$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa File: aca75f1b-5e63-368c-910b-d08a89644fb3.roa (raw, json) Hash identifier: Z70iAtladfsI2kny38WdKRHEirJnCNdZSkzeAqA4Yuk= Subject key identifier: 85:60:F7:34:E5:0D:5F:D6:9F:54:51:E9:B7:30:AD:A9:69:5A:C0:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0A95D92EFB6540C26380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0a:95:d9:2e:fb:65:40:c2:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=ace9b4b7-50b8-48f9-89e1-eeef948d66f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:be:c2:b6:c4:ce:8e:7d:4a:6a:e5:bc:2d: b5:19:cb:1d:27:3f:c6:cf:de:90:3e:7b:ea:53:a2: f6:bc:3f:f8:b5:ed:68:80:11:8e:12:86:0f:48:49: dd:2e:93:8c:e2:b4:2e:2f:9b:fd:35:d2:65:bb:6a: 4a:79:a2:88:82:26:0d:6a:d0:33:60:6f:fe:39:64: 93:ab:2c:b8:e4:00:11:bc:bc:f0:ee:a4:29:2e:0a: 89:a7:2c:3a:21:bc:8a:bd:c4:5d:97:e0:14:90:da: 82:57:71:9d:88:b4:6c:a3:d1:b7:ef:fb:cf:47:1a: 8a:a4:5f:4b:66:7b:4e:6f:58:c8:5f:7e:68:71:ce: d6:5e:9a:4a:c4:03:43:39:d7:19:80:a5:dc:a5:2e: 97:84:4e:74:37:c0:7a:15:d1:42:36:5e:d6:4f:d4: a3:cb:34:b0:6e:ea:db:6a:36:7c:7b:75:19:bc:98: da:26:46:c2:49:6b:45:62:87:32:85:5c:ea:42:f1: 72:90:4a:18:b8:63:ab:52:6b:2a:d9:11:2b:33:31: a7:a8:51:47:06:00:f0:4c:30:b3:29:00:6b:9b:15: 28:90:ce:cf:93:d2:4c:e6:f9:71:06:80:21:35:1a: 8d:f6:ce:23:4c:10:ed:7d:3d:7b:65:0b:ac:29:26: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:60:F7:34:E5:0D:5F:D6:9F:54:51:E9:B7:30:AD:A9:69:5A:C0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e9:26:5b:cf:72:85:d0:a9:b5:5e:cf:b7:d7:d8:79:85:5c: d4:4c:47:32:1f:fa:71:30:58:42:f8:c3:67:c1:a6:73:16:37: d2:32:32:36:c2:c4:ac:da:ec:ff:d5:ff:33:ea:01:e7:7d:c0: fc:70:62:a6:ad:f7:a8:f5:44:27:10:f1:f3:2f:cb:5c:ef:23: 43:ea:31:0d:b1:14:e1:d0:9a:78:fb:d2:d4:a0:0c:b9:7c:08: e7:8f:7e:13:aa:75:8f:0e:d6:c9:b4:95:f3:86:fe:a7:13:16: f4:e9:62:34:d1:b4:34:e6:25:42:3a:ab:46:68:49:fb:5b:43: ab:8b:1f:e8:70:e3:72:9f:7c:dd:48:13:7d:41:0c:35:8b:85: 3d:5e:91:65:5c:e2:41:1e:54:27:8f:f5:d5:31:6b:72:76:93: 82:a5:2e:11:41:0d:82:d4:6d:84:8d:f2:3a:d4:d3:4f:ba:e8: 6c:b2:13:7a:05:cf:3b:10:32:08:c7:ea:6c:e1:20:59:8e:ca: 04:c2:1f:e2:06:c5:9e:85:a6:36:8d:60:eb:98:df:4b:83:86: aa:8a:0a:ac:b3:e3:ac:79:a9:90:4e:80:cf:07:4b:65:32:cc: ed:d6:30:c8:07:5e:29:b4:f6:88:ca:c9:80:1b:4f:dc:22:1d: d1:05:b9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgqV2S77ZUDCY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YWNlOWI0YjctNTBiOC00OGY5LTg5ZTEtZWVlZjk0OGQ2NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMO+wrbEzo59SmrlvC21GcsdJz/Gz96QPnvq U6L2vD/4te1ogBGOEoYPSEndLpOM4rQuL5v9NdJlu2pKeaKIgiYNatAzYG/+OWST qyy45AARvLzw7qQpLgqJpyw6IbyKvcRdl+AUkNqCV3GdiLRso9G37/vPRxqKpF9L ZntOb1jIX35occ7WXppKxANDOdcZgKXcpS6XhE50N8B6FdFCNl7WT9SjyzSwburb ajZ8e3UZvJjaJkbCSWtFYocyhVzqQvFykEoYuGOrUmsq2RErMzGnqFFHBgDwTDCz KQBrmxUokM7Pk9JM5vlxBoAhNRqN9s4jTBDtfT17ZQusKSY6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVg9zTlDV/Wn1RR6bcwralpWsB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNhNzVmMWItNWU2My0z NjhjLTkxMGItZDA4YTg5NjQ0ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzpJlvPcoXQqbVez7fX2HmFXNRMRzIf+nEwWEL4w2fBpnMWN9IyMjbC xKza7P/V/zPqAed9wPxwYqat96j1RCcQ8fMvy1zvI0PqMQ2xFOHQmnj70tSgDLl8 COePfhOqdY8O1sm0lfOG/qcTFvTpYjTRtDTmJUI6q0ZoSftbQ6uLH+hw43KffN1I E31BDDWLhT1ekWVc4kEeVCeP9dUxa3J2k4KlLhFBDYLUbYSN8jrU00+66GyyE3oF zzsQMgjH6mzhIFmOygTCH+IGxZ6FpjaNYOuY30uDhqqKCqyz46x5qZBOgM8HS2Uy zO3WMMgHXim09ojKyYAbT9wiHdEFuek= -----END CERTIFICATE-----Generated at Fri May 9 07:43:27 2025 by rpki-client