$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa File: a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa (raw, json) Hash identifier: bfeuQ5w+1nB/RDE2TGwWhE7It77q9CWGOlfHFJre9Ko= Subject key identifier: C4:71:96:C2:B6:FF:8F:A0:9D:D7:C9:16:F9:12:4A:69:71:55:30:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA27C06E7CF39260B418C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa Signing time: Thu 20 Feb 2025 18:15:21 +0000 ROA not before: Thu 20 Feb 2025 18:15:21 +0000 ROA not after: Wed 21 May 2025 17:15:21 +0000 asID: 7029 IP address blocks: 71.28.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:27:c0:6e:7c:f3:92:60:b4:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:21 2025 GMT Not After : May 21 17:15:21 2025 GMT Subject: CN=6a13ef4a-4e95-4f58-ae22-f890b1b9f58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:c1:71:44:86:15:14:9d:04:69:25:5f:0e: 8d:8d:b6:81:4d:d9:78:89:81:a7:92:c9:f6:53:2c: d5:ef:73:ae:53:cf:8a:be:38:49:89:d1:82:33:15: bf:d5:74:79:07:22:e9:e0:82:de:4d:84:b7:67:36: 32:f2:e7:ed:66:82:94:f3:62:fe:7e:70:bc:1e:10: 02:10:93:a4:57:2d:e1:33:a9:7e:0f:87:0c:27:b6: c5:f9:19:67:a8:82:fb:0b:07:34:5a:18:9f:a8:26: df:26:0a:70:98:8b:51:fb:3e:6c:b7:31:2c:8e:45: 55:4d:79:e6:68:ec:38:b6:03:78:ac:0d:49:61:fd: 6e:30:54:c3:7c:74:c3:b1:31:c4:5a:47:d3:80:79: 29:41:d7:c4:61:b4:27:1d:21:72:30:82:e4:1b:65: d9:4c:5f:51:ef:71:44:07:a1:2a:bd:68:5c:4f:ad: 9a:b7:b7:2f:1b:a6:d6:13:b9:d0:a0:96:9a:4a:48: ea:37:f0:af:17:d1:aa:7c:e4:ce:d3:ba:cf:00:2f: 25:5f:b2:7f:6d:ad:0b:49:74:bd:39:0a:41:0a:a0: f5:d5:53:91:0d:58:ad:13:4f:03:8d:77:6e:83:6f: 75:b2:b9:7a:8f:48:f4:52:08:4d:8b:07:ba:43:54: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:71:96:C2:B6:FF:8F:A0:9D:D7:C9:16:F9:12:4A:69:71:55:30:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:94:38:1e:a2:38:5b:58:94:df:f1:81:f5:49:c0:ac:4c:22: 7e:8a:dd:b2:84:f8:49:50:22:34:61:d2:e8:ec:77:07:f2:1f: 14:bd:89:f4:f1:19:5d:42:04:53:92:b7:fa:84:58:26:cc:1b: d8:cf:e5:95:34:58:39:19:59:03:a7:30:ec:9e:0a:81:e3:51: 91:6d:12:d3:64:4b:66:df:8e:6c:65:ba:27:c5:b8:d8:23:60: 80:94:4b:1b:5a:13:ce:a8:7c:e3:46:b1:76:61:74:eb:37:b9: b2:df:e1:74:38:24:1a:46:d4:5c:63:39:ab:a6:bf:71:84:a7: a2:f5:7f:80:c5:fa:de:9b:d3:29:14:6b:42:2e:da:4e:e6:f6: b5:3c:5d:6f:0b:e6:0b:af:9b:09:51:5f:c0:88:49:7b:43:53: f2:7b:ac:a5:b6:ca:fd:18:30:0e:13:f4:c8:29:c8:8b:8a:fd: 53:62:12:dc:24:54:dd:e6:36:e8:77:8c:25:68:68:97:05:7a: 5f:b9:0c:5d:a2:eb:c5:74:12:13:b7:bd:15:44:6c:79:a0:19: 1c:e9:eb:98:37:75:58:af:0a:bc:d9:db:c6:ef:7c:95:b5:6b: 08:79:81:cd:08:08:8b:de:29:90:14:13:5d:92:1d:fb:ef:e7: bb:75:d0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqifAbnzzkmC0GMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUyMVoXDTI1MDUyMTE3MTUyMVowLzEtMCsGA1UEAxMk NmExM2VmNGEtNGU5NS00ZjU4LWFlMjItZjg5MGIxYjlmNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C/BcUSGFRSdBGklXw6NjbaBTdl4iYGnksn2 UyzV73OuU8+KvjhJidGCMxW/1XR5ByLp4ILeTYS3ZzYy8uftZoKU82L+fnC8HhAC EJOkVy3hM6l+D4cMJ7bF+RlnqIL7Cwc0WhifqCbfJgpwmItR+z5stzEsjkVVTXnm aOw4tgN4rA1JYf1uMFTDfHTDsTHEWkfTgHkpQdfEYbQnHSFyMILkG2XZTF9R73FE B6EqvWhcT62at7cvG6bWE7nQoJaaSkjqN/CvF9GqfOTO07rPAC8lX7J/ba0LSXS9 OQpBCqD11VORDVitE08DjXdug291srl6j0j0UghNiwe6Q1Sl3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRxlsK2/4+gndfJFvkSSmlxVTDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTMzMzRjOGYtM2EwMy0z N2RkLWFmODYtY2U0OGVjNWJmOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECUOB6iOFtYlN/xgfVJwKxMIn6K3bKE+ElQIjRh0ujsdwfyHxS9ifTx GV1CBFOSt/qEWCbMG9jP5ZU0WDkZWQOnMOyeCoHjUZFtEtNkS2bfjmxluifFuNgj YICUSxtaE86ofONGsXZhdOs3ubLf4XQ4JBpG1FxjOaumv3GEp6L1f4DF+t6b0ykU a0Iu2k7m9rU8XW8L5guvmwlRX8CISXtDU/J7rKW2yv0YMA4T9MgpyIuK/VNiEtwk VN3mNuh3jCVoaJcFel+5DF2i68V0EhO3vRVEbHmgGRzp65g3dVivCrzZ28bvfJW1 awh5gc0ICIveKZAUE12SHfvv57t10P0= -----END CERTIFICATE-----Generated at Thu May 8 16:44:50 2025 by rpki-client