$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa File: f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa (raw, json) Hash identifier: Zyco0kmGNfZSUGYXMmasJ/RlulrLNrf2PTz7n3SmQME= Subject key identifier: 12:C3:90:2D:50:78:B7:60:B8:A5:24:41:22:35:0D:B0:98:76:BE:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1A6D0D46E6047B405C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.7.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:6d:0d:46:e6:04:7b:40:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9fcddb36-e391-4ca3-a201-58f4b4611eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:27:fe:62:f7:db:f3:cd:44:7a:64:45:81: bf:ac:cf:2f:85:bc:43:b9:6b:b5:9d:55:4c:41:68: 01:b3:0f:31:e2:5b:96:14:a9:d2:d0:3d:41:a0:ff: 52:8f:ca:f8:95:96:df:f1:00:60:1c:60:05:3c:55: 85:7b:90:12:2d:95:89:e6:3f:33:53:5b:8d:74:4a: 42:14:06:6a:45:05:78:59:b6:89:72:be:e4:d9:d1: a2:4b:e5:d6:c8:5c:67:87:c1:6c:f7:f3:dd:df:c0: b0:42:25:ca:a0:e2:20:97:57:68:9c:62:fb:c8:8a: 90:a9:5a:aa:e0:8d:40:18:63:c9:fd:5d:1e:9e:e9: f5:c4:a5:68:7c:18:7a:c7:68:2d:71:ca:59:13:d8: e2:46:97:43:fc:e0:e7:52:f7:7e:62:de:f3:58:de: 63:e5:2b:00:d4:3e:63:60:5f:a4:3a:b6:5a:2d:f9: 6c:e0:24:d4:7b:2e:3e:ee:a2:83:01:b6:e3:e2:f7: 0d:de:b5:d4:7a:c8:68:8b:12:e2:36:d0:42:74:50: 9c:ca:81:9b:fd:22:9c:7a:db:f8:13:96:4b:9a:0a: 9b:3a:6d:9a:76:8f:f3:1e:16:40:d6:06:60:56:24: 51:1a:de:ff:f1:e4:22:02:94:71:3f:f6:7e:de:bd: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C3:90:2D:50:78:B7:60:B8:A5:24:41:22:35:0D:B0:98:76:BE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:84:db:cb:f0:0d:97:d3:09:26:7f:1d:d4:b3:2b:8c:e7:d4: 6c:d8:8a:b3:46:13:f2:24:20:fe:b3:92:64:e1:90:15:68:76: 03:ed:87:d1:74:40:69:ab:83:af:2c:96:cf:52:0d:34:e8:8f: 88:22:ef:ad:64:d6:cc:1c:fd:6a:0a:98:7e:e2:98:62:51:ea: af:5e:0b:4c:8c:df:38:09:c4:e8:8c:b3:34:9f:e9:73:6d:ec: 30:21:db:fa:81:ee:b0:62:be:d5:23:ec:c9:05:6f:1b:fe:ec: db:cb:73:3e:9e:55:85:21:b5:6e:60:7a:08:06:ff:8e:9d:99: fc:59:96:aa:ad:5b:87:ac:a5:fa:de:67:fe:53:4b:4a:9b:14: e3:db:87:f4:1f:79:f2:77:e2:5a:32:cc:bf:7f:68:a7:48:4f: 97:71:39:ca:79:23:8e:27:bd:f4:5e:d4:5f:b2:73:04:9f:70: 0d:9c:f0:61:af:2f:a7:1e:8f:6e:9f:59:ca:c9:f5:48:a0:0b: b7:30:e8:22:96:e0:ab:e3:4c:7a:71:c6:85:aa:d6:fd:52:e2: 19:78:1c:c1:c4:29:49:21:22:77:a7:c3:60:83:12:5d:56:d1: 04:41:2d:da:19:43:57:5e:42:07:a0:45:95:a4:b7:2c:a8:d6: 79:71:0f:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhptDUbmBHtAXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OWZjZGRiMzYtZTM5MS00Y2EzLWEyMDEtNThmNGI0NjExZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx8n/mL32/PNRHpkRYG/rM8vhbxDuWu1nVVM QWgBsw8x4luWFKnS0D1BoP9Sj8r4lZbf8QBgHGAFPFWFe5ASLZWJ5j8zU1uNdEpC FAZqRQV4WbaJcr7k2dGiS+XWyFxnh8Fs9/Pd38CwQiXKoOIgl1donGL7yIqQqVqq 4I1AGGPJ/V0enun1xKVofBh6x2gtccpZE9jiRpdD/ODnUvd+Yt7zWN5j5SsA1D5j YF+kOrZaLfls4CTUey4+7qKDAbbj4vcN3rXUeshoixLiNtBCdFCcyoGb/SKcetv4 E5ZLmgqbOm2ado/zHhZA1gZgViRRGt7/8eQiApRxP/Z+3r0URQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLDkC1QeLdguKUkQSI1DbCYdr4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU1ZTEwNjAtOTI2Zi0z OWQ2LWFhNjMtNmE3MzA1YTZmMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeE28vwDZfTCSZ/HdSzK4zn1GzYirNGE/IkIP6zkmThkBVodgPth9F0 QGmrg68sls9SDTToj4gi761k1swc/WoKmH7imGJR6q9eC0yM3zgJxOiMszSf6XNt 7DAh2/qB7rBivtUj7MkFbxv+7NvLcz6eVYUhtW5geggG/46dmfxZlqqtW4espfre Z/5TS0qbFOPbh/QfefJ34loyzL9/aKdIT5dxOcp5I44nvfRe1F+ycwSfcA2c8GGv L6cej26fWcrJ9UigC7cw6CKW4KvjTHpxxoWq1v1S4hl4HMHEKUkhInenw2CDEl1W 0QRBLdoZQ1deQgegRZWktyyo1nlxD7w= -----END CERTIFICATE-----Generated at Mon Jun 30 20:39:12 2025 by rpki-client