$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa File: e825d20e-8e66-3271-be05-9ac1583f7e38.roa (raw, json) Hash identifier: 0JvXNvmLsrOASzh0pWA5s57cZxKIIIUUMzhS2qNS5VY= Subject key identifier: 84:AC:CF:EF:0F:80:74:12:7A:D8:5F:02:1F:F7:D9:A3:ED:11:06:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7D81763D29C5C010F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.31.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:d8:17:63:d2:9c:5c:01:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=538a31df-6553-49ea-81d3-cc3b346ad3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:1a:d0:38:7a:c4:4a:41:61:b9:5d:46:ca: 02:35:aa:fd:0e:0f:79:30:64:43:30:ca:f5:ab:8d: 7b:b9:44:40:1a:eb:00:b5:c6:d4:01:b5:5d:e0:b3: 2d:92:67:c0:d5:99:be:71:d9:40:a9:37:fb:a1:77: 6e:bb:7b:6d:6b:14:54:f2:7f:b8:86:a4:09:5b:37: 8f:7d:64:5f:ca:71:fd:27:ba:84:2d:bf:19:e7:07: 4f:e1:1b:3e:d9:b4:d6:4b:ef:78:2e:a5:c5:b6:fb: dc:7c:e3:a0:51:4a:c1:f3:ef:f9:90:f4:fb:67:bc: 9d:f1:1e:2c:1a:44:cf:61:f1:d0:b0:18:92:4c:12: d4:27:01:c3:00:85:63:07:2f:24:7d:b8:f3:09:8d: ea:96:77:6b:9b:59:03:56:43:a9:52:85:ec:bb:61: a7:da:bb:a5:07:6d:47:20:5d:54:56:b3:0e:07:63: 53:08:82:91:4c:27:a7:06:ed:41:58:32:8a:46:e2: 5a:18:a4:6d:bb:77:a1:21:f7:b6:45:f7:a4:4a:c0: 64:aa:b7:fe:df:4d:b3:f8:c2:2e:4a:88:67:4b:9c: 11:bb:47:7e:e4:45:d3:e6:c8:b3:c2:23:8e:43:13: 6b:15:be:01:7c:f8:cc:c4:aa:21:c5:1c:62:70:24: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AC:CF:EF:0F:80:74:12:7A:D8:5F:02:1F:F7:D9:A3:ED:11:06:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e825d20e-8e66-3271-be05-9ac1583f7e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d7:ba:ab:fc:22:cf:b9:d6:93:4b:1a:4e:2c:ae:cb:7c:09: 05:bb:c2:35:2e:f9:41:d1:6d:30:2e:fc:e4:48:dc:da:b7:94: dc:34:7f:35:50:ad:4c:8d:c4:58:e1:bc:06:68:71:a8:db:4c: b6:2d:2c:44:30:4e:01:8c:33:dc:c5:26:19:af:7d:8e:a1:c1: 96:23:d7:d9:2f:b7:e0:73:cd:af:80:4c:2e:a3:b4:45:84:1a: 86:54:25:ad:8f:9b:d8:b9:d5:1c:d7:6b:a4:37:e6:5e:c5:6e: 5d:41:2e:22:63:42:a7:65:f1:52:21:d4:43:6a:56:84:1d:ac: 18:43:ce:28:a8:e8:08:2f:d1:36:08:fa:f8:1c:62:7e:be:8f: 4c:31:26:ff:18:fa:f6:1c:98:f2:c8:c0:6c:da:ac:5d:e9:98: 96:88:0f:5d:ec:4c:00:55:ed:57:14:c8:a2:cb:59:13:a3:18: f2:9e:d0:3d:44:02:57:c0:5c:a3:97:38:ce:a1:5a:ff:10:0f: 07:02:a4:8a:27:8e:6c:0f:22:dc:4a:f5:cd:de:92:25:5a:91: c6:26:f6:46:f1:80:15:44:75:34:60:d7:4f:ae:e1:a4:03:85: cb:c5:1f:4c:a3:9e:d1:9d:12:73:b5:77:27:15:ca:17:0a:1d: 33:05:2b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6fYF2PSnFwBDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk NTM4YTMxZGYtNjU1My00OWVhLTgxZDMtY2MzYjM0NmFkM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT8a0Dh6xEpBYbldRsoCNar9Dg95MGRDMMr1 q417uURAGusAtcbUAbVd4LMtkmfA1Zm+cdlAqTf7oXduu3ttaxRU8n+4hqQJWzeP fWRfynH9J7qELb8Z5wdP4Rs+2bTWS+94LqXFtvvcfOOgUUrB8+/5kPT7Z7yd8R4s GkTPYfHQsBiSTBLUJwHDAIVjBy8kfbjzCY3qlndrm1kDVkOpUoXsu2Gn2rulB21H IF1UVrMOB2NTCIKRTCenBu1BWDKKRuJaGKRtu3ehIfe2RfekSsBkqrf+302z+MIu SohnS5wRu0d+5EXT5sizwiOOQxNrFb4BfPjMxKohxRxicCSfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISsz+8PgHQSethfAh/32aPtEQZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTgyNWQyMGUtOGU2Ni0z MjcxLWJlMDUtOWFjMTU4M2Y3ZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXXuqv8Is+51pNLGk4srst8CQW7wjUu+UHRbTAu/ORI3Nq3lNw0fzVQ rUyNxFjhvAZocajbTLYtLEQwTgGMM9zFJhmvfY6hwZYj19kvt+Bzza+ATC6jtEWE GoZUJa2Pm9i51RzXa6Q35l7Fbl1BLiJjQqdl8VIh1ENqVoQdrBhDziio6Agv0TYI +vgcYn6+j0wxJv8Y+vYcmPLIwGzarF3pmJaID13sTABV7VcUyKLLWROjGPKe0D1E AlfAXKOXOM6hWv8QDwcCpIonjmwPItxK9c3ekiVakcYm9kbxgBVEdTRg10+u4aQD hcvFH0yjntGdEnO1dycVyhcKHTMFK2M= -----END CERTIFICATE-----Generated at Sat May 10 07:29:50 2025 by rpki-client