$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa File: 81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa (raw, json) Hash identifier: PTygsMPYEJCkxVcQ2A4+f28tHG1P+8aDUHYwPTMR1Kk= Subject key identifier: 8D:59:71:C8:45:D5:13:70:12:1B:59:45:6C:85:D9:EF:7E:32:15:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849568EBB90BDCAB3BA74A3B720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7029 IP address blocks: 71.29.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:bb:90:bd:ca:b3:ba:74:a3:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=f953aa36-6406-45b6-a6ab-36699e1ef05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5a:ba:0e:99:e0:78:32:4d:7b:2e:ee:ec:0a: 32:0f:e1:44:2b:d2:fa:48:f8:ed:f2:14:02:46:6a: 36:40:29:bf:e8:78:bd:47:96:41:27:6a:a8:b3:a7: 60:f7:d9:38:2f:a7:cb:83:25:b1:68:3a:bd:64:25: 9a:5d:05:bc:e4:ea:dc:18:c8:18:af:fc:7f:f1:52: 40:49:47:a1:19:7d:9f:9c:1c:96:d3:e4:ff:a5:b5: 26:39:7c:23:ca:52:15:e1:03:64:56:43:ff:cf:a0: 07:f5:2d:26:3e:c3:a2:55:e2:8c:f2:f4:19:f2:ef: 4d:06:02:32:3b:6b:c9:28:d0:6f:67:40:a9:01:83: d3:86:0d:f2:77:03:1e:ab:c8:4b:7f:e6:28:88:5e: 19:fe:11:f9:26:ec:9c:2c:76:d6:68:5a:a2:74:52: 0d:c1:eb:42:f1:3c:a6:22:cc:c2:ed:ac:b8:73:aa: c1:b5:ec:c7:7d:72:ae:ce:72:03:84:b3:79:f7:7a: ca:32:64:c7:33:e3:1a:62:31:74:f8:a1:0d:9a:03: ef:9e:93:64:6d:e2:c2:48:19:7f:0c:5e:58:37:da: e8:e7:c0:1b:7d:d1:fa:14:77:ae:56:da:94:7b:bd: eb:ab:62:41:09:96:94:09:87:92:dc:7f:f8:b9:47: a1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:71:C8:45:D5:13:70:12:1B:59:45:6C:85:D9:EF:7E:32:15:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e37e8c-0fa4-33e1-8d9c-1f054c80e41f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e7:bd:57:a5:68:9a:d5:ea:12:d7:82:62:38:7b:91:d7:fc: 3b:65:53:40:11:ac:ac:77:c1:bb:42:1c:2e:2c:df:78:62:aa: 07:37:84:33:92:0e:73:44:64:f5:db:d2:75:7f:6f:50:ee:22: c3:b3:b4:d5:84:83:6c:29:90:fe:50:c5:41:5a:72:98:76:ef: 35:7b:64:5d:b5:8c:b1:f0:42:5c:07:ca:c4:da:e6:1d:c7:25: 1a:15:8d:ac:a5:1b:06:24:37:63:65:1b:46:45:3b:10:fb:60: ba:49:b2:c6:57:ba:60:b5:37:07:e6:e5:ae:20:d4:c9:b0:81: f1:85:b4:ad:b7:8d:e6:4a:b2:f2:52:a2:1f:a1:5f:9e:8c:19: 3b:2b:e9:6a:fc:cc:a5:c9:7d:3e:d7:59:04:20:c6:d9:4b:47: 54:78:b3:3b:57:66:3d:81:39:54:84:00:6e:3c:be:16:b2:5e: 2a:6f:ca:df:cc:50:28:95:a1:0b:e9:ab:d1:e7:6d:2b:f5:5b: ac:86:53:90:41:35:a2:52:af:60:5a:81:be:80:96:2b:95:d5: 4b:84:f9:df:f1:19:cc:ca:0f:2d:a7:c3:fa:90:be:ee:9d:c7: af:6c:4c:4e:8f:76:e9:bd:3e:32:93:23:da:a2:ed:c6:60:6c: 33:1e:d7:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjruQvcqzunSjtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk Zjk1M2FhMzYtNjQwNi00NWI2LWE2YWItMzY2OTllMWVmMDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1q6DpngeDJNey7u7AoyD+FEK9L6SPjt8hQC Rmo2QCm/6Hi9R5ZBJ2qos6dg99k4L6fLgyWxaDq9ZCWaXQW85OrcGMgYr/x/8VJA SUehGX2fnByW0+T/pbUmOXwjylIV4QNkVkP/z6AH9S0mPsOiVeKM8vQZ8u9NBgIy O2vJKNBvZ0CpAYPThg3ydwMeq8hLf+YoiF4Z/hH5JuycLHbWaFqidFINwetC8Tym IszC7ay4c6rBtezHfXKuznIDhLN593rKMmTHM+MaYjF0+KENmgPvnpNkbeLCSBl/ DF5YN9ro58AbfdH6FHeuVtqUe73rq2JBCZaUCYeS3H/4uUehmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1ZcchF1RNwEhtZRWyF2e9+MhWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODFlMzdlOGMtMGZhNC0z M2UxLThkOWMtMWYwNTRjODBlNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDnvVelaJrV6hLXgmI4e5HX/DtlU0ARrKx3wbtCHC4s33hiqgc3hDOS DnNEZPXb0nV/b1DuIsOztNWEg2wpkP5QxUFacph27zV7ZF21jLHwQlwHysTa5h3H JRoVjaylGwYkN2NlG0ZFOxD7YLpJssZXumC1Nwfm5a4g1MmwgfGFtK23jeZKsvJS oh+hX56MGTsr6Wr8zKXJfT7XWQQgxtlLR1R4sztXZj2BOVSEAG48vhayXipvyt/M UCiVoQvpq9HnbSv1W6yGU5BBNaJSr2Bagb6AliuV1UuE+d/xGczKDy2nw/qQvu6d x69sTE6Pdum9PjKTI9qi7cZgbDMe108= -----END CERTIFICATE-----Generated at Tue May 6 22:33:18 2025 by rpki-client