$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa File: c77f3968-1e5e-334f-96fa-e76652c76e3c.roa (raw, json) Hash identifier: WZU0uyFgwepFWAEif5jidwbY4QLB6pPlEaitvvH17Jg= Subject key identifier: DB:91:7B:5A:4B:D0:90:75:DF:94:27:01:12:55:22:B6:F8:82:86:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858494C440029DB3C89DB241C2180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa Signing time: Mon 24 Mar 2025 20:32:16 +0000 ROA not before: Mon 24 Mar 2025 20:32:16 +0000 ROA not after: Sun 22 Jun 2025 20:32:16 +0000 asID: 7029 IP address blocks: 71.28.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:44:00:29:db:3c:89:db:24:1c:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 24 20:32:16 2025 GMT Not After : Jun 22 20:32:16 2025 GMT Subject: CN=68c0bc16-de90-4414-9e72-55ce0e97497c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:b9:79:4a:48:d9:69:98:12:85:7d:f5:1b: 07:dd:76:4f:8f:d9:e2:f3:49:2b:af:86:7e:f0:2f: 46:e3:55:48:53:e9:39:39:65:0e:57:3f:e3:30:65: 9a:74:58:89:ec:52:0d:b3:82:a3:9c:f4:14:1e:bc: 8a:03:50:2a:85:b6:0c:c1:8d:23:20:67:fc:38:52: 9d:4e:b5:0c:13:d6:48:37:3f:27:ac:87:ef:eb:7f: 72:40:df:0a:d7:a4:6c:23:c1:05:ae:07:a5:54:54: ac:84:b3:0d:32:2c:07:9c:25:34:03:5e:98:9a:a2: b0:c7:ff:86:49:e8:2b:61:3d:f3:85:b3:14:bb:5e: 08:fa:69:e6:75:bd:9c:ff:d4:2d:55:ca:ea:82:e2: bf:e2:5a:4d:18:05:63:50:10:de:8c:20:85:20:43: a2:e7:98:d1:73:cd:7b:8a:2d:06:9c:9e:35:63:0c: a4:d9:24:60:0e:0b:3a:3f:bd:8b:0f:76:19:07:e0: c9:40:99:ba:f6:d9:dd:ad:c9:9f:32:06:64:c4:17: 53:74:23:a5:41:78:ff:f5:7f:25:71:ab:7a:47:00: 93:29:d6:a3:d0:8b:f4:08:f3:7a:53:68:52:12:35: dd:1d:47:64:17:8e:c2:14:48:d1:48:75:d6:56:98: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:7B:5A:4B:D0:90:75:DF:94:27:01:12:55:22:B6:F8:82:86:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b1:67:8e:21:ef:b2:ad:d9:40:ff:29:c6:07:e8:98:70:43: b8:ec:b6:ab:ca:7d:bf:24:6e:0f:77:65:90:df:fa:08:a8:f1: 3c:f7:ec:d4:b8:8d:de:44:c2:eb:02:df:00:43:b6:9b:81:68: 8f:e9:7e:d3:0f:58:8d:32:e3:a8:ab:14:46:e2:d9:94:94:37: 2a:c8:ed:21:75:d4:1f:48:fa:6a:69:66:e5:bb:28:d8:8a:97: ab:d0:db:9e:b5:c6:15:a0:8f:e4:c3:bb:e5:ba:7e:1d:b0:3d: 35:a0:27:c8:5d:9c:d4:21:df:11:02:bd:a3:1d:49:c8:60:74: 63:c0:79:12:04:c3:8f:1b:67:88:ec:30:bf:ce:17:8c:d2:2d: 16:89:c6:e6:59:ab:71:9b:9c:94:e7:8d:f3:1e:d9:46:5b:55: df:fd:32:53:46:4e:c9:48:36:65:e0:17:cb:fa:b4:f8:02:26: 91:4c:45:57:e7:2d:93:1f:80:1d:70:bb:ac:6d:70:a5:e7:61: bc:aa:c2:1b:9e:23:c5:ac:28:46:dc:90:9a:6e:b7:da:0e:19: f7:a1:a1:47:b9:01:a6:d0:ca:5f:00:52:9a:54:af:d8:69:31: 93:c5:09:52:94:78:c9:e4:80:12:56:dd:cf:74:90:9b:f7:88: 05:23:64:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMRAAp2zyJ2yQcIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyNDIwMzIxNloXDTI1MDYyMjIwMzIxNlowLzEtMCsGA1UEAxMk NjhjMGJjMTYtZGU5MC00NDE0LTllNzItNTVjZTBlOTc0OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL25eUpI2WmYEoV99RsH3XZPj9ni80krr4Z+ 8C9G41VIU+k5OWUOVz/jMGWadFiJ7FINs4KjnPQUHryKA1AqhbYMwY0jIGf8OFKd TrUME9ZINz8nrIfv639yQN8K16RsI8EFrgelVFSshLMNMiwHnCU0A16YmqKwx/+G SegrYT3zhbMUu14I+mnmdb2c/9QtVcrqguK/4lpNGAVjUBDejCCFIEOi55jRc817 ii0GnJ41Ywyk2SRgDgs6P72LD3YZB+DJQJm69tndrcmfMgZkxBdTdCOlQXj/9X8l cat6RwCTKdaj0Iv0CPN6U2hSEjXdHUdkF47CFEjRSHXWVphLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuRe1pL0JB135QnARJVIrb4goZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc3ZjM5NjgtMWU1ZS0z MzRmLTk2ZmEtZTc2NjUyYzc2ZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOxZ44h77Kt2UD/KcYH6JhwQ7jstqvKfb8kbg93ZZDf+gio8Tz37NS4 jd5EwusC3wBDtpuBaI/pftMPWI0y46irFEbi2ZSUNyrI7SF11B9I+mppZuW7KNiK l6vQ2561xhWgj+TDu+W6fh2wPTWgJ8hdnNQh3xECvaMdSchgdGPAeRIEw48bZ4js ML/OF4zSLRaJxuZZq3GbnJTnjfMe2UZbVd/9MlNGTslINmXgF8v6tPgCJpFMRVfn LZMfgB1wu6xtcKXnYbyqwhueI8WsKEbckJput9oOGfehoUe5AabQyl8AUppUr9hp MZPFCVKUeMnkgBJW3c90kJv3iAUjZAU= -----END CERTIFICATE-----Generated at Wed May 7 03:57:11 2025 by rpki-client