$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa File: 736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json) Hash identifier: eKoRHW9orTtMpNsNfeC3IgVo8Xg9FCg5LPexvepzV4U= Subject key identifier: 8A:4D:6E:6A:4C:70:C8:1B:62:90:93:67:5D:80:58:F2:4C:33:36:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F8EA25A9005FDCCA3A060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.29.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8e:a2:5a:90:05:fd:cc:a3:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ce126796-b463-4391-b83d-b587b8631654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ce:31:a8:fb:e2:04:4d:4a:f7:e9:39:f9:2e: ae:32:0d:f6:df:48:e3:9f:a8:45:dc:11:13:f6:03: f6:d0:dd:cc:ba:2d:e2:57:ee:21:60:7c:2b:7a:8b: 78:6b:45:4c:60:ef:d0:c4:36:e5:a5:59:ba:eb:0d: a4:51:ba:57:bb:f8:5f:f9:11:74:53:8b:83:c2:08: 06:65:d0:94:73:61:23:9e:7a:58:1f:fe:9b:02:19: be:9e:ad:f1:a8:f3:19:68:ed:a4:8d:3e:97:63:fd: 3f:7b:95:35:af:12:79:5a:da:d6:3e:69:4e:41:b2: 89:17:2e:8c:f2:3e:a1:5b:4a:79:0e:2d:b0:65:4d: f9:9f:cb:67:78:d0:81:85:ac:db:b8:cf:1a:6f:1f: c5:b7:02:42:03:4a:71:11:5c:fa:a7:e5:70:a8:79: d3:df:8f:b5:55:06:46:c2:95:20:85:95:38:e9:ff: 56:4d:7c:31:20:3e:09:7d:af:14:37:e4:cd:80:15: 69:b1:4d:c5:7d:ef:fb:8e:25:6b:14:a0:ef:75:63: 1d:c8:e1:24:f1:a4:90:1b:1e:23:e5:52:23:03:63: 8c:62:68:bf:96:f2:a6:e1:c0:ae:36:ba:f7:62:ea: d9:32:4e:9c:db:6e:56:e5:01:c6:d8:a8:d7:58:ae: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4D:6E:6A:4C:70:C8:1B:62:90:93:67:5D:80:58:F2:4C:33:36:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:85:43:b1:98:e3:4d:07:a3:23:bb:37:a1:4e:d0:14:c7:d9: 7e:fe:2f:ed:64:fc:a1:73:46:0a:d2:c5:1b:1b:89:d4:b9:c3: d1:1a:85:e9:28:e9:7c:8b:87:24:8a:57:d4:22:df:16:09:65: 84:7b:33:d6:da:26:94:eb:81:dc:aa:3b:6c:71:e4:8a:68:91: d8:f3:0e:29:0d:68:ce:78:db:eb:df:be:ce:3d:33:92:a6:cc: 24:ae:6d:42:dc:f9:2c:8d:f5:33:38:fb:6f:05:c6:f8:8e:35: 2a:ed:75:49:f8:da:40:43:8d:51:75:87:64:35:1a:e0:4f:61: 26:ef:16:9d:69:e4:65:47:5c:24:cc:76:f3:1d:66:fe:ab:2c: 59:77:a6:b1:51:0d:d4:9e:0b:c5:0f:e4:15:d4:e6:cd:2a:7b: ea:4f:37:94:2f:8c:ce:66:a4:a3:b2:bb:cc:5b:65:fd:db:48: 92:15:a4:ff:f5:2e:2e:f1:e1:28:57:20:32:6c:bf:e9:2d:f6: 5f:62:36:38:95:14:21:be:cd:97:5c:2d:b9:14:f6:f5:c6:cf: 0c:b3:94:a8:e9:4d:da:3d:82:1e:74:88:19:a3:2e:27:c0:1f: 23:5a:ae:99:13:1e:99:f7:fe:c6:cc:32:46:58:6a:e1:ca:d8: 17:e8:49:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P46iWpAF/cyjoGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2UxMjY3OTYtYjQ2My00MzkxLWI4M2QtYjU4N2I4NjMxNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn84xqPviBE1K9+k5+S6uMg3230jjn6hF3BET 9gP20N3Mui3iV+4hYHwreot4a0VMYO/QxDblpVm66w2kUbpXu/hf+RF0U4uDwggG ZdCUc2EjnnpYH/6bAhm+nq3xqPMZaO2kjT6XY/0/e5U1rxJ5WtrWPmlOQbKJFy6M 8j6hW0p5Di2wZU35n8tneNCBhazbuM8abx/FtwJCA0pxEVz6p+VwqHnT34+1VQZG wpUghZU46f9WTXwxID4Jfa8UN+TNgBVpsU3Ffe/7jiVrFKDvdWMdyOEk8aSQGx4j 5VIjA2OMYmi/lvKm4cCuNrr3YurZMk6c225W5QHG2KjXWK4UPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpNbmpMcMgbYpCTZ12AWPJMMzYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2ZGQzZGEtYjdmYy0z MzJiLWE2NGItOTY3MGU4NzA3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOFQ7GY400HoyO7N6FO0BTH2X7+L+1k/KFzRgrSxRsbidS5w9Eaheko 6XyLhySKV9Qi3xYJZYR7M9baJpTrgdyqO2xx5IpokdjzDikNaM542+vfvs49M5Km zCSubULc+SyN9TM4+28FxviONSrtdUn42kBDjVF1h2Q1GuBPYSbvFp1p5GVHXCTM dvMdZv6rLFl3prFRDdSeC8UP5BXU5s0qe+pPN5QvjM5mpKOyu8xbZf3bSJIVpP/1 Li7x4ShXIDJsv+kt9l9iNjiVFCG+zZdcLbkU9vXGzwyzlKjpTdo9gh50iBmjLifA HyNarpkTHpn3/sbMMkZYauHK2BfoSY4= -----END CERTIFICATE-----Generated at Fri May 9 18:07:20 2025 by rpki-client