$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa File: 3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa (raw, json) Hash identifier: SCJhKZ9L8KfeqQSjK07XKTmzL5mdr4OzUfQni9BGoR4= Subject key identifier: 91:FB:D3:39:B1:C8:42:85:A4:98:68:7A:46:07:1E:DB:AA:C8:01:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A137B0F7C73DB4FE30500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.28.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:13:7b:0f:7c:73:db:4f:e3:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bb3a32d6-9d17-4b3f-8325-cdcf5d0efe40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:8c:85:36:c6:e4:2e:c1:f2:65:31:fd:1a: cb:28:30:a6:99:ed:5b:32:89:0f:63:19:e6:f5:3d: 91:c3:2e:f4:37:4a:ab:ce:33:79:77:53:4d:fb:cf: b1:c9:c9:42:76:41:ca:92:50:50:c5:b5:fb:df:30: 39:f8:ff:d4:61:b1:04:b8:4b:98:1e:94:62:97:12: 44:c7:fd:75:fb:f7:ec:cd:55:27:88:ae:5e:1c:47: ce:d2:d3:ad:86:e8:30:b2:62:7f:aa:f7:a7:c2:3a: 41:29:60:2c:58:f3:e1:fb:66:34:3b:da:7c:a0:3c: 50:75:63:c9:57:1e:4e:0e:9a:2d:e9:ea:69:c9:87: 18:42:eb:28:58:9e:15:23:af:fb:a7:89:0e:26:83: 0a:50:3c:f1:f6:ca:7b:77:8b:39:c7:fd:88:8d:18: 45:4b:c7:1b:ae:71:52:d8:e2:ab:66:88:a6:0e:c6: e8:1c:79:95:fa:71:b0:56:51:82:d5:25:53:aa:44: 52:ed:45:ae:7d:29:60:71:44:72:d0:73:08:d4:f3: ef:36:af:0d:a4:d3:89:73:f5:29:fa:86:28:df:26: 59:42:2d:01:b4:68:4b:1e:e5:48:c4:d9:45:bd:6b: 26:9b:f4:fd:98:28:8f:ef:1b:ab:d7:8a:95:cc:44: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FB:D3:39:B1:C8:42:85:A4:98:68:7A:46:07:1E:DB:AA:C8:01:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:da:16:50:cb:e2:8f:c1:d6:51:eb:e1:c6:3f:a5:fe:12:ad: 9f:57:fb:3e:f8:63:29:57:41:82:d9:31:61:60:05:3e:dc:c6: a0:4e:f8:9c:26:21:95:98:a6:a9:b9:e2:44:37:68:8b:b6:a4: 59:5b:37:9c:68:17:a1:48:95:c7:43:66:ce:85:35:33:d9:7f: e1:74:69:74:51:99:2a:96:05:38:f3:5f:63:9a:60:4f:96:84: 73:68:32:63:f0:a6:c0:df:ce:5e:78:19:3d:01:8b:fa:b7:95: 8a:29:c6:66:36:c8:ca:85:64:c8:63:f9:d6:ed:79:f0:07:1c: 19:a5:80:fa:e4:8c:75:8f:cd:c0:c0:2a:ba:1d:24:aa:e9:8b: 30:2f:69:6e:43:69:b8:d9:d1:05:31:ed:9b:ed:e0:b7:67:81: 95:38:6a:0e:81:49:00:2b:c6:50:b2:07:f9:9e:c7:59:77:1d: aa:bb:09:48:9e:ea:91:a6:be:5d:f2:a0:f7:81:51:05:d2:a7: f2:d8:58:e2:b3:f5:69:2b:92:4a:e2:26:c1:4e:68:44:82:9a: b0:e1:e8:85:ad:67:b5:89:4e:47:6d:66:d5:0b:3c:c2:e4:9c: 4b:7a:a3:ce:59:26:da:2f:0e:5e:a2:22:7d:86:e3:a8:76:0d: d6:7b:fa:cd -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShN7D3xz20/jBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmIzYTMyZDYtOWQxNy00YjNmLTgzMjUtY2RjZjVkMGVmZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNeMhTbG5C7B8mUx/RrLKDCmme1bMokPYxnm 9T2Rwy70N0qrzjN5d1NN+8+xyclCdkHKklBQxbX73zA5+P/UYbEEuEuYHpRilxJE x/11+/fszVUniK5eHEfO0tOthugwsmJ/qvenwjpBKWAsWPPh+2Y0O9p8oDxQdWPJ Vx5ODpot6eppyYcYQusoWJ4VI6/7p4kOJoMKUDzx9sp7d4s5x/2IjRhFS8cbrnFS 2OKrZoimDsboHHmV+nGwVlGC1SVTqkRS7UWufSlgcURy0HMI1PPvNq8NpNOJc/Up +oYo3yZZQi0BtGhLHuVIxNlFvWsmm/T9mCiP7xur14qVzERCJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJH70zmxyEKFpJhoekYHHtuqyAHmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYxMWFlMTQtYzM2Ny0z ZjAyLTgzZjUtZTk5OTZlYjFlMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQNoWUMvij8HWUevhxj+l/hKtn1f7PvhjKVdBgtkxYWAFPtzGoE74nCYh lZimqbniRDdoi7akWVs3nGgXoUiVx0NmzoU1M9l/4XRpdFGZKpYFOPNfY5pgT5aE c2gyY/CmwN/OXngZPQGL+reViinGZjbIyoVkyGP51u158AccGaWA+uSMdY/NwMAq uh0kqumLMC9pbkNpuNnRBTHtm+3gt2eBlThqDoFJACvGULIH+Z7HWXcdqrsJSJ7q kaa+XfKg94FRBdKn8thY4rP1aSuSSuImwU5oRIKasOHoha1ntYlOR21m1Qs8wuSc S3qjzlkm2i8OXqIifYbjqHYN1nv6zQ== -----END CERTIFICATE-----Generated at Wed May 7 14:35:29 2025 by rpki-client