$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa File: f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa (raw, json) Hash identifier: x8IS7/ycODxGA2re5BDc7q1Sh8xc1VF1sZ9Ep4PrVr0= Subject key identifier: 6E:C5:70:C7:9E:E5:71:AC:A1:F8:75:EE:A1:18:A4:1E:A1:4F:6E:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB492A564A1B9E8C0E77C10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 71.31.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:92:a5:64:a1:b9:e8:c0:e7:7c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=594f1840-5837-49f4-b072-5c38e28b352c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:83:0f:37:2f:f5:21:0e:1b:3c:82:34:3a:42: 08:c4:3b:2f:a4:1e:33:a9:65:16:da:4b:e4:30:2e: 73:8d:0f:28:21:02:0f:73:70:58:97:98:49:35:bc: d7:1f:22:22:9b:24:07:c6:17:5a:33:ac:b6:b3:af: f1:63:5d:a4:39:42:f8:16:c4:e2:8c:c7:5c:45:6b: 31:9e:28:af:f6:95:60:9b:23:35:09:5b:8b:d8:f0: 5b:17:30:f4:05:66:1b:b0:ea:2b:85:3e:45:6a:e1: 96:14:6f:6b:83:8d:4f:61:e0:27:23:9f:db:d7:df: f4:f1:20:32:1a:0e:a2:65:0a:8f:8a:d5:cc:54:e8: d1:02:f2:f0:d2:2a:4b:0a:73:2f:df:15:4b:2c:46: d3:2a:1d:40:ca:39:cc:e5:f4:ea:7d:d1:b3:85:88: 01:0f:96:a8:11:b9:eb:53:1d:c9:b9:b2:cb:8b:b8: 8a:0c:d5:5d:8f:20:fc:f2:ed:48:d9:3f:e7:32:2a: 79:75:78:ea:80:b2:03:ef:6a:4c:ad:9d:3a:d3:85: 58:76:b0:d5:e6:ea:f5:60:db:4d:f5:a4:65:e7:ea: ce:d0:9b:67:2c:5a:7b:d5:ed:03:59:bd:7d:9e:72: 02:cb:3e:7f:0f:d9:7c:f3:3d:14:59:23:a8:24:04: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C5:70:C7:9E:E5:71:AC:A1:F8:75:EE:A1:18:A4:1E:A1:4F:6E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3f:04:a4:99:26:d1:e1:68:4c:cb:5c:11:a1:9e:45:06:32: f6:e3:94:91:45:96:03:d2:cf:c1:4d:2a:8c:7d:2e:e1:87:34: 4a:28:58:7d:2d:70:3d:70:13:23:6d:24:e5:85:b0:d6:9f:e7: 28:f8:26:82:cb:76:30:09:a8:e5:4f:59:df:89:62:48:9e:36: b3:b0:c5:81:b1:9d:01:c2:d8:c5:d7:cd:c8:34:72:4b:9e:66: 8c:48:f6:f1:45:f5:7a:02:15:e3:72:24:7c:ac:28:05:7a:a2: 7c:82:f9:43:04:af:5b:f0:fb:8d:7d:42:fe:7c:c3:9c:cf:ca: d1:84:ad:7c:6e:35:c3:52:c2:de:97:ce:70:05:fc:f6:6f:d1: 84:7d:3b:cb:7c:61:fa:90:f8:db:3e:e3:c2:37:6b:4c:49:0f: 78:d4:13:8f:e8:7e:79:ed:61:9e:d2:2e:77:bd:88:44:42:c0: 37:22:f0:12:52:6e:9b:63:da:19:c2:78:8f:ab:a5:b1:b3:77: ce:6b:d3:96:f6:54:58:60:58:8d:94:88:d0:6c:80:34:a4:76: 10:2d:c7:63:3e:c0:fe:07:c2:fe:0d:97:d8:e0:c5:92:8d:f9: 3c:98:bd:ce:39:a5:a7:a2:98:7e:05:79:40:c8:44:b2:b5:c2: d1:4f:18:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJKlZKG56MDnfBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NTk0ZjE4NDAtNTgzNy00OWY0LWIwNzItNWMzOGUyOGIzNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYMPNy/1IQ4bPII0OkIIxDsvpB4zqWUW2kvk MC5zjQ8oIQIPc3BYl5hJNbzXHyIimyQHxhdaM6y2s6/xY12kOUL4FsTijMdcRWsx niiv9pVgmyM1CVuL2PBbFzD0BWYbsOorhT5FauGWFG9rg41PYeAnI5/b19/08SAy Gg6iZQqPitXMVOjRAvLw0ipLCnMv3xVLLEbTKh1AyjnM5fTqfdGzhYgBD5aoEbnr Ux3JubLLi7iKDNVdjyD88u1I2T/nMip5dXjqgLID72pMrZ0604VYdrDV5ur1YNtN 9aRl5+rO0JtnLFp71e0DWb19nnICyz5/D9l88z0UWSOoJARa0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7FcMee5XGsofh17qEYpB6hT25GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQzYmUzYTktNzFjNi0z NGFkLWIwZDMtZWRkMzljZWUzMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4/BKSZJtHhaEzLXBGhnkUGMvbjlJFFlgPSz8FNKox9LuGHNEooWH0t cD1wEyNtJOWFsNaf5yj4JoLLdjAJqOVPWd+JYkieNrOwxYGxnQHC2MXXzcg0ckue ZoxI9vFF9XoCFeNyJHysKAV6onyC+UMEr1vw+419Qv58w5zPytGErXxuNcNSwt6X znAF/PZv0YR9O8t8YfqQ+Ns+48I3a0xJD3jUE4/ofnntYZ7SLne9iERCwDci8BJS bptj2hnCeI+rpbGzd85r05b2VFhgWI2UiNBsgDSkdhAtx2M+wP4Hwv4Nl9jgxZKN +TyYvc45paeimH4FeUDIRLK1wtFPGA0= -----END CERTIFICATE-----Generated at Sat May 10 09:55:04 2025 by rpki-client