$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/caabf3d2-2ca9-32d9-a6f7-33b9790c56d8.roa File: caabf3d2-2ca9-32d9-a6f7-33b9790c56d8.roa (raw, json) Hash identifier: NuLCBCf3Z2wO0KNUoJU8YQsWAqHzmqBLwl5Guqw/QZ8= Subject key identifier: D5:B2:30:6B:97:C5:3B:09:40:7C:01:AE:5D:AB:5B:C9:88:67:F5:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A18D3374A8433E8573380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/caabf3d2-2ca9-32d9-a6f7-33b9790c56d8.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.31.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:d3:37:4a:84:33:e8:57:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=484a90d4-495f-46fc-9c53-d5e89be09cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3c:89:cd:c2:2f:3f:67:79:a6:4a:f7:c7:40: 61:9d:10:85:cf:45:0a:96:23:b4:5e:ba:31:a7:b9: eb:2d:00:43:f5:c9:67:7f:ca:6e:c8:ad:02:e5:0d: 4f:d9:a7:bb:b5:3b:f0:8d:40:30:32:93:69:72:b0: f8:5b:4e:da:ce:50:a2:51:b1:88:f2:91:3a:63:ef: cc:e1:f8:30:4c:63:b4:80:63:a4:66:15:e2:88:ff: e3:2c:d2:2f:de:af:88:35:66:00:05:48:f3:cd:a7: f4:57:fc:57:5a:e3:3b:08:f9:04:2d:28:5e:c4:29: 2b:4c:0b:44:15:69:03:99:fd:7f:f1:59:56:52:df: 40:e3:c8:f2:c7:e5:1e:1b:21:e1:23:e8:5d:f7:ed: 7a:e1:5b:16:e3:69:30:7e:c5:d7:40:12:f6:45:7b: da:19:4e:98:bd:35:91:d4:7d:84:75:cf:8d:88:67: f1:18:94:78:83:e6:44:78:18:21:a2:7f:78:21:f5: 9c:3b:2d:6b:95:7c:89:f7:ce:ef:5e:42:2e:a9:4a: cb:5e:a7:ae:9e:87:90:36:cd:e0:19:55:7c:a4:6d: a0:32:88:3f:7c:c6:25:45:26:15:14:47:21:f4:31: cd:62:61:c6:4e:8e:4b:61:d8:95:72:f6:8d:ce:95: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:30:6B:97:C5:3B:09:40:7C:01:AE:5D:AB:5B:C9:88:67:F5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/caabf3d2-2ca9-32d9-a6f7-33b9790c56d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3a:ce:fd:ea:03:18:cd:0d:a9:dc:0a:5b:e6:08:d9:e5:9c: fd:c7:35:b5:1c:5c:ed:f3:84:21:7a:3d:db:7b:1a:15:d6:8c: 2a:1a:71:eb:b3:b4:33:61:0b:79:9c:49:d7:22:9f:57:0d:97: 48:ec:36:98:c9:fe:d8:ac:6f:ea:52:92:c2:d0:13:5e:e1:45: f3:0d:1e:aa:d4:17:9c:83:e8:6d:10:69:ca:74:fd:34:81:be: 6c:2c:fd:b7:73:3a:53:62:4c:82:8e:35:d8:86:cd:23:58:e0: 0a:ca:37:97:cb:5f:91:0e:a4:18:14:cc:1b:86:d1:3e:c1:df: 60:2e:c2:34:ad:ae:41:b9:14:aa:c6:b2:ac:5c:8d:fb:28:f1: 0c:87:be:a3:9c:8c:56:c5:e8:33:ff:ce:38:73:6f:1f:13:db: 1a:9d:0e:15:28:c1:7c:f6:94:31:00:10:0b:a7:ef:48:36:8e: f0:4f:9b:b0:1a:be:86:97:c6:2c:7f:3c:09:0a:84:f2:c7:64: 35:9c:74:46:d0:1b:34:f7:f7:1a:3b:40:41:07:26:03:3f:07: 7f:aa:9a:97:53:92:49:99:c9:7d:56:35:f4:f9:82:83:99:2f: 15:a9:83:4a:d9:3a:04:b2:c2:f9:14:f8:29:fb:68:33:49:23: d4:36:d5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhjTN0qEM+hXM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NDg0YTkwZDQtNDk1Zi00NmZjLTljNTMtZDVlODliZTA5Y2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjyJzcIvP2d5pkr3x0BhnRCFz0UKliO0Xrox p7nrLQBD9clnf8puyK0C5Q1P2ae7tTvwjUAwMpNpcrD4W07azlCiUbGI8pE6Y+/M 4fgwTGO0gGOkZhXiiP/jLNIv3q+INWYABUjzzaf0V/xXWuM7CPkELShexCkrTAtE FWkDmf1/8VlWUt9A48jyx+UeGyHhI+hd9+164VsW42kwfsXXQBL2RXvaGU6YvTWR 1H2Edc+NiGfxGJR4g+ZEeBghon94IfWcOy1rlXyJ987vXkIuqUrLXqeunoeQNs3g GVV8pG2gMog/fMYlRSYVFEch9DHNYmHGTo5LYdiVcvaNzpVUZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWyMGuXxTsJQHwBrl2rW8mIZ/WzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2FhYmYzZDItMmNhOS0z MmQ5LWE2ZjctMzNiOTc5MGM1NmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE6zv3qAxjNDancClvmCNnlnP3HNbUcXO3zhCF6Pdt7GhXWjCoaceuz tDNhC3mcSdcin1cNl0jsNpjJ/tisb+pSksLQE17hRfMNHqrUF5yD6G0Qacp0/TSB vmws/bdzOlNiTIKONdiGzSNY4ArKN5fLX5EOpBgUzBuG0T7B32AuwjStrkG5FKrG sqxcjfso8QyHvqOcjFbF6DP/zjhzbx8T2xqdDhUowXz2lDEAEAun70g2jvBPm7Aa voaXxix/PAkKhPLHZDWcdEbQGzT39xo7QEEHJgM/B3+qmpdTkkmZyX1WNfT5goOZ LxWpg0rZOgSywvkU+Cn7aDNJI9Q21Tw= -----END CERTIFICATE-----Generated at Sat May 10 16:48:33 2025 by rpki-client