$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa File: c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa (raw, json) Hash identifier: GL3v8WTToQhV5dCblfWw2QSsEkE+zsP9x2EmG9FLys0= Subject key identifier: 45:9B:1B:AC:71:DD:E3:26:2B:D0:3A:9A:41:91:C7:FA:E5:AE:7D:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7B454BF6EE6071B2D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.29.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:b4:54:bf:6e:e6:07:1b:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=ed5ac6eb-41e2-45b1-ac2c-abfbc7a1ec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:17:83:92:dd:80:70:09:02:fe:a1:62:b7: 6e:c0:2d:2f:c5:9a:14:db:4b:a9:96:31:c9:8d:e7: 2d:ba:76:02:ed:fb:da:38:f1:68:46:8f:bd:1f:34: 0c:5b:d0:86:c0:f1:27:d9:81:53:dd:74:42:55:d6: d3:e4:ed:c4:f5:56:57:6c:8d:58:ab:be:ca:81:04: cc:23:fa:18:79:09:e9:a7:c4:80:de:c6:06:36:ba: 49:21:62:c6:4d:72:79:54:47:95:0a:8d:7e:bd:9e: a9:94:74:f6:bf:2f:e8:22:20:72:80:0e:b4:4c:0f: e4:d7:7d:ff:11:1e:90:62:3c:a1:e8:87:29:21:c4: 09:8a:d7:10:d0:52:d8:7a:0e:f2:5e:ae:00:c8:4a: f1:7c:3a:ff:3e:15:7b:84:75:a3:4c:ca:e4:2e:c4: 59:7a:1f:0f:63:c5:62:1f:29:27:e4:ac:9a:f9:3a: 14:de:f0:af:46:1a:39:55:87:cb:d2:02:46:87:1d: 3c:86:50:af:4d:2e:7f:9a:a6:89:e4:f6:21:95:32: db:03:7f:cb:fd:69:26:dc:c4:89:d4:07:31:78:c0: 25:3a:f0:87:0b:e5:56:b5:28:20:e9:54:5f:23:bc: e5:47:38:b7:c5:e8:47:38:d1:52:3e:f3:9a:8d:dc: 36:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:1B:AC:71:DD:E3:26:2B:D0:3A:9A:41:91:C7:FA:E5:AE:7D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1ea0d0a-8954-346e-8fba-aee5c0610c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ca:3c:13:9b:c2:d3:60:59:8c:a6:5c:9c:2e:5b:c2:a3:2b: ce:72:72:42:44:8c:e3:f7:a0:50:0b:1e:45:b4:6f:c2:a1:02: de:f9:4e:26:42:c2:1c:d8:c5:29:53:82:f7:d4:ae:18:d1:be: 7d:8f:bf:70:0e:84:70:59:60:d3:d1:24:bc:6b:be:da:11:a3: a2:87:e4:86:17:ee:44:48:3d:a3:a0:50:ce:2d:3f:a9:b4:33: 50:e5:86:6a:3c:7e:ba:ef:2e:15:d1:79:d3:1f:2a:b0:89:20: 90:97:25:19:96:7f:57:2d:ce:05:30:40:f1:3c:fe:38:ca:cc: 2a:07:ec:62:ae:c8:6d:fa:b4:2f:0d:d2:7c:0e:df:f8:16:4f: 0d:58:29:22:b5:6c:b7:2f:59:e1:28:89:4d:f9:52:f2:bd:d5: c8:be:84:63:8d:4c:d4:77:81:d6:56:cb:7c:0b:8f:06:08:66: 44:42:a9:ee:0e:60:e0:42:dd:dd:cd:f2:c9:56:db:c1:73:ae: da:43:1f:93:fa:9c:a0:a0:73:1b:7f:a2:24:49:b2:c9:69:76: b2:8e:c8:97:3b:73:e6:14:92:12:67:e8:67:00:b7:9b:0c:69: c3:32:0e:4e:97:50:31:f7:7d:66:49:35:62:35:b8:93:2f:bb: 6a:38:b3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6e0VL9u5gcbLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWQ1YWM2ZWItNDFlMi00NWIxLWFjMmMtYWJmYmM3YTFlYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY0Xg5LdgHAJAv6hYrduwC0vxZoU20upljHJ jectunYC7fvaOPFoRo+9HzQMW9CGwPEn2YFT3XRCVdbT5O3E9VZXbI1Yq77KgQTM I/oYeQnpp8SA3sYGNrpJIWLGTXJ5VEeVCo1+vZ6plHT2vy/oIiBygA60TA/k133/ ER6QYjyh6IcpIcQJitcQ0FLYeg7yXq4AyErxfDr/PhV7hHWjTMrkLsRZeh8PY8Vi Hykn5Kya+ToU3vCvRho5VYfL0gJGhx08hlCvTS5/mqaJ5PYhlTLbA3/L/Wkm3MSJ 1AcxeMAlOvCHC+VWtSgg6VRfI7zlRzi3xehHONFSPvOajdw2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWbG6xx3eMmK9A6mkGRx/rlrn2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzFlYTBkMGEtODk1NC0z NDZlLThmYmEtYWVlNWMwNjEwYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPKPBObwtNgWYymXJwuW8KjK85yckJEjOP3oFALHkW0b8KhAt75TiZC whzYxSlTgvfUrhjRvn2Pv3AOhHBZYNPRJLxrvtoRo6KH5IYX7kRIPaOgUM4tP6m0 M1Dlhmo8frrvLhXRedMfKrCJIJCXJRmWf1ctzgUwQPE8/jjKzCoH7GKuyG36tC8N 0nwO3/gWTw1YKSK1bLcvWeEoiU35UvK91ci+hGONTNR3gdZWy3wLjwYIZkRCqe4O YOBC3d3N8slW28FzrtpDH5P6nKCgcxt/oiRJsslpdrKOyJc7c+YUkhJn6GcAt5sM acMyDk6XUDH3fWZJNWI1uJMvu2o4s7g= -----END CERTIFICATE-----Generated at Tue May 6 18:53:46 2025 by rpki-client