$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa File: d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa (raw, json) Hash identifier: p2Y38jEJEhrGdzJEniOVUYQiEzea5wjif0JjvGPY3rk= Subject key identifier: E1:8A:56:64:38:1D:80:13:96:D3:B2:2E:77:5D:D4:8A:BB:24:70:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654C8AF873739ECB06FA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 71.28.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4c:8a:f8:73:73:9e:cb:06:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=50bbcf2c-329c-44cd-b195-b673db938793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2f:55:4d:0b:20:8c:c1:9c:51:38:00:09:71: 3b:06:1b:3b:aa:b8:b3:ab:c1:a3:59:81:8e:4f:13: eb:09:cd:22:20:58:e2:c6:4f:f1:ac:e9:04:1d:24: 63:8b:bc:e7:c9:5d:93:88:11:63:8d:dd:c3:40:29: 13:7f:8a:ef:cd:6f:03:38:2f:a8:72:31:ca:4c:69: 4b:02:ee:ee:9d:0a:09:83:09:c8:72:ad:43:53:3e: 8b:f0:13:19:2c:ed:7a:6e:85:8b:eb:2f:46:b1:fd: 18:d5:5b:bf:fb:a4:c2:76:41:79:44:99:0c:9a:d5: 18:4b:4f:23:0b:6e:ff:77:06:a8:c0:3b:b4:60:11: 0a:fc:9d:b3:3b:92:d8:5e:c1:e4:23:88:cb:2c:3f: 21:22:f3:78:3f:b5:5d:ad:32:54:62:9c:d6:c5:2f: 12:d6:31:c3:73:2f:6c:a5:e9:df:f1:ba:b4:13:aa: f0:e0:1f:f9:fa:4f:5d:b6:4b:d7:4b:25:da:8b:50: 24:32:21:77:2a:db:e4:73:67:9c:8a:e1:af:b3:7c: 05:8c:0c:13:b1:2a:31:f8:4e:e0:b3:bb:3e:69:8a: e9:be:96:1f:b6:d7:f2:a2:b8:45:33:d4:a7:2f:de: 03:23:de:f0:91:35:f4:29:f3:82:27:a7:8e:e5:18: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:56:64:38:1D:80:13:96:D3:B2:2E:77:5D:D4:8A:BB:24:70:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:11:20:93:19:a5:53:bb:58:41:5c:11:2c:9a:d4:f6:9e:bf: fe:49:67:d4:87:9f:2d:25:dd:10:16:3f:c3:23:6a:31:70:e8: 25:1c:80:18:3e:c5:54:7a:ab:62:d5:9f:8f:0a:85:48:a3:48: 28:49:bb:8c:7f:bc:6b:0b:bc:33:9a:cd:88:11:9e:a9:7b:1b: 02:db:a8:bb:64:0e:f5:8f:ab:00:a2:49:62:f5:d4:42:b2:d1: 1b:c0:62:63:a1:69:89:59:3a:8d:d5:19:e9:05:83:fa:07:44: de:39:d8:46:93:41:aa:35:a9:24:e1:1d:e7:6c:ed:84:27:67: 29:bc:e8:f5:99:f9:bc:61:ae:9c:5e:12:dd:b1:3a:e4:ea:37: db:9a:82:58:7c:f8:93:f0:15:01:ee:b6:81:ce:1a:85:c4:81: 11:c6:f7:18:5c:5d:b5:ce:7e:b9:c4:da:88:46:91:be:5b:38: 6d:c6:15:38:e1:36:a0:93:63:f7:00:f6:b2:a0:77:8c:12:71: 0e:ec:ae:0f:1b:a8:01:c9:8c:a0:73:46:1a:8b:30:63:d9:bf: a3:a9:c1:fe:07:4c:cd:62:fa:e5:07:02:95:fb:a9:f3:ae:db: 67:7d:5b:9a:e4:b4:a1:68:5e:24:60:41:82:ef:90:5c:54:3e: bd:b0:af:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUyK+HNznssG+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NTBiYmNmMmMtMzI5Yy00NGNkLWIxOTUtYjY3M2RiOTM4NzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy9VTQsgjMGcUTgACXE7Bhs7qrizq8GjWYGO TxPrCc0iIFjixk/xrOkEHSRji7znyV2TiBFjjd3DQCkTf4rvzW8DOC+ocjHKTGlL Au7unQoJgwnIcq1DUz6L8BMZLO16boWL6y9Gsf0Y1Vu/+6TCdkF5RJkMmtUYS08j C27/dwaowDu0YBEK/J2zO5LYXsHkI4jLLD8hIvN4P7VdrTJUYpzWxS8S1jHDcy9s penf8bq0E6rw4B/5+k9dtkvXSyXai1AkMiF3Ktvkc2eciuGvs3wFjAwTsSox+E7g s7s+aYrpvpYfttfyorhFM9SnL94DI97wkTX0KfOCJ6eO5RhV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGKVmQ4HYATltOyLndd1Iq7JHDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZjNmE5ZWItNzE5ZC0z Y2YyLWE3MzctN2Q3YzdhNGEyZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIRIJMZpVO7WEFcESya1Paev/5JZ9SHny0l3RAWP8MjajFw6CUcgBg+ xVR6q2LVn48KhUijSChJu4x/vGsLvDOazYgRnql7GwLbqLtkDvWPqwCiSWL11EKy 0RvAYmOhaYlZOo3VGekFg/oHRN452EaTQao1qSThHeds7YQnZym86PWZ+bxhrpxe Et2xOuTqN9uaglh8+JPwFQHutoHOGoXEgRHG9xhcXbXOfrnE2ohGkb5bOG3GFTjh NqCTY/cA9rKgd4wScQ7srg8bqAHJjKBzRhqLMGPZv6Opwf4HTM1i+uUHApX7qfOu 22d9W5rktKFoXiRgQYLvkFxUPr2wr6I= -----END CERTIFICATE-----Generated at Sun Jun 29 16:58:49 2025 by rpki-client