$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa File: 9313b4ea-b173-3272-af62-f83f52fcc22f.roa (raw, json) Hash identifier: sIqYOEOFTsMEAQSMszMxrxnIfeNvUUk8vzsCiRgkW88= Subject key identifier: 6D:BE:48:74:59:19:28:CE:9C:1A:29:C2:0D:D8:3F:CF:65:52:7D:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7A85EE95A53F1787E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.29.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:a8:5e:e9:5a:53:f1:78:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=29ebeb1f-b507-4300-a9af-6cba2e3be62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:8a:6a:80:87:b6:ea:5b:3e:45:bd:d7:7d: 01:16:55:bf:12:88:94:2e:6e:fc:b4:60:e4:cc:76: 49:b0:71:97:d3:39:11:2a:d0:63:4c:ac:b4:7f:5f: d6:7e:1b:01:c1:70:bb:95:ae:ad:79:1b:f0:86:2f: 3a:49:46:3e:f2:35:ce:2f:80:1a:b2:19:85:a6:c5: 62:16:0b:0e:c5:2d:b4:8c:18:40:e8:67:fc:94:29: 71:aa:d2:c5:c5:be:37:39:fd:c6:1f:55:57:80:61: 57:12:e6:18:08:97:18:4f:36:ca:6c:63:28:3f:45: e5:41:b8:60:a1:3e:fb:82:e4:d0:15:c0:d5:d0:c0: 0a:88:f0:1f:69:b2:7c:b9:a1:1b:02:ca:05:64:5a: 73:68:19:3d:57:61:6f:ed:fe:44:7b:dd:8b:15:51: fe:bd:80:e4:da:aa:6d:1a:24:6c:b2:c4:a0:cb:4a: c4:c0:e5:c7:59:c7:d2:60:f9:f1:d1:4d:50:31:ba: e5:e9:bc:7a:de:4b:9f:da:1d:96:61:d3:bb:c8:84: be:1b:0f:b7:14:03:df:86:8e:de:14:11:2f:c8:e4: 85:da:98:da:77:08:b9:09:e5:18:ef:4d:2f:4c:75: f1:e0:83:1a:fc:96:39:e6:1d:33:3c:f2:3b:33:44: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:48:74:59:19:28:CE:9C:1A:29:C2:0D:D8:3F:CF:65:52:7D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:89:12:82:f8:cb:67:7d:b1:6d:0b:e5:e8:57:07:1e:85:60: ad:68:a2:4b:3d:99:d2:b1:a4:61:24:30:d7:ea:29:2f:14:7a: 8e:de:0a:64:7d:e2:be:c5:7b:4d:3e:b6:bd:04:e4:0e:76:cb: 18:b7:31:44:89:7d:57:d5:97:9b:03:8a:b0:73:be:2d:b7:f0: 97:08:94:32:60:49:07:dd:0a:a1:52:40:e8:e8:71:eb:39:a5: 0d:de:9c:c7:ca:5b:b7:7c:ba:47:0b:e4:20:85:a7:39:39:79: 5b:7e:73:da:b4:a5:68:a5:8d:bc:9b:2b:27:66:30:78:84:d1: ae:cc:1c:47:af:c2:cb:0f:e2:ed:9d:e8:42:bd:d6:7f:71:54: c8:e4:e1:e5:8d:80:8f:5f:d7:d8:a9:4b:8f:24:bc:92:21:2e: ac:74:b8:8e:cf:3f:73:b6:6e:33:f5:43:94:7d:60:af:7e:39: 83:04:c9:b8:58:5f:36:a7:17:cd:92:9d:eb:53:54:bb:4d:3c: 25:12:ed:ff:4c:7a:3e:b0:23:50:28:02:63:dd:fa:0f:73:fa: 73:d5:5b:e7:b5:e1:c7:fc:de:b3:0d:ac:cb:a3:6e:d0:91:d4: d3:5a:6e:c3:e1:64:e0:91:e5:0d:f7:e5:89:25:5a:5c:08:0b: 46:0c:24:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6eoXulaU/F4fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MjllYmViMWYtYjUwNy00MzAwLWE5YWYtNmNiYTJlM2JlNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3iKaoCHtupbPkW9130BFlW/EoiULm78tGDk zHZJsHGX0zkRKtBjTKy0f1/WfhsBwXC7la6teRvwhi86SUY+8jXOL4AashmFpsVi FgsOxS20jBhA6Gf8lClxqtLFxb43Of3GH1VXgGFXEuYYCJcYTzbKbGMoP0XlQbhg oT77guTQFcDV0MAKiPAfabJ8uaEbAsoFZFpzaBk9V2Fv7f5Ee92LFVH+vYDk2qpt GiRsssSgy0rEwOXHWcfSYPnx0U1QMbrl6bx63kuf2h2WYdO7yIS+Gw+3FAPfho7e FBEvyOSF2pjadwi5CeUY700vTHXx4IMa/JY55h0zPPI7M0SoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2+SHRZGSjOnBopwg3YP89lUn06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxM2I0ZWEtYjE3My0z MjcyLWFmNjItZjgzZjUyZmNjMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqJEoL4y2d9sW0L5ehXBx6FYK1ooks9mdKxpGEkMNfqKS8Ueo7eCmR9 4r7Fe00+tr0E5A52yxi3MUSJfVfVl5sDirBzvi238JcIlDJgSQfdCqFSQOjoces5 pQ3enMfKW7d8ukcL5CCFpzk5eVt+c9q0pWiljbybKydmMHiE0a7MHEevwssP4u2d 6EK91n9xVMjk4eWNgI9f19ipS48kvJIhLqx0uI7PP3O2bjP1Q5R9YK9+OYMEybhY XzanF82SnetTVLtNPCUS7f9Mej6wI1AoAmPd+g9z+nPVW+e14cf83rMNrMujbtCR 1NNabsPhZOCR5Q335YklWlwIC0YMJMQ= -----END CERTIFICATE-----Generated at Sun May 11 21:58:31 2025 by rpki-client