$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa File: 4cde9440-2e2e-3453-bb86-60dbbef890f0.roa (raw, json) Hash identifier: EC59qjAzEKiXbMcsnvJa2mHiq96IvKVjBKxGMTLua1k= Subject key identifier: AD:CF:29:36:0B:70:9A:5B:17:CF:50:BF:28:D5:04:BC:55:2D:F0:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C20AB67FED6985BE8299E400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.30.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b6:7f:ed:69:85:be:82:99:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=a46b9563-c1e3-4032-882f-ac496e3ea2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:29:d6:fd:64:fd:02:53:94:eb:95:c6:5d: eb:c2:fe:68:73:d1:12:fd:12:26:dd:a8:ff:6d:ba: 10:fc:56:fc:70:78:8f:82:da:31:91:db:0b:f0:fa: 71:ee:59:87:a9:53:48:63:6c:12:5a:4e:92:87:65: fb:b0:71:28:d3:8d:16:40:4f:fc:65:19:e1:e9:2b: b3:dc:f1:c3:46:21:9b:37:8b:5a:24:98:78:b0:27: 33:e0:f5:8f:5f:dc:7e:84:d9:16:81:48:f2:6f:29: 7e:d8:61:b4:8d:91:0c:24:ab:a0:4e:a8:2e:e5:6b: 46:76:7f:19:1a:df:b9:c6:05:75:23:98:2a:70:d6: 57:c3:d0:3f:bb:cc:d0:44:9a:16:e2:7e:d1:87:9d: 5a:57:b4:8d:81:fd:d3:c8:98:9a:7e:46:44:2e:af: b9:37:d5:bd:84:e2:d4:7f:6a:7e:9b:d2:ac:00:bc: 93:22:60:be:56:cc:4e:f8:74:14:5e:d1:b4:0b:94: 03:e8:36:6e:ae:bb:d2:46:6f:23:3c:42:b8:36:24: b3:3c:86:70:21:63:18:50:00:2e:b8:13:9c:58:19: a7:65:c3:10:35:c1:6e:20:8b:f3:7e:17:41:af:40: cd:a3:aa:c8:ca:51:18:cc:e7:f5:42:37:19:83:6d: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:29:36:0B:70:9A:5B:17:CF:50:BF:28:D5:04:BC:55:2D:F0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7d:c2:7c:0c:6e:f0:51:b5:08:37:01:ad:93:f4:6b:dc:f6: 22:14:f6:bc:36:f5:3e:ac:81:7e:25:01:12:af:3b:0d:11:e4: 7f:94:d9:e5:bb:3f:7d:d4:ca:fd:e6:2e:db:f1:35:86:af:41: 50:c9:26:ee:0e:20:ea:1e:f5:1c:ad:a3:36:5f:60:fa:7c:06: c6:48:17:25:27:b6:97:8b:80:80:fe:72:08:89:c8:a0:96:98: 20:39:d0:53:31:8f:e9:8a:3e:36:15:3a:9a:2f:77:fd:8e:56: 7a:2d:67:89:50:e7:31:c3:f7:1f:d0:b9:01:0d:59:15:87:f3: a6:3f:48:ec:93:7b:6e:bd:8b:cb:32:f5:18:ba:b1:42:6c:15: e1:ed:f4:f9:66:8a:bd:54:19:46:e4:15:9e:18:af:ff:f8:a3: 8d:52:fa:a2:da:66:26:12:12:b2:cf:0c:20:71:04:31:8e:16: ee:c0:7e:75:07:39:65:b1:8b:aa:56:40:7c:a6:1e:13:9d:a2: d5:95:bf:db:98:d4:9e:92:79:f5:68:ee:fa:6a:b2:eb:8f:7c: 56:02:b3:7d:e7:00:70:d3:5e:af:c9:62:6c:c2:39:47:81:5a: 31:09:8a:f8:e4:4b:85:ce:2d:c7:1e:63:74:22:1f:09:5f:fe: fe:d8:74:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCrZ/7WmFvoKZ5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YTQ2Yjk1NjMtYzFlMy00MDMyLTg4MmYtYWM0OTZlM2VhMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj50p1v1k/QJTlOuVxl3rwv5oc9ES/RIm3aj/ bboQ/Fb8cHiPgtoxkdsL8Ppx7lmHqVNIY2wSWk6Sh2X7sHEo040WQE/8ZRnh6Suz 3PHDRiGbN4taJJh4sCcz4PWPX9x+hNkWgUjybyl+2GG0jZEMJKugTqgu5WtGdn8Z Gt+5xgV1I5gqcNZXw9A/u8zQRJoW4n7Rh51aV7SNgf3TyJiafkZELq+5N9W9hOLU f2p+m9KsALyTImC+VsxO+HQUXtG0C5QD6DZurrvSRm8jPEK4NiSzPIZwIWMYUAAu uBOcWBmnZcMQNcFuIIvzfhdBr0DNo6rIylEYzOf1QjcZg23vAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3PKTYLcJpbF89QvyjVBLxVLfDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNkZTk0NDAtMmUyZS0z NDUzLWJiODYtNjBkYmJlZjg5MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ9wnwMbvBRtQg3Aa2T9Gvc9iIU9rw29T6sgX4lARKvOw0R5H+U2eW7 P33Uyv3mLtvxNYavQVDJJu4OIOoe9RytozZfYPp8BsZIFyUntpeLgID+cgiJyKCW mCA50FMxj+mKPjYVOpovd/2OVnotZ4lQ5zHD9x/QuQENWRWH86Y/SOyTe269i8sy 9Ri6sUJsFeHt9Plmir1UGUbkFZ4Yr//4o41S+qLaZiYSErLPDCBxBDGOFu7AfnUH OWWxi6pWQHymHhOdotWVv9uY1J6SefVo7vpqsuuPfFYCs33nAHDTXq/JYmzCOUeB WjEJivjkS4XOLcceY3QiHwlf/v7YdKc= -----END CERTIFICATE-----Generated at Sat May 10 04:45:38 2025 by rpki-client