$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa File: 6763f7e4-2af7-3bb9-9314-87a2549315db.roa (raw, json) Hash identifier: GoLbwi4IQiLHVMlSiZRxQ1WFL5PTlw45bI+YsXbswes= Subject key identifier: 92:BE:0A:90:E0:88:5F:F3:D8:2B:41:0A:AB:14:D1:EE:76:91:04:29 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7CC27C27B59B8A3C380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.31.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:cc:27:c2:7b:59:b8:a3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=1e13ad66-33ea-4e37-95ed-cadfb019593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:92:c0:92:2e:8d:78:b3:ce:df:08:78:db: 6c:da:53:f9:1f:2c:a9:91:7a:7f:c2:51:95:fc:75: f1:47:38:1e:1c:6b:0e:57:b5:01:6c:55:8f:9d:ce: 20:4f:94:7e:85:a6:b1:01:d4:90:6c:5c:63:f8:5c: 8d:4e:36:57:73:5c:3a:37:f2:f4:5e:b0:79:f6:d0: ae:e9:b8:a9:f0:03:ea:eb:78:2a:b8:a8:54:1d:ed: a5:65:48:87:e2:73:c7:88:fd:61:18:4b:42:75:ac: 6f:e9:ab:2a:da:12:04:60:60:29:37:8a:6e:bf:3a: a5:dc:60:51:64:2a:b7:a5:89:3d:0a:93:dc:95:26: 76:c6:bb:cf:6c:23:97:6c:19:9c:05:e5:39:c1:6b: a7:5d:d1:a5:fe:ca:9b:d7:42:73:ac:14:52:42:e5: 04:4c:a1:91:78:27:e5:70:95:f1:94:6d:99:64:8e: 24:90:43:b3:6a:a6:56:e7:d1:f4:75:f9:03:b7:a0: e7:56:a9:50:a9:52:90:8f:7f:b0:62:e8:e6:2f:af: ee:9d:bc:d7:fe:f3:c7:86:66:d2:19:88:89:84:9d: ae:8a:c9:1b:35:df:1f:94:0d:4b:05:21:02:83:98: 7c:68:15:d3:f3:62:ce:84:df:36:98:12:d8:52:a1: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:0A:90:E0:88:5F:F3:D8:2B:41:0A:AB:14:D1:EE:76:91:04:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1c:a7:f4:db:2e:d8:da:0d:02:37:f5:7f:a4:25:eb:77:1e: b6:07:de:91:88:9b:14:64:e4:dd:ad:12:c2:2b:db:1e:00:47: 4c:1a:05:ea:14:6c:1b:b0:8a:69:27:20:b9:6c:da:6c:a8:cc: 72:95:93:73:13:f3:da:aa:d0:0c:f4:cf:52:c8:64:a8:35:19: f2:51:a8:da:6f:93:8b:f5:ee:93:50:99:1a:65:86:80:7d:d1: 11:e9:a8:75:64:ed:ec:84:56:c9:47:ea:22:34:b1:80:d9:29: f7:61:bb:fe:fb:49:36:9c:8b:aa:5f:5a:eb:ff:88:fc:44:88: a1:52:bf:c6:3a:24:7b:ea:0f:4a:36:d0:77:bd:8b:bd:71:bf: 91:e1:12:08:ef:eb:c8:3b:cc:f4:f4:86:2d:32:29:31:6c:2a: ad:d4:e5:f7:3a:78:25:0d:89:ca:94:c9:52:fc:c4:e1:f9:68: af:01:a4:1e:4d:b3:5e:46:25:53:ea:73:86:56:66:4f:25:03: 12:3e:be:d7:05:58:7c:94:8d:16:ee:ac:ab:fe:1c:e3:05:88: d0:9d:22:f3:dd:59:3e:43:2f:20:54:ff:d8:24:78:df:a9:e7: e6:17:18:c9:9e:a0:a0:97:18:e9:2a:95:12:df:42:51:f1:f8: 23:de:ff:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6fMJ8J7Wbijw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MWUxM2FkNjYtMzNlYS00ZTM3LTk1ZWQtY2FkZmIwMTk1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxumSwJIujXizzt8IeNts2lP5HyypkXp/wlGV /HXxRzgeHGsOV7UBbFWPnc4gT5R+haaxAdSQbFxj+FyNTjZXc1w6N/L0XrB59tCu 6bip8APq63gquKhUHe2lZUiH4nPHiP1hGEtCdaxv6asq2hIEYGApN4puvzql3GBR ZCq3pYk9CpPclSZ2xrvPbCOXbBmcBeU5wWunXdGl/sqb10JzrBRSQuUETKGReCfl cJXxlG2ZZI4kkEOzaqZW59H0dfkDt6DnVqlQqVKQj3+wYujmL6/unbzX/vPHhmbS GYiJhJ2uiskbNd8flA1LBSECg5h8aBXT82LOhN82mBLYUqFs1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK+CpDgiF/z2CtBCqsU0e52kQQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc2M2Y3ZTQtMmFmNy0z YmI5LTkzMTQtODdhMjU0OTMxNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYcp/TbLtjaDQI39X+kJet3HrYH3pGImxRk5N2tEsIr2x4AR0waBeoU bBuwimknILls2myozHKVk3MT89qq0Az0z1LIZKg1GfJRqNpvk4v17pNQmRplhoB9 0RHpqHVk7eyEVslH6iI0sYDZKfdhu/77STaci6pfWuv/iPxEiKFSv8Y6JHvqD0o2 0He9i71xv5HhEgjv68g7zPT0hi0yKTFsKq3U5fc6eCUNicqUyVL8xOH5aK8BpB5N s15GJVPqc4ZWZk8lAxI+vtcFWHyUjRburKv+HOMFiNCdIvPdWT5DLyBU/9gkeN+p 5+YXGMmeoKCXGOkqlRLfQlHx+CPe/wo= -----END CERTIFICATE-----Generated at Sat May 10 13:59:24 2025 by rpki-client