$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa File: a9dceb2f-ad54-37d4-84bd-1ae263451441.roa (raw, json) Hash identifier: ijSOGBgcBUAZjk83ZEiBL1u13s7siLmeR51wnkgKZrE= Subject key identifier: 0B:16:D5:E5:2B:F7:19:D7:55:F1:74:D8:C2:15:31:F6:76:DB:39:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A12C55EBD1CF4698F4A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.31.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:12:c5:5e:bd:1c:f4:69:8f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=331e5c6f-8614-4fcb-8524-c24d11da3401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:06:27:9a:18:ce:7f:02:09:cc:3f:05:34: 4a:c0:5c:d7:2a:7c:c8:26:cc:b1:54:1a:a4:57:f7: d4:3d:f9:1d:f2:2b:84:17:db:5d:08:67:fe:c3:19: a8:5e:9c:4b:32:30:7a:11:69:de:5d:bc:72:aa:ce: d3:34:58:3f:a7:ce:9e:c3:90:ea:48:49:61:1a:92: 0b:97:12:22:19:a0:8e:85:1c:85:4d:14:62:b7:03: ff:20:dd:b6:b7:0a:f4:73:d0:ad:3c:51:6b:98:2b: 94:58:f8:06:32:6c:1f:f8:31:67:5c:1a:e5:07:7d: 1b:9a:a1:86:48:d7:e6:ff:71:fc:85:14:a1:b6:6a: 3c:61:69:4e:14:1c:13:b4:14:87:5d:4d:4d:72:c4: 6f:6c:6c:58:62:15:f3:e6:9c:37:ba:93:21:24:69: 62:4f:84:bb:51:bd:75:f2:54:5b:a5:75:41:2e:01: c2:77:b3:e9:aa:6a:ab:c1:f1:2b:77:ca:02:4a:cb: 11:4f:86:96:e5:6b:63:52:83:f6:91:61:0e:61:86: 29:ee:30:b1:cd:e2:f0:30:86:5e:52:89:88:dd:ec: d5:bf:45:4d:a9:0a:60:8b:07:ea:87:64:7e:77:e5: a0:90:d1:76:05:e4:f6:60:95:c0:1b:66:4c:f0:a1: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:16:D5:E5:2B:F7:19:D7:55:F1:74:D8:C2:15:31:F6:76:DB:39:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d0:3e:e0:4b:17:bd:de:21:ab:97:4c:fe:dd:fa:ba:fa:c4: 28:7d:4b:b4:99:c9:59:15:d2:5b:02:5e:49:7f:12:a8:99:03: dd:6f:82:0d:d9:bf:1a:f2:3c:71:fc:7b:dc:00:a2:37:34:39: 1a:80:e5:f3:8b:40:27:e2:62:4d:02:06:a6:31:21:81:fd:9c: 72:ca:7a:c8:ee:39:77:37:e4:dd:2d:65:41:ad:0a:7d:24:3a: 19:18:7e:7d:79:10:88:37:94:8c:cb:45:04:fd:46:fc:48:85: 07:23:33:77:fb:c1:74:ee:9d:a2:3a:6b:0d:46:ce:4f:ef:5a: 80:da:df:de:4b:e3:37:07:8e:06:df:b6:66:38:8d:7f:40:d9: 42:a3:ac:f5:59:1b:a8:7a:9c:2e:9b:54:f9:34:6f:da:1e:b4: bd:1c:ae:12:9f:31:cc:8a:24:a9:c9:ba:5d:45:b9:5a:b8:38: ca:17:02:8b:29:06:8e:c0:34:b0:ae:a7:8a:5e:c0:8c:17:77: ea:31:4a:e8:5b:9a:57:9c:6e:d4:d9:7e:2d:67:1d:ea:07:86: b6:12:9d:32:db:74:59:81:80:72:1b:74:5f:92:cb:17:10:f0: f5:13:60:fa:4c:9e:2d:2d:14:47:08:c1:e8:fa:2a:f6:dc:ff: 75:46:c8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhLFXr0c9GmPSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MzMxZTVjNmYtODYxNC00ZmNiLTg1MjQtYzI0ZDExZGEzNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVYGJ5oYzn8CCcw/BTRKwFzXKnzIJsyxVBqk V/fUPfkd8iuEF9tdCGf+wxmoXpxLMjB6EWneXbxyqs7TNFg/p86ew5DqSElhGpIL lxIiGaCOhRyFTRRitwP/IN22twr0c9CtPFFrmCuUWPgGMmwf+DFnXBrlB30bmqGG SNfm/3H8hRShtmo8YWlOFBwTtBSHXU1NcsRvbGxYYhXz5pw3upMhJGliT4S7Ub11 8lRbpXVBLgHCd7PpqmqrwfErd8oCSssRT4aW5WtjUoP2kWEOYYYp7jCxzeLwMIZe UomI3ezVv0VNqQpgiwfqh2R+d+WgkNF2BeT2YJXAG2ZM8KE1SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsW1eUr9xnXVfF02MIVMfZ22zliMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlkY2ViMmYtYWQ1NC0z N2Q0LTg0YmQtMWFlMjYzNDUxNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITQPuBLF73eIauXTP7d+rr6xCh9S7SZyVkV0lsCXkl/EqiZA91vgg3Z vxryPHH8e9wAojc0ORqA5fOLQCfiYk0CBqYxIYH9nHLKesjuOXc35N0tZUGtCn0k OhkYfn15EIg3lIzLRQT9RvxIhQcjM3f7wXTunaI6aw1Gzk/vWoDa395L4zcHjgbf tmY4jX9A2UKjrPVZG6h6nC6bVPk0b9oetL0crhKfMcyKJKnJul1FuVq4OMoXAosp Bo7ANLCup4pewIwXd+oxSuhbmlecbtTZfi1nHeoHhrYSnTLbdFmBgHIbdF+SyxcQ 8PUTYPpMni0tFEcIwej6Kvbc/3VGyPg= -----END CERTIFICATE-----Generated at Sun May 11 15:42:50 2025 by rpki-client