$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa File: b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa (raw, json) Hash identifier: NvCm+IIY9TTNlGnnq3PhttY28N99MGm0+RZWZyeE6MY= Subject key identifier: 74:1D:9E:32:92:35:F4:C1:E3:61:FA:A4:C6:DB:09:29:ED:5D:08:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099FB46D2EDAD8354C7C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 174.130.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9f:b4:6d:2e:da:d8:35:4c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=b3d032e2-47ce-4077-a138-f587daeff623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:c2:39:d3:b5:5d:be:6c:3b:43:be:80:29: 52:e7:7d:21:fe:09:5e:7b:37:2a:b3:5b:c4:b0:11: 6c:0c:45:e8:44:9a:c8:9a:5f:69:c9:f0:b1:61:04: c2:e6:56:0f:f8:6b:20:ba:ba:8e:a6:45:d1:82:a0: f6:8b:10:51:18:df:f5:3c:39:ee:f9:b4:7d:9f:6c: ee:86:4f:89:9e:4e:38:dd:d4:f5:a9:83:7f:72:24: a5:b5:ac:37:dc:67:fa:d2:55:f9:8f:03:03:4d:b4: c1:bd:85:73:ca:c2:0f:79:d5:db:2d:79:af:62:70: 7e:f2:b2:f4:fd:e7:06:1f:99:c4:2b:1f:6c:c1:bf: 95:6a:62:87:98:ed:e4:c6:63:07:b1:37:eb:65:38: f9:a9:31:7e:95:0b:fe:1f:f8:57:61:14:ce:b6:ad: 88:8e:f4:98:27:a4:72:67:1f:c6:56:2a:53:ea:a0: 93:55:61:48:e6:77:45:df:19:eb:8f:08:95:f5:41: 53:c7:61:8d:ac:13:5c:41:f7:b4:d5:d3:c1:a5:a2: 10:b2:16:0c:70:0d:74:ba:af:9a:18:01:0b:fa:db: d3:e8:d8:a3:49:27:59:b1:bb:ac:82:0c:47:69:72: 3f:64:6a:b3:5c:a6:03:95:88:7f:7c:dc:c9:c0:5d: 8e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1D:9E:32:92:35:F4:C1:E3:61:FA:A4:C6:DB:09:29:ED:5D:08:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b87d8c86-75bb-339b-8fd8-3d7173a88cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:dd:5c:39:55:a7:a4:91:a6:50:13:33:aa:2e:8d:7f:3f:63: 73:a1:ff:8c:32:e5:c2:61:72:c4:28:1e:ea:52:15:ff:cb:04: 0e:ca:f4:eb:48:4c:09:d6:7d:42:1c:2d:93:a5:a7:48:a6:12: e4:4c:08:5c:ad:64:3a:ea:11:a6:75:bb:6a:af:14:68:1a:c3: 2c:2a:77:3f:40:58:83:a6:87:f8:6b:6e:b4:ef:d8:ed:b8:bd: 5c:03:ae:1c:cb:a8:c4:e0:44:ac:19:61:17:d6:61:79:b2:0b: 21:95:9d:ad:99:e6:fe:d7:88:9a:ea:54:50:9f:53:97:0a:1f: 26:66:35:af:80:0e:e2:5d:9f:79:3d:4e:04:2a:0e:7f:0c:ce: 04:5e:2e:53:d5:9c:9d:92:aa:7a:37:f4:d6:87:5a:a2:15:c4: c3:42:14:58:17:74:4c:8c:dd:a0:2d:4e:d6:94:d8:ae:b6:22: 6f:ec:a3:5d:46:e6:69:b3:e8:01:e7:e6:22:68:6a:33:d7:bc: ec:bf:44:8b:10:18:7f:4c:c6:50:c6:a8:2b:8b:dc:d9:53:1c: a6:ff:88:fa:c2:cc:a1:97:7d:23:c6:a9:e7:4e:88:6f:aa:be: 82:4c:c8:d6:b1:4a:f5:47:f1:99:8a:ba:a6:0b:b6:fe:46:0e: a4:88:df:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZ+0bS7a2DVMfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk YjNkMDMyZTItNDdjZS00MDc3LWExMzgtZjU4N2RhZWZmNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWnCOdO1Xb5sO0O+gClS530h/gleezcqs1vE sBFsDEXoRJrIml9pyfCxYQTC5lYP+GsgurqOpkXRgqD2ixBRGN/1PDnu+bR9n2zu hk+Jnk443dT1qYN/ciSltaw33Gf60lX5jwMDTbTBvYVzysIPedXbLXmvYnB+8rL0 /ecGH5nEKx9swb+VamKHmO3kxmMHsTfrZTj5qTF+lQv+H/hXYRTOtq2IjvSYJ6Ry Zx/GVipT6qCTVWFI5ndF3xnrjwiV9UFTx2GNrBNcQfe01dPBpaIQshYMcA10uq+a GAEL+tvT6NijSSdZsbusggxHaXI/ZGqzXKYDlYh/fNzJwF2OMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQdnjKSNfTB42H6pMbbCSntXQgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg3ZDhjODYtNzViYi0z MzliLThmZDgtM2Q3MTczYTg4Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErdXDlVp6SRplATM6oujX8/Y3Oh/4wy5cJhcsQoHupSFf/LBA7K9OtI TAnWfUIcLZOlp0imEuRMCFytZDrqEaZ1u2qvFGgawywqdz9AWIOmh/hrbrTv2O24 vVwDrhzLqMTgRKwZYRfWYXmyCyGVna2Z5v7XiJrqVFCfU5cKHyZmNa+ADuJdn3k9 TgQqDn8MzgReLlPVnJ2Sqno39NaHWqIVxMNCFFgXdEyM3aAtTtaU2K62Im/so11G 5mmz6AHn5iJoajPXvOy/RIsQGH9MxlDGqCuL3NlTHKb/iPrCzKGXfSPGqedOiG+q voJMyNaxSvVH8ZmKuqYLtv5GDqSI370= -----END CERTIFICATE-----Generated at Wed Apr 30 14:12:26 2025 by rpki-client