$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa File: 7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa (raw, json) Hash identifier: OjL2zzWnVhSg8YxsVo9gZEBvM3JldJOGZR3bFF5u3p8= Subject key identifier: E9:1F:B7:58:BB:01:AB:FE:9D:64:E8:4F:49:76:A6:63:14:C5:AB:0F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F7FE97EE3DE840385380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.7.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f7:fe:97:ee:3d:e8:40:38:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2228ac90-a654-4251-bc02-0bbb76f2a868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:58:fc:5b:f5:33:8e:8d:42:5a:21:4c:78: 59:4e:df:35:44:f7:15:1d:9d:77:e8:ef:67:23:bd: f7:9a:8a:59:ec:74:f2:0d:63:5e:f6:18:dc:1e:7a: 58:71:ce:42:ad:23:c3:cd:a6:13:af:6f:df:1c:89: 6b:14:6d:da:a6:84:10:f4:82:87:bc:ba:f9:c5:4e: 07:19:b3:09:ad:df:e4:f5:fb:9a:3d:7a:3c:dd:02: 28:29:7e:25:7a:0a:50:c3:13:fa:84:04:04:83:3f: 98:ac:4d:67:f7:b4:51:30:47:de:28:2d:80:91:3b: 4e:d3:76:13:65:61:62:bc:32:bd:00:40:3b:0e:f4: 76:a7:5e:12:66:6a:67:94:a2:7c:09:31:05:a5:fe: b8:76:01:74:7c:84:b8:05:21:30:ef:cb:4b:d0:bc: 89:a6:bd:84:1b:a2:73:29:46:e8:8c:07:10:f8:28: 89:39:57:a6:e3:29:44:7f:87:d7:4e:e5:ae:02:05: 87:85:aa:08:c9:32:74:f7:f7:9f:ca:3d:38:be:0c: dc:c7:ce:5f:64:59:83:1e:8d:d5:56:33:62:62:cf: 86:ae:59:82:16:5f:de:4f:cc:5b:79:a4:3f:3f:b7: 38:e2:f2:a7:49:bb:f7:38:a9:1e:e9:e4:68:90:69: 85:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1F:B7:58:BB:01:AB:FE:9D:64:E8:4F:49:76:A6:63:14:C5:AB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7892fcd0-4501-3e1c-a4be-e01561b18ffa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:35:d6:f2:bc:24:22:85:01:de:06:f5:4d:f8:2c:f4:2c:2d: 84:c9:43:93:67:6a:f8:2d:dc:3b:8a:c3:d7:3d:0b:a6:ed:7e: 72:83:38:db:37:1e:65:e0:40:9f:e6:61:73:62:df:a8:94:8c: e6:21:1d:a7:79:43:c5:45:02:df:5e:f0:8b:3b:83:e5:50:02: 51:d0:14:20:3d:6f:80:b8:07:21:74:57:4c:33:ad:1d:71:2f: 03:23:23:05:4b:63:43:b1:ef:c1:86:c5:4a:19:33:2e:3e:3e: 2f:8f:76:fc:82:24:b5:d4:af:8a:7f:80:99:7c:23:54:87:f4: 02:39:41:a1:f7:7e:63:85:07:e2:fc:46:46:cc:f6:15:27:9f: 1d:4e:68:ce:0d:42:75:26:3f:f7:d6:99:0f:be:9e:c0:d0:95: 71:04:3d:99:74:a8:1d:c9:7b:1a:59:5d:57:4e:6b:f0:01:8b: 68:33:57:29:0c:d7:9a:dc:19:e0:11:46:aa:56:47:89:1a:75: 8b:02:65:1d:ac:6a:29:d8:6a:19:37:ab:c6:a4:52:23:19:e3: 87:05:59:68:52:9b:57:6f:a1:71:b9:b9:1a:6f:20:4c:e2:e0: 32:6c:8f:70:50:64:5f:d6:a1:da:3e:ff:d5:fd:77:2d:2f:57: 7a:3c:c4:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSff+l+496EA4U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjIyOGFjOTAtYTY1NC00MjUxLWJjMDItMGJiYjc2ZjJhODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglxY/Fv1M46NQlohTHhZTt81RPcVHZ136O9n I733mopZ7HTyDWNe9hjcHnpYcc5CrSPDzaYTr2/fHIlrFG3apoQQ9IKHvLr5xU4H GbMJrd/k9fuaPXo83QIoKX4legpQwxP6hAQEgz+YrE1n97RRMEfeKC2AkTtO03YT ZWFivDK9AEA7DvR2p14SZmpnlKJ8CTEFpf64dgF0fIS4BSEw78tL0LyJpr2EG6Jz KUbojAcQ+CiJOVem4ylEf4fXTuWuAgWHhaoIyTJ09/efyj04vgzcx85fZFmDHo3V VjNiYs+GrlmCFl/eT8xbeaQ/P7c44vKnSbv3OKke6eRokGmFxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkft1i7Aav+nWToT0l2pmMUxasPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5MmZjZDAtNDUwMS0z ZTFjLWE0YmUtZTAxNTYxYjE4ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw11vK8JCKFAd4G9U34LPQsLYTJQ5Nnavgt3DuKw9c9C6btfnKDONs3 HmXgQJ/mYXNi36iUjOYhHad5Q8VFAt9e8Is7g+VQAlHQFCA9b4C4ByF0V0wzrR1x LwMjIwVLY0Ox78GGxUoZMy4+Pi+PdvyCJLXUr4p/gJl8I1SH9AI5QaH3fmOFB+L8 RkbM9hUnnx1OaM4NQnUmP/fWmQ++nsDQlXEEPZl0qB3JexpZXVdOa/ABi2gzVykM 15rcGeARRqpWR4kadYsCZR2sainYahk3q8akUiMZ44cFWWhSm1dvoXG5uRpvIEzi 4DJsj3BQZF/Wodo+/9X9dy0vV3o8xG4= -----END CERTIFICATE-----Generated at Thu May 8 00:13:18 2025 by rpki-client