$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa File: f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa (raw, json) Hash identifier: oCMGVX7MIVbUGBUYXsqDsR298DhzvuluRgbiuACLSwM= Subject key identifier: 4F:94:1B:6E:36:31:59:39:AD:D0:CA:D8:AD:2B:DD:7E:3F:DA:F5:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A18DFB6D4833D7E138D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.31.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:df:b6:d4:83:3d:7e:13:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=2671f268-b3fc-4279-8599-245eb1ee373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:ec:0d:0e:fd:ec:e5:8d:af:83:a7:3a:90: 24:72:ca:c0:09:aa:57:4d:bc:ef:c0:dd:66:6c:b7: fa:6d:6d:1b:3d:2c:b1:73:0a:cc:7d:37:8a:06:28: 01:58:16:06:c0:3e:b3:f7:99:11:78:30:d7:72:70: 76:d0:e5:7c:c5:0e:07:6b:a3:54:b8:58:f3:d8:8f: a9:62:c4:93:b8:8e:af:64:9b:69:fb:5e:2a:f2:0f: 13:f3:10:4c:47:3e:cc:ff:49:07:41:af:21:da:9f: 97:38:20:25:c6:b1:92:34:9b:fd:49:0d:ed:8c:35: 3c:2f:1b:97:49:93:e8:ee:44:d1:5f:7a:4b:09:d5: 32:ec:8d:35:27:20:05:27:83:cb:19:e6:0e:c2:cb: e2:51:b5:28:8a:61:aa:2e:f2:0f:ff:0a:1a:c2:f7: 90:be:c3:54:fb:d6:4b:ad:4b:51:a3:d2:7f:71:4d: 30:7f:f4:fe:88:a7:1c:c3:41:5f:f0:4f:0d:97:e3: be:a3:0b:8b:c2:35:ec:73:02:9d:dd:27:b1:fe:00: c7:11:3f:0a:d9:19:a4:27:87:37:04:7e:ad:b6:06: 18:09:68:c7:b3:6b:9f:08:3a:ad:36:40:82:8d:98: 8f:76:a9:42:df:83:5a:b9:fb:a5:fe:e7:e4:cf:30: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:94:1B:6E:36:31:59:39:AD:D0:CA:D8:AD:2B:DD:7E:3F:DA:F5:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1e:37:4c:86:6c:d8:93:b4:a8:30:e3:e0:93:62:ae:69:96: ad:0f:3d:60:e9:78:ce:b6:f7:b0:12:5b:ff:24:ef:ef:ae:96: 8c:d6:41:90:3e:a0:ff:fb:e8:7d:9b:b7:88:d6:ad:e2:29:ac: 3f:51:4a:0b:4f:cc:cd:a0:5c:51:1c:2f:91:fd:c5:61:ff:c2: 92:11:47:11:bc:47:0d:53:75:fc:b1:a5:c5:28:c8:7e:7f:f9: 58:91:0c:d5:b0:fa:59:aa:8c:d5:24:40:b3:23:46:bd:77:ac: 10:b3:9a:d0:9f:59:e9:28:09:81:b1:a1:5d:f3:52:e6:e3:66: 28:4a:e3:8f:f3:ab:dc:3e:e6:b7:68:09:bd:66:51:61:29:a9: c3:7e:16:82:56:db:21:d9:16:54:70:fb:0a:80:d4:36:ce:d8: b9:46:5c:42:66:0c:5f:0e:13:c8:42:b9:a8:b8:9b:1f:f6:a5: b6:1c:1e:49:92:93:af:11:6a:31:bc:fb:d1:76:b1:ef:93:b3: e8:70:e2:e5:0c:0b:b7:c9:d5:0b:21:2e:f3:14:78:8a:62:9b: 46:de:ef:04:fb:de:47:a5:fa:7d:ee:a5:03:12:4d:0e:c1:9e: 23:1a:f5:7c:e3:05:ab:45:8c:ee:72:cf:4d:73:14:f4:03:b8: b2:18:4b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhjfttSDPX4TjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MjY3MWYyNjgtYjNmYy00Mjc5LTg1OTktMjQ1ZWIxZWUzNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34vsDQ797OWNr4OnOpAkcsrACapXTbzvwN1m bLf6bW0bPSyxcwrMfTeKBigBWBYGwD6z95kReDDXcnB20OV8xQ4Ha6NUuFjz2I+p YsSTuI6vZJtp+14q8g8T8xBMRz7M/0kHQa8h2p+XOCAlxrGSNJv9SQ3tjDU8LxuX SZPo7kTRX3pLCdUy7I01JyAFJ4PLGeYOwsviUbUoimGqLvIP/woawveQvsNU+9ZL rUtRo9J/cU0wf/T+iKccw0Ff8E8Nl+O+owuLwjXscwKd3Sex/gDHET8K2RmkJ4c3 BH6ttgYYCWjHs2ufCDqtNkCCjZiPdqlC34Nauful/ufkzzCZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+UG242MVk5rdDK2K0r3X4/2vWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg0ZmMwYzQtZWM3Yy0z NWI1LThkM2UtYjU4NmEwMzVjZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABseN0yGbNiTtKgw4+CTYq5plq0PPWDpeM6297ASW/8k7++ulozWQZA+ oP/76H2bt4jWreIprD9RSgtPzM2gXFEcL5H9xWH/wpIRRxG8Rw1TdfyxpcUoyH5/ +ViRDNWw+lmqjNUkQLMjRr13rBCzmtCfWekoCYGxoV3zUubjZihK44/zq9w+5rdo Cb1mUWEpqcN+FoJW2yHZFlRw+wqA1DbO2LlGXEJmDF8OE8hCuai4mx/2pbYcHkmS k68RajG8+9F2se+Ts+hw4uUMC7fJ1QshLvMUeIpim0be7wT73kel+n3upQMSTQ7B niMa9XzjBatFjO5yz01zFPQDuLIYS+s= -----END CERTIFICATE-----Generated at Wed May 7 13:12:37 2025 by rpki-client