$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa File: 4ca37203-9c88-36be-9325-8bdef4118d27.roa (raw, json) Hash identifier: qlp1n3QeS7TpXNZROwRTgHFGgst7TXDKGcRJsL2FgAo= Subject key identifier: AA:1C:EE:AC:40:CC:AA:E9:01:DE:3D:AA:F2:12:D6:87:81:55:C0:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849568EBAA09C40CC4586073A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7029 IP address blocks: 71.29.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:ba:a0:9c:40:cc:45:86:07:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=d6faaafd-2536-4c7e-bf8c-261775703508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:41:62:8e:14:a4:00:8a:19:91:ae:a2:b9: 48:94:dd:c9:ff:ae:a9:d8:36:28:21:96:c9:7f:d9: 4a:33:1c:d0:c8:65:6f:32:2b:4e:a0:96:fc:b1:4d: 5e:39:a1:3e:9b:7c:92:a9:90:dc:c5:39:5d:9b:e7: b1:57:88:3e:44:c1:61:70:62:84:01:97:67:03:99: 4b:20:2f:a8:64:47:81:3a:3d:22:e4:6d:6d:6e:7d: 33:bf:b6:a6:9e:56:b2:5d:f1:77:b2:98:4b:10:a1: c6:3b:7c:6d:1e:ae:ee:fd:6f:df:5a:dc:fb:75:66: f8:69:06:e2:4b:f5:0b:53:6f:4c:c4:6b:20:07:83: cd:41:23:85:99:64:05:2c:9b:64:5f:2d:fb:5b:0f: 52:1b:e2:b6:af:c1:4e:a5:9b:35:58:d4:01:2e:f7: d5:ef:6b:c7:69:7c:1a:01:bc:ed:e1:4a:e5:c2:40: 9e:c5:1a:a0:10:41:28:6a:f1:cc:31:aa:f4:c3:60: 4a:d1:55:2d:2a:f0:af:e2:6a:ae:20:3a:70:94:3b: a6:c7:fe:bd:f8:86:4f:d7:3e:71:4d:8e:f5:69:da: 28:b4:7f:89:99:6b:17:6a:d7:1f:b3:a5:b8:73:7f: 3d:d4:e8:a8:2b:62:f4:9f:77:5d:ab:7f:31:5a:0e: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:EE:AC:40:CC:AA:E9:01:DE:3D:AA:F2:12:D6:87:81:55:C0:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ca37203-9c88-36be-9325-8bdef4118d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c9:30:28:fa:55:20:08:5d:07:2a:1a:e7:f9:87:0b:db:0d: 78:79:51:5d:69:c3:97:31:34:60:57:24:b0:ea:13:99:e8:0e: 88:c2:ea:0c:a5:cf:cd:f6:62:27:78:ef:59:f9:c0:7e:b9:6f: b4:a2:de:98:61:f8:04:a6:0f:c1:9e:87:57:fe:64:9c:d8:92: 45:5d:9a:47:93:54:60:de:73:6a:5c:00:16:0d:8d:27:9b:26: 83:2d:9a:20:30:fb:8b:25:6f:d5:a4:b4:6e:92:93:37:d4:3b: 71:cf:d3:df:05:cd:e5:ba:58:eb:54:90:24:ce:46:e7:21:69: 4b:5c:d7:84:b5:81:8c:d2:05:c1:24:2d:e7:89:79:8c:69:2f: 72:7b:61:70:7b:7a:12:db:e3:b7:01:1b:fe:01:c7:95:36:fd: ca:37:d3:3c:22:cf:a3:fe:1d:09:d4:80:96:62:e0:39:0d:bc: 90:12:02:78:e4:d1:e2:da:86:1f:94:71:73:b6:80:cc:42:a8: 18:13:da:9b:fb:35:5f:4c:85:60:67:ea:9d:e7:c0:b4:bb:d6: 7f:af:73:da:70:5e:b8:f5:79:7e:e0:f0:45:3e:91:b4:84:43: b5:9a:1e:dd:c4:6a:84:99:a2:a4:23:aa:42:60:20:86:a8:d0: 1e:45:c7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrqgnEDMRYYHOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk ZDZmYWFhZmQtMjUzNi00YzdlLWJmOGMtMjYxNzc1NzAzNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJBYo4UpACKGZGuorlIlN3J/66p2DYoIZbJ f9lKMxzQyGVvMitOoJb8sU1eOaE+m3ySqZDcxTldm+exV4g+RMFhcGKEAZdnA5lL IC+oZEeBOj0i5G1tbn0zv7amnlayXfF3sphLEKHGO3xtHq7u/W/fWtz7dWb4aQbi S/ULU29MxGsgB4PNQSOFmWQFLJtkXy37Ww9SG+K2r8FOpZs1WNQBLvfV72vHaXwa Abzt4UrlwkCexRqgEEEoavHMMar0w2BK0VUtKvCv4mquIDpwlDumx/69+IZP1z5x TY71adootH+JmWsXatcfs6W4c3891OioK2L0n3ddq38xWg4HjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoc7qxAzKrpAd49qvIS1oeBVcDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNhMzcyMDMtOWM4OC0z NmJlLTkzMjUtOGJkZWY0MTE4ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDJMCj6VSAIXQcqGuf5hwvbDXh5UV1pw5cxNGBXJLDqE5noDojC6gyl z832Yid471n5wH65b7Si3phh+ASmD8Geh1f+ZJzYkkVdmkeTVGDec2pcABYNjSeb JoMtmiAw+4slb9WktG6SkzfUO3HP098FzeW6WOtUkCTORuchaUtc14S1gYzSBcEk LeeJeYxpL3J7YXB7ehLb47cBG/4Bx5U2/co30zwiz6P+HQnUgJZi4DkNvJASAnjk 0eLahh+UcXO2gMxCqBgT2pv7NV9MhWBn6p3nwLS71n+vc9pwXrj1eX7g8EU+kbSE Q7WaHt3EaoSZoqQjqkJgIIao0B5Fx2U= -----END CERTIFICATE-----Generated at Mon May 12 19:50:07 2025 by rpki-client