$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa File: 5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa (raw, json) Hash identifier: pxz3jar06aAqs3meh/ADLcUDFg3pLrAjjHIZ/AvTrC4= Subject key identifier: 3E:93:41:A6:F4:3E:D6:56:EB:3B:45:FF:01:D2:B5:BD:77:CD:6F:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30BC86954BAD14F5571780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa Signing time: Tue 21 Jan 2025 20:38:37 +0000 ROA not before: Tue 21 Jan 2025 20:38:37 +0000 ROA not after: Mon 21 Apr 2025 19:38:37 +0000 asID: 7029 IP address blocks: 174.131.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:bc:86:95:4b:ad:14:f5:57:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:37 2025 GMT Not After : Apr 21 19:38:37 2025 GMT Subject: CN=7c7e5b23-daed-414c-a6f7-b0e4d3f0b016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d7:8b:ec:6f:f1:30:da:95:cb:85:82:3e:89: f1:ff:81:f7:98:5a:ce:13:5c:7a:cd:d1:ec:66:70: 19:fc:28:95:7a:89:3d:b9:8f:18:b8:90:0d:cb:54: c0:6f:d1:b6:01:50:25:e2:29:1a:12:06:1e:36:ec: de:4d:8a:55:c3:26:7c:b0:ac:de:16:5b:9f:b5:aa: a0:8d:24:55:2c:e3:e7:9d:a3:0d:25:cc:a3:3f:63: 30:b3:da:64:69:16:7f:8b:65:88:18:0a:65:51:bb: e6:c7:db:e1:1e:51:99:79:39:28:db:a2:ff:c5:db: 49:b3:58:e6:f2:e5:8d:f6:af:bc:0e:27:34:81:12: d1:62:42:a4:6b:6c:81:94:3b:6d:16:e0:f2:61:03: 25:c6:a9:66:fe:04:f6:f5:a2:1d:ac:e3:fc:2e:26: a9:49:5b:c0:67:9b:6d:bb:d4:cb:94:62:69:f4:17: 56:cf:b6:ec:89:f0:fa:62:e5:2d:92:32:00:cf:9d: 5e:e1:08:e8:11:65:e1:fa:7c:c3:5e:cb:c3:a2:cf: 51:c5:26:2d:38:16:0a:55:99:71:97:12:71:eb:a3: 1a:96:e3:7b:bd:3f:e9:da:61:40:9d:fb:96:42:7d: 8a:0a:f5:7e:ec:69:44:95:70:6d:a2:cb:13:56:d5: dd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:93:41:A6:F4:3E:D6:56:EB:3B:45:FF:01:D2:B5:BD:77:CD:6F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d2b22a6-bd49-3c71-a630-4cd3ecafa3ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c1:12:ea:09:6e:aa:15:02:25:3b:97:99:bf:1b:2a:95:a3: 18:bf:fc:14:a8:b0:b0:7a:03:75:6f:54:ce:1d:cc:df:72:07: 53:4b:18:d7:2f:a7:af:7b:09:88:b9:ea:aa:1f:b8:39:60:3a: 68:3e:b9:f9:5f:86:58:bc:cd:6f:67:4b:80:f2:66:80:d0:df: 3d:05:c7:c3:fa:24:84:82:8b:8d:d6:7c:3b:a8:72:bf:7d:e4: 64:a0:b3:4a:5c:b0:5e:c4:8b:5e:35:ca:de:f4:60:99:7a:6a: 11:0c:a3:64:da:6d:5b:74:c1:f0:86:c4:ed:dd:73:11:7a:7d: f8:8f:4e:d9:c6:cf:22:94:77:de:01:82:f3:b4:58:2d:64:60: f8:af:51:9c:ea:e0:d1:9c:90:33:2c:25:d9:99:e1:7d:b5:1a: 90:ca:4b:3c:f0:a0:7d:7b:c9:bd:86:a8:99:14:35:2d:a6:ff: 25:ef:10:83:b5:3d:a1:3b:18:a5:7f:cc:6c:73:a4:03:d2:94: 4d:67:d4:48:51:b4:8b:91:2b:3c:10:1f:2f:80:60:9c:f0:64: 08:80:24:a0:4b:48:79:b8:92:ee:3c:ce:f2:3a:d8:76:f6:9c: f1:8f:6e:28:05:0c:e8:a2:ec:78:ef:70:ac:c8:e4:14:71:d0: 94:ab:a7:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMLyGlUutFPVXF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzgzN1oXDTI1MDQyMTE5MzgzN1owLzEtMCsGA1UEAxMk N2M3ZTViMjMtZGFlZC00MTRjLWE2ZjctYjBlNGQzZjBiMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdeL7G/xMNqVy4WCPonx/4H3mFrOE1x6zdHs ZnAZ/CiVeok9uY8YuJANy1TAb9G2AVAl4ikaEgYeNuzeTYpVwyZ8sKzeFluftaqg jSRVLOPnnaMNJcyjP2Mws9pkaRZ/i2WIGAplUbvmx9vhHlGZeTko26L/xdtJs1jm 8uWN9q+8Dic0gRLRYkKka2yBlDttFuDyYQMlxqlm/gT29aIdrOP8LiapSVvAZ5tt u9TLlGJp9BdWz7bsifD6YuUtkjIAz51e4QjoEWXh+nzDXsvDos9RxSYtOBYKVZlx lxJx66MaluN7vT/p2mFAnfuWQn2KCvV+7GlElXBtossTVtXdYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6TQab0PtZW6ztF/wHStb13zW8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQyYjIyYTYtYmQ0OS0z YzcxLWE2MzAtNGNkM2VjYWZhM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBroP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLBEuoJbqoVAiU7l5m/GyqVoxi//BSosLB6A3VvVM4dzN9yB1NLGNcv p697CYi56qofuDlgOmg+uflfhli8zW9nS4DyZoDQ3z0Fx8P6JISCi43WfDuocr99 5GSgs0pcsF7Ei141yt70YJl6ahEMo2TabVt0wfCGxO3dcxF6ffiPTtnGzyKUd94B gvO0WC1kYPivUZzq4NGckDMsJdmZ4X21GpDKSzzwoH17yb2GqJkUNS2m/yXvEIO1 PaE7GKV/zGxzpAPSlE1n1EhRtIuRKzwQHy+AYJzwZAiAJKBLSHm4ku48zvI62Hb2 nPGPbigFDOii7HjvcKzI5BRx0JSrp+8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:04 2025 by rpki-client