$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa File: aa02ecbb-d6aa-3708-9e14-93c170317571.roa (raw, json) Hash identifier: 9COM76pYkdmgE1Tp19V627PBPmkOabCzcsPDRfrQ7BI= Subject key identifier: 5C:AC:2A:CA:67:10:E5:F7:05:FF:4D:70:0C:87:F7:6A:7E:11:22:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A11B5C33D6126CF5C5380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.28.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:b5:c3:3d:61:26:cf:5c:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=32fd7dd6-830a-4ec6-9f05-caabc9ed37f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:fc:35:d8:1b:9e:6c:7c:93:82:6a:67:e6: ab:bd:d5:51:89:f0:2e:44:1f:11:b6:d4:02:f8:5e: 76:22:14:db:48:23:26:9c:ed:cd:fd:b5:a2:92:6d: a4:b3:7f:47:c8:1f:0a:39:56:8c:fc:1f:25:32:ae: a0:80:5a:85:8e:5c:97:7b:57:1a:b3:a2:69:18:1c: 82:44:3a:a9:b7:8a:1a:c9:ca:62:59:c6:f1:c3:09: 3a:fb:29:fb:60:16:61:cd:8d:fe:c4:ff:80:88:57: 77:d8:14:56:91:6c:7b:8b:23:e5:db:b1:f1:1c:98: a8:23:e7:2a:ff:98:27:23:37:e8:0b:d7:79:36:1e: 0c:21:91:3d:29:bd:fa:ad:26:a9:a5:33:3f:3b:fb: 5e:da:a9:96:a0:a5:57:f6:b7:0a:14:67:a6:fc:e1: 15:26:91:e6:9c:74:b0:57:de:bc:b5:95:b9:d5:74: 5e:48:79:5c:34:a7:91:c9:af:c3:ff:a4:e6:59:f4: a8:3a:71:05:14:dc:7d:e5:c7:ac:bd:41:54:98:81: 08:9b:0c:08:25:71:82:81:50:6f:7f:48:f3:6b:16: 3e:ca:95:3c:a1:f8:9a:37:07:27:5c:66:72:f1:c0: 94:e7:f4:30:6d:92:c5:16:97:39:4b:09:be:2c:28: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AC:2A:CA:67:10:E5:F7:05:FF:4D:70:0C:87:F7:6A:7E:11:22:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa02ecbb-d6aa-3708-9e14-93c170317571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c1:7e:35:b8:68:88:b1:10:69:4e:53:9f:59:fc:c3:07:b6: 32:ca:f8:2d:47:e7:5e:d9:49:24:b2:99:e0:82:27:2f:de:fd: 31:a8:79:15:9a:3f:f9:fe:23:ee:a6:11:6c:ea:08:43:54:c0: d8:91:23:8a:d8:89:d9:47:4b:36:a7:7e:d4:aa:55:9f:42:34: 2e:a8:b0:fb:29:31:bd:e1:e5:7d:1c:b1:09:0b:c2:f5:f5:83: 79:0d:e0:06:54:fc:70:2b:c8:29:9b:e4:f1:07:51:a0:d7:f3: bd:c6:49:f8:d8:e3:af:44:fd:1f:92:a0:01:96:8a:43:af:55: ee:d0:04:00:72:f1:c1:fa:cd:fe:17:53:f6:41:8a:14:11:57: f1:11:d8:c5:e0:ff:21:af:e1:dd:49:b7:3b:ba:c4:38:29:0c: 4d:91:d8:48:02:9d:63:b9:fb:f5:f7:48:29:6a:89:a5:77:d7: 7c:10:23:a8:1e:b6:7d:f0:67:e6:e3:96:39:19:51:ad:81:65: cf:43:b2:ef:04:e1:fe:f6:6d:e6:96:fc:ce:83:ca:de:54:4b: fc:2b:a8:40:7b:36:35:9b:c6:d9:bc:13:84:c6:11:14:a9:3d: ae:78:81:be:87:32:36:4f:da:8a:7d:34:c4:b7:e9:72:89:a8: 1a:82:bc:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhG1wz1hJs9cU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MzJmZDdkZDYtODMwYS00ZWM2LTlmMDUtY2FhYmM5ZWQzN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTL8Ndgbnmx8k4JqZ+arvdVRifAuRB8RttQC +F52IhTbSCMmnO3N/bWikm2ks39HyB8KOVaM/B8lMq6ggFqFjlyXe1cas6JpGByC RDqpt4oaycpiWcbxwwk6+yn7YBZhzY3+xP+AiFd32BRWkWx7iyPl27HxHJioI+cq /5gnIzfoC9d5Nh4MIZE9Kb36rSappTM/O/te2qmWoKVX9rcKFGem/OEVJpHmnHSw V968tZW51XReSHlcNKeRya/D/6TmWfSoOnEFFNx95cesvUFUmIEImwwIJXGCgVBv f0jzaxY+ypU8ofiaNwcnXGZy8cCU5/QwbZLFFpc5Swm+LCg7oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFysKspnEOX3Bf9NcAyH92p+ESJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEwMmVjYmItZDZhYS0z NzA4LTllMTQtOTNjMTcwMzE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHBfjW4aIixEGlOU59Z/MMHtjLK+C1H517ZSSSymeCCJy/e/TGoeRWa P/n+I+6mEWzqCENUwNiRI4rYidlHSzanftSqVZ9CNC6osPspMb3h5X0csQkLwvX1 g3kN4AZU/HAryCmb5PEHUaDX873GSfjY469E/R+SoAGWikOvVe7QBABy8cH6zf4X U/ZBihQRV/ER2MXg/yGv4d1Jtzu6xDgpDE2R2EgCnWO5+/X3SClqiaV313wQI6ge tn3wZ+bjljkZUa2BZc9Dsu8E4f72beaW/M6Dyt5US/wrqEB7NjWbxtm8E4TGERSp Pa54gb6HMjZP2op9NMS36XKJqBqCvNA= -----END CERTIFICATE-----Generated at Sun May 11 11:54:52 2025 by rpki-client