$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa File: 8439542b-538e-3386-9782-0bb9b565da7c.roa (raw, json) Hash identifier: mhZsTPfPH4WsaZXl9jS6DKXQlPS6A4xusBOyXp6Q0Eg= Subject key identifier: FE:4A:4F:49:09:CE:78:21:01:1F:C9:6D:0C:72:C2:0E:E9:60:F5:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABBFD09A5D8A12CB7A1D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 174.131.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bf:d0:9a:5d:8a:12:cb:7a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=0401623a-ac79-49e6-84db-e90dac5e49ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ea:3a:60:46:c8:5d:a0:ee:d5:2c:25:5f:59: 42:8d:d5:45:60:e6:3f:7b:54:95:7a:c4:1d:e3:29: 51:54:5a:13:6f:d2:22:11:52:f3:16:c0:13:49:b7: 70:3d:1d:7d:b6:e8:b2:ed:a9:f7:f1:87:d3:5b:1f: 95:49:7d:83:f1:e3:31:4c:b8:1c:e1:6a:cf:03:a5: d4:52:2f:ba:4f:f5:35:4c:f5:54:26:1e:15:06:10: 15:a0:c4:51:dd:11:b7:ef:b1:6e:e6:2d:4e:a3:b1: 79:83:1e:f4:58:d5:fc:86:a3:e9:86:86:99:8c:1d: 5d:ec:5b:af:b2:cd:e1:b5:e5:f0:ac:87:4b:0a:bb: 36:3a:48:79:9f:76:5e:cc:6b:16:a9:83:0e:e4:83: 5e:01:c1:b7:22:00:60:dd:f3:37:1c:b8:40:cc:b9: 91:f2:61:6e:a2:35:13:51:a0:34:b1:e3:80:07:b7: c8:0b:b7:d2:9c:3e:c6:b0:32:82:8d:c3:1d:02:a1: e9:13:7e:bb:83:a8:17:74:b5:eb:b7:78:f2:e8:43: 60:d4:f6:01:e0:dd:13:9b:dc:4f:31:7f:57:6d:45: 1d:e9:63:f8:ce:b0:c2:06:25:08:cf:02:8b:3a:de: 5d:36:c5:45:c5:eb:29:83:5a:b4:33:8e:09:f1:86: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:4F:49:09:CE:78:21:01:1F:C9:6D:0C:72:C2:0E:E9:60:F5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8439542b-538e-3386-9782-0bb9b565da7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4a:3f:2c:7c:8d:55:3c:18:1c:cc:d0:08:0e:7b:8b:71:3c: f5:eb:26:41:f6:72:66:88:92:9d:12:41:54:51:57:de:a6:b6: 54:7c:c4:97:e9:1d:0f:9f:75:c0:c0:57:db:d5:1c:0a:99:48: 02:40:de:67:cb:74:37:68:99:64:4c:5a:11:d7:10:b9:93:a6: b6:ac:e6:be:87:82:da:45:1f:1d:11:02:14:44:ad:3f:aa:40: 8c:1d:bd:59:40:07:ae:07:a8:d4:38:3c:b4:2d:7e:8b:39:fe: c7:4f:40:9b:ca:a8:74:81:5f:e1:2e:7b:6f:83:8f:0a:e0:be: 13:92:c2:86:1f:ca:bf:d4:c1:1a:5b:ee:e9:8c:5b:1d:9b:bb: a6:8f:66:bf:24:58:cb:21:39:e2:42:a8:05:f7:16:95:a0:dc: 75:b2:34:45:fd:02:89:0e:58:47:bd:a8:f2:cb:0c:29:a6:d3: 5d:f0:2e:0a:40:18:22:e2:d2:7c:34:63:73:37:78:12:e6:5a: bd:60:7a:a0:0e:8f:85:39:ac:93:38:67:67:48:3c:1d:20:50: 7c:4a:ac:0e:93:b7:3e:79:86:cf:af:9c:3f:87:37:82:76:4f: d8:fd:cb:5e:97:17:c8:b3:78:30:8a:35:c9:95:84:95:73:0d: 60:04:03:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7/Qml2KEst6HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MDQwMTYyM2EtYWM3OS00OWU2LTg0ZGItZTkwZGFjNWU0OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreo6YEbIXaDu1SwlX1lCjdVFYOY/e1SVesQd 4ylRVFoTb9IiEVLzFsATSbdwPR19tuiy7an38YfTWx+VSX2D8eMxTLgc4WrPA6XU Ui+6T/U1TPVUJh4VBhAVoMRR3RG377Fu5i1Oo7F5gx70WNX8hqPphoaZjB1d7Fuv ss3hteXwrIdLCrs2Okh5n3ZezGsWqYMO5INeAcG3IgBg3fM3HLhAzLmR8mFuojUT UaA0seOAB7fIC7fSnD7GsDKCjcMdAqHpE367g6gXdLXrt3jy6ENg1PYB4N0Tm9xP MX9XbUUd6WP4zrDCBiUIzwKLOt5dNsVFxespg1q0M44J8YaNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5KT0kJznghAR/JbQxywg7pYPUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODQzOTU0MmItNTM4ZS0z Mzg2LTk3ODItMGJiOWI1NjVkYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZKPyx8jVU8GBzM0AgOe4txPPXrJkH2cmaIkp0SQVRRV96mtlR8xJfp HQ+fdcDAV9vVHAqZSAJA3mfLdDdomWRMWhHXELmTpras5r6HgtpFHx0RAhRErT+q QIwdvVlAB64HqNQ4PLQtfos5/sdPQJvKqHSBX+Eue2+DjwrgvhOSwoYfyr/UwRpb 7umMWx2bu6aPZr8kWMshOeJCqAX3FpWg3HWyNEX9AokOWEe9qPLLDCmm013wLgpA GCLi0nw0Y3M3eBLmWr1geqAOj4U5rJM4Z2dIPB0gUHxKrA6Ttz55hs+vnD+HN4J2 T9j9y16XF8izeDCKNcmVhJVzDWAEA0Q= -----END CERTIFICATE-----Generated at Sun Apr 27 11:58:19 2025 by rpki-client