0:f2:0a:68:1f: d9:8d:e8:1b:6d:97:df:f2:ec:58:f2:94:e5:f8:64: 85:83:c9:a7:40:14:a5:19:c9:62:53:80:ed:e4:cb: 82:e7:ff:46:be:10:74:2f:ea:d8:b8:eb:50:1c:8b: 98:d9:99:3e:8f:dd:3c:10:69:42:b3:36:d0:4e:6b: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:48:C1:1F:FF:E9:92:E4:D9:51:31:8B:5F:5F:BB:F7:82:E7:BD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c85e054-6f9c-3a89-986a-3964903db4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:13:c3:33:01:56:9f:98:2b:b7:2b:cc:90:61:14:81:09:0a: 4c:9a:6e:bc:25:64:ea:cd:de:a7:8a:57:3e:14:8d:64:91:50: b9:de:5c:94:70:91:33:a1:f3:a9:bb:d6:ab:c0:b6:dc:20:b8: b1:90:70:06:ed:82:fd:43:32:a7:b5:38:0d:03:d5:76:6a:fe: a8:90:40:e5:db:e2:90:32:65:5e:9d:19:03:e9:03:47:ad:2a: 5f:47:ef:ea:d8:cd:df:f1:ba:a3:a0:b4:33:86:48:44:fe:79: 11:ad:fc:4f:f2:85:87:de:43:a7:9c:18:66:7d:cd:63:33:a2: 74:49:61:42:35:58:b5:0a:e9:19:f5:b7:82:e1:4f:be:89:70: 36:31:53:32:c4:07:99:99:42:e6:7e:a7:d2:a4:86:b2:da:cc: 17:e8:b7:31:88:66:ed:e2:2b:55:96:32:d5:c7:39:2f:a1:6a: 39:9e:8e:de:c5:1b:bd:d4:da:5c:c4:13:c1:b4:24:33:e5:7e: 4b:c9:54:af:58:75:e2:16:59:85:1d:c4:f4:4b:d2:c1:4a:3c: 1b:a3:6a:de:32:12:bc:66:64:d9:e3:f6:09:a9:75:54:df:46: 8a:d5:3a:e4:d4:51:8b:34:0c:3c:b3:65:c4:f2:b6:0b:e0:2c: 01:25:62:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbSK1Y1P/vjjfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NGRiODFkY2ItZjU1NC00YWMzLWFlYWItMDkxYTU5OTA0N2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yP9IqQt3GlnTP3q0Xn3za1enDULZU3NJKaR znVajx8BylbdMQ0wt3MN2izhgNfOajm9XS5hMg1oirQgizhGod1ofMdmPttvv6GR N5nzxWKACywHe9K0P+W8s97dFs1+b+0Rq+fg9Zcw8Xaop2fthUe4QRhdw9vb8Inu tgYgwITTJ+LJg53y0mU8IPPmCThcegaeGKmsPUSGJQBLSA08pwxVt8Gx5xNmXsU0 MHuj1e30GMsY9LgVCCY5vc9U0PIKaB/ZjegbbZff8uxY8pTl+GSFg8mnQBSlGcli U4Dt5MuC5/9GvhB0L+rYuOtQHIuY2Zk+j908EGlCszbQTmv8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtIwR//6ZLk2VExi19fu/eC570nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M4NWUwNTQtNmY5Yy0z YTg5LTk4NmEtMzk2NDkwM2RiNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4TwzMBVp+YK7crzJBhFIEJCkyabrwlZOrN3qeKVz4UjWSRULneXJRw kTOh86m71qvAttwguLGQcAbtgv1DMqe1OA0D1XZq/qiQQOXb4pAyZV6dGQPpA0et Kl9H7+rYzd/xuqOgtDOGSET+eRGt/E/yhYfeQ6ecGGZ9zWMzonRJYUI1WLUK6Rn1 t4LhT76JcDYxUzLEB5mZQuZ+p9KkhrLazBfotzGIZu3iK1WWMtXHOS+hajmejt7F G73U2lzEE8G0JDPlfkvJVK9YdeIWWYUdxPRL0sFKPBujat4yErxmZNnj9gmpdVTf RorVOuTUUYs0DDyzZcTytgvgLAElYnk= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:53 2025 by rpki-client