$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa File: 555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa (raw, json) Hash identifier: pSxwnPdW3fkRc7X6e0c1Wev9wk4q1nV+UQdt7g87lYY= Subject key identifier: EE:37:8B:CD:B6:8F:1E:8C:73:B6:7B:EC:98:32:09:F7:4A:17:09:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FE0F263F80EA53B617C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.29.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fe:0f:26:3f:80:ea:53:b6:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=388f8647-21f9-4ccb-ac97-7023a377e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:54:0a:39:9d:b0:86:30:91:f9:8a:a1:bf: 6a:18:fa:b7:4c:59:a0:6d:98:b3:10:3c:0e:d7:5b: b0:f4:fa:e8:ba:eb:19:44:f8:d2:05:84:f7:04:24: 98:b7:0b:b9:0c:2a:a5:89:ad:f4:b7:08:52:23:58: 81:93:b4:4b:f1:c9:c0:0d:54:b3:41:60:e9:e4:22: a4:f3:e7:3d:c0:23:74:9c:84:3f:53:dd:65:4f:ae: 29:9a:00:7b:40:aa:f0:14:b5:ed:1f:c8:5c:19:bf: 23:c7:03:07:b4:e1:5e:9c:18:5f:c3:2a:7c:af:5a: 70:81:bc:ec:95:24:20:a9:0f:a1:87:66:a0:1f:69: 38:f5:92:2c:96:43:0e:6c:c7:e1:a9:12:e0:4a:42: db:41:5f:f7:0c:6b:88:53:79:1b:9f:bc:2d:24:67: a1:1c:fe:e4:ef:a6:e7:26:c0:90:ee:dd:b8:4f:94: d4:eb:7b:7d:85:36:43:cd:d4:4a:4a:35:d5:8a:fa: cb:1b:7b:09:37:9d:88:d9:d3:df:3c:0e:48:a6:2d: 7c:0b:4f:e4:b7:11:b9:88:a4:ad:1c:a8:34:01:e7: 4d:df:fc:06:34:13:6b:9e:47:30:da:c2:b7:8e:8c: 10:5d:54:e5:8e:eb:12:d5:bc:32:39:aa:c8:dd:1a: 73:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:37:8B:CD:B6:8F:1E:8C:73:B6:7B:EC:98:32:09:F7:4A:17:09:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:50:e2:28:c8:2e:62:83:10:1d:a6:db:8a:1d:df:71:33:0a: 14:5a:7d:63:43:7a:f7:ce:11:3e:a6:d2:d6:50:d4:65:d6:88: 32:7d:3d:f7:02:64:6c:65:ce:34:5c:3c:7b:85:d4:fb:29:bc: b9:80:a0:1c:87:65:3d:7e:2b:c7:60:aa:1e:57:9a:10:72:77: 67:11:e3:f4:87:20:ab:a0:d5:17:eb:13:a0:4e:b7:dd:ec:93: e7:db:9f:2e:6b:6c:5d:7d:69:b1:87:ba:6a:93:58:78:ce:aa: 6b:17:bd:c6:77:9c:13:4a:72:5b:96:25:ef:5a:aa:2c:5a:2b: 6c:7f:95:d1:23:59:62:d8:5c:e2:9a:63:b9:83:70:f3:9a:fb: 1f:46:b5:8d:6d:3d:35:19:ef:52:ea:1c:14:36:90:bd:89:a1: b5:eb:ea:de:af:58:3a:f3:cf:b4:c0:6b:49:ef:86:ba:02:f4: 4a:c6:14:2d:e9:59:f6:40:99:9c:51:d8:74:c0:84:58:34:74: a3:af:e6:f8:23:bd:11:5b:8f:c4:d8:58:3e:62:2d:f6:76:4c: 79:2b:5b:da:69:23:c0:3b:3a:05:44:92:54:e9:21:c4:60:96: d4:f6:eb:9f:43:a4:11:ee:d9:67:9e:08:0e:c2:39:78:24:30: 2c:fa:38:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf4PJj+A6lO2F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Mzg4Zjg2NDctMjFmOS00Y2NiLWFjOTctNzAyM2EzNzdlOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiRUCjmdsIYwkfmKob9qGPq3TFmgbZizEDwO 11uw9ProuusZRPjSBYT3BCSYtwu5DCqlia30twhSI1iBk7RL8cnADVSzQWDp5CKk 8+c9wCN0nIQ/U91lT64pmgB7QKrwFLXtH8hcGb8jxwMHtOFenBhfwyp8r1pwgbzs lSQgqQ+hh2agH2k49ZIslkMObMfhqRLgSkLbQV/3DGuIU3kbn7wtJGehHP7k76bn JsCQ7t24T5TU63t9hTZDzdRKSjXVivrLG3sJN52I2dPfPA5Ipi18C0/ktxG5iKSt HKg0AedN3/wGNBNrnkcw2sK3jowQXVTljusS1bwyOarI3RpzKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO43i822jx6Mc7Z77JgyCfdKFwnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU1ZmY5N2ItN2RiNS0z MGNjLThlMGMtZWE0MDJiNzc5ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZQ4ijILmKDEB2m24od33EzChRafWNDevfOET6m0tZQ1GXWiDJ9PfcC ZGxlzjRcPHuF1PspvLmAoByHZT1+K8dgqh5XmhByd2cR4/SHIKug1RfrE6BOt93s k+fbny5rbF19abGHumqTWHjOqmsXvcZ3nBNKcluWJe9aqixaK2x/ldEjWWLYXOKa Y7mDcPOa+x9GtY1tPTUZ71LqHBQ2kL2JobXr6t6vWDrzz7TAa0nvhroC9ErGFC3p WfZAmZxR2HTAhFg0dKOv5vgjvRFbj8TYWD5iLfZ2THkrW9ppI8A7OgVEklTpIcRg ltT2659DpBHu2WeeCA7COXgkMCz6OIY= -----END CERTIFICATE-----Generated at Sun May 11 00:43:57 2025 by rpki-client