$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa File: 4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa (raw, json) Hash identifier: KGoYTWvAlHEAAhF5hcI1ITaNSDM2wVIOv6iCgHJTBzo= Subject key identifier: 5B:E2:13:43:9A:B6:87:61:D8:76:76:68:30:AC:18:EB:CA:1A:FB:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1A8BF6E3917AE38932C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.28.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:8b:f6:e3:91:7a:e3:89:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=5b906f7a-1f24-4cf9-a9c5-c148d56a64f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:3b:f5:8b:45:02:f4:bb:17:49:44:98:49: f8:40:d2:e9:a2:6c:17:36:66:bc:be:a7:e1:cd:93: e3:21:2f:3f:7e:4d:c8:95:68:44:b3:22:0e:bc:74: 37:49:08:0d:73:34:bf:03:82:94:19:d3:d9:5f:f1: 7d:32:a6:62:b3:18:3d:3e:97:cc:28:8b:78:c3:0c: 1c:2c:6e:1a:bb:22:4f:8c:2a:0c:03:50:68:34:ea: 39:5e:45:65:38:60:28:9a:bc:68:af:be:8c:01:70: 6d:5e:cd:77:fc:8f:68:c3:a7:49:86:b4:80:16:02: 3f:3a:03:d2:fd:30:05:8a:47:57:ee:87:c6:c3:98: 92:32:4e:d7:f0:12:5a:65:f7:29:1f:4f:ad:e2:8f: 1b:74:79:4d:d2:fd:c7:9a:71:3f:c7:d9:11:2b:30: e8:fa:2b:48:be:db:c0:8e:f0:50:5d:94:d8:e2:01: 92:2d:db:d3:e8:01:d6:7f:f8:8f:7f:41:08:d2:5d: 92:c3:fe:1d:3d:4b:f0:64:e6:b1:ef:bb:45:95:0d: 6c:c9:51:8c:a0:fc:84:6e:97:25:dc:6c:cb:86:b4: 2b:dd:da:6d:d2:f2:6c:54:db:c1:aa:77:70:90:59: 3a:2d:e9:c0:b7:83:4e:62:7d:e6:b4:b1:79:03:46: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E2:13:43:9A:B6:87:61:D8:76:76:68:30:AC:18:EB:CA:1A:FB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:96:c0:7e:16:0c:e4:bf:be:83:8f:66:60:14:15:8c:20:38: 90:88:75:ce:0f:b1:53:7a:7b:df:dd:0c:04:1e:8b:e2:14:3e: fb:db:29:01:13:bf:50:f9:d7:d0:c8:ec:f6:9f:99:1c:32:cd: 92:59:61:d5:c9:74:54:10:c8:70:cd:35:70:e4:70:e2:6a:05: 6a:04:6f:cd:c7:6d:38:75:3e:a5:08:9d:1a:60:d2:f0:de:9a: df:47:c8:69:84:ce:c6:1a:ef:31:3e:78:26:72:7a:98:53:56: 0c:98:3e:64:74:45:43:8d:16:7e:b2:84:a5:cf:5d:f5:01:2a: 35:6a:26:47:95:fb:7d:14:5e:a6:d2:72:7e:df:bf:99:48:64: 1c:ec:f1:c6:f0:da:75:61:c6:58:3d:2f:58:f1:52:90:e2:f6: 96:9b:79:dc:15:e6:a5:3d:6f:bf:26:04:4e:2e:c5:d5:85:b0: 85:a2:49:f2:ee:06:b1:f7:85:68:47:15:af:35:34:f4:a0:11: ca:cf:45:8c:b3:04:03:df:b8:a3:09:8d:09:12:31:63:42:2c: 30:aa:61:b1:04:31:a6:f2:58:10:2c:c9:eb:73:00:5c:2f:15: 9a:5a:3d:51:97:af:20:ca:2f:7d:f4:bf:cf:a8:d0:0b:89:d3: fe:f0:fc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhqL9uOReuOJMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NWI5MDZmN2EtMWYyNC00Y2Y5LWE5YzUtYzE0OGQ1NmE2NGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/k79YtFAvS7F0lEmEn4QNLpomwXNma8vqfh zZPjIS8/fk3IlWhEsyIOvHQ3SQgNczS/A4KUGdPZX/F9MqZisxg9PpfMKIt4wwwc LG4auyJPjCoMA1BoNOo5XkVlOGAomrxor76MAXBtXs13/I9ow6dJhrSAFgI/OgPS /TAFikdX7ofGw5iSMk7X8BJaZfcpH0+t4o8bdHlN0v3HmnE/x9kRKzDo+itIvtvA jvBQXZTY4gGSLdvT6AHWf/iPf0EI0l2Sw/4dPUvwZOax77tFlQ1syVGMoPyEbpcl 3GzLhrQr3dpt0vJsVNvBqndwkFk6LenAt4NOYn3mtLF5A0agtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFviE0Oatodh2HZ2aDCsGOvKGvsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGYyNzNlN2MtMWU0My0z YmM0LWEwZTUtNTMwYjQ4ZjZkZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaWwH4WDOS/voOPZmAUFYwgOJCIdc4PsVN6e9/dDAQei+IUPvvbKQET v1D519DI7PafmRwyzZJZYdXJdFQQyHDNNXDkcOJqBWoEb83HbTh1PqUInRpg0vDe mt9HyGmEzsYa7zE+eCZyephTVgyYPmR0RUONFn6yhKXPXfUBKjVqJkeV+30UXqbS cn7fv5lIZBzs8cbw2nVhxlg9L1jxUpDi9pabedwV5qU9b78mBE4uxdWFsIWiSfLu BrH3hWhHFa81NPSgEcrPRYyzBAPfuKMJjQkSMWNCLDCqYbEEMabyWBAsyetzAFwv FZpaPVGXryDKL330v8+o0AuJ0/7w/FQ= -----END CERTIFICATE-----Generated at Fri May 9 20:47:36 2025 by rpki-client