$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa File: d1b55f89-5ffd-3a4b-8e48-37e825835068.roa (raw, json) Hash identifier: ThedDniWLXeWAbJ6QuPRl4ciTSopU1VtKM/2i3xvvgs= Subject key identifier: F0:FA:92:7C:A8:55:91:C9:E7:EF:9F:7B:00:58:E3:66:78:28:9E:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A127636852BDD678E2CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.30.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:12:76:36:85:2b:dd:67:8e:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=23ff93e4-e663-47e8-95c7-5237691802a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:22:6e:b2:18:60:6d:1e:41:a3:a8:c6:c0:eb: ca:87:43:71:67:99:02:75:87:4d:df:64:36:6c:ef: c1:51:6d:ea:8f:d1:13:90:f7:28:2d:20:43:bb:9b: 27:22:48:59:93:d9:38:d3:e7:15:44:55:73:45:3b: 25:28:84:30:49:e4:c1:7a:6c:62:3e:53:c3:97:82: 85:0e:e0:a3:a9:47:f3:7b:9d:c0:20:07:e7:c6:73: ca:41:34:63:02:2c:d4:9a:2c:a3:ab:b7:83:fe:61: 9a:f3:21:ac:80:fb:dd:0f:6f:2c:e2:f0:46:00:9a: ab:1f:72:ab:cf:de:b8:ee:62:57:12:59:65:6d:39: ef:4d:0f:2a:5f:d1:91:98:53:3e:8a:1d:25:87:e7: 5a:b1:6a:8a:fb:83:1b:c9:f3:86:02:bd:20:3b:c3: cb:29:85:c8:e4:f7:8b:60:1d:28:3a:00:09:00:c0: 13:15:cf:32:49:4f:17:03:5a:75:41:cd:50:ce:a3: 66:3f:ee:28:3f:9c:fc:ae:8e:be:31:e4:52:6e:11: 97:12:e0:66:2d:de:11:b3:2c:ba:18:1d:a4:1b:37: f6:0b:fe:00:c9:8c:81:01:a6:84:f0:60:f3:61:43: a9:69:6f:e4:a7:6a:4a:24:d3:14:42:b2:28:05:0c: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:92:7C:A8:55:91:C9:E7:EF:9F:7B:00:58:E3:66:78:28:9E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a5:cb:65:c1:00:26:d1:c6:43:b5:cd:dd:0a:d8:98:87:24: 17:f6:d1:b7:69:42:8f:06:a0:cc:20:cd:4d:c7:1a:6a:ca:a6: 94:35:8a:1a:76:89:25:67:26:f4:4a:87:fc:aa:7f:5d:51:69: 02:40:10:b5:c8:d2:67:06:2d:16:50:ca:07:ae:24:e0:10:5e: d2:77:be:41:4a:41:eb:ea:98:a5:ef:2e:de:81:3f:d0:ba:b7: f4:f5:f6:8e:b9:2e:c0:42:1b:25:a7:f3:5a:26:01:12:63:b5: 15:91:26:7d:3d:79:d7:b5:af:12:b1:70:f6:9a:3e:c2:6d:00: 73:8e:23:39:46:23:e2:fe:48:15:bf:8e:ed:ca:78:68:8a:98: d1:c0:fa:a1:a9:d4:9b:91:78:46:5c:d0:6c:07:10:7f:ed:2e: ad:e7:f4:42:ee:12:53:b9:45:ee:94:5d:3c:51:ec:64:7d:04: 4f:ce:20:d8:24:e7:4b:8d:85:5b:58:2b:fd:06:da:04:5b:e4: 1a:74:e4:45:33:f1:4d:66:29:d5:18:5b:a7:9b:d3:65:22:86: 0a:92:ae:c4:82:1d:bd:8a:0e:54:1d:96:5e:bb:28:ce:a8:27: 0f:e3:84:0e:08:cd:bd:7c:f8:d9:94:01:9d:34:37:56:28:0b: a1:09:3c:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhJ2NoUr3WeOLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjNmZjkzZTQtZTY2My00N2U4LTk1YzctNTIzNzY5MTgwMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyJushhgbR5Bo6jGwOvKh0NxZ5kCdYdN32Q2 bO/BUW3qj9ETkPcoLSBDu5snIkhZk9k40+cVRFVzRTslKIQwSeTBemxiPlPDl4KF DuCjqUfze53AIAfnxnPKQTRjAizUmiyjq7eD/mGa8yGsgPvdD28s4vBGAJqrH3Kr z9647mJXElllbTnvTQ8qX9GRmFM+ih0lh+dasWqK+4MbyfOGAr0gO8PLKYXI5PeL YB0oOgAJAMATFc8ySU8XA1p1Qc1QzqNmP+4oP5z8ro6+MeRSbhGXEuBmLd4Rsyy6 GB2kGzf2C/4AyYyBAaaE8GDzYUOpaW/kp2pKJNMUQrIoBQzMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPD6knyoVZHJ5++fewBY42Z4KJ6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFiNTVmODktNWZmZC0z YTRiLThlNDgtMzdlODI1ODM1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ly2XBACbRxkO1zd0K2JiHJBf20bdpQo8GoMwgzU3HGmrKppQ1ihp2 iSVnJvRKh/yqf11RaQJAELXI0mcGLRZQygeuJOAQXtJ3vkFKQevqmKXvLt6BP9C6 t/T19o65LsBCGyWn81omARJjtRWRJn09ede1rxKxcPaaPsJtAHOOIzlGI+L+SBW/ ju3KeGiKmNHA+qGp1JuReEZc0GwHEH/tLq3n9ELuElO5Re6UXTxR7GR9BE/OINgk 50uNhVtYK/0G2gRb5Bp05EUz8U1mKdUYW6eb02UihgqSrsSCHb2KDlQdll67KM6o Jw/jhA4Izb18+NmUAZ00N1YoC6EJPGo= -----END CERTIFICATE-----Generated at Sun May 11 12:51:33 2025 by rpki-client