$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa File: fef181dd-6b0d-3837-9465-7b4b9128065a.roa (raw, json) Hash identifier: lc9GY828hgkQevpZ0kcH9yTNgEkMbHt1MaQ7ojxqoqo= Subject key identifier: 98:2C:E7:02:A0:BB:6F:9F:C2:C6:05:10:C2:EE:6F:0F:06:17:06:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1875FC93739F6DE35700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.30.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:75:fc:93:73:9f:6d:e3:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3a0e9c1a-4ddb-4bfd-805e-730a192be4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:5e:5d:38:f9:b8:27:a0:7b:fc:e4:36:51: 91:bf:be:1b:e0:36:e8:c6:b6:8d:88:3a:b0:4a:c1: 8c:ac:3a:4d:ea:15:a4:50:87:35:e6:35:75:99:ea: 55:19:87:ab:3d:09:85:2a:56:47:43:24:d9:af:07: c2:0f:8a:a1:2a:8d:9e:df:67:c2:9c:11:70:ae:2d: e7:17:a8:a4:0b:cd:97:6f:17:da:3c:06:73:e8:be: e3:f1:d6:0b:bc:2b:b3:e7:94:f1:1e:07:e5:3d:94: ec:8e:8b:f2:08:3b:86:88:a9:e1:d8:c1:c1:85:49: 86:c2:1a:69:0f:3f:04:77:3e:c7:1f:e5:6c:5a:74: 1f:0c:f6:ce:65:7d:f9:44:c6:40:f4:70:ce:b9:3a: 94:2a:58:58:54:35:a2:9f:3d:8c:49:a1:a4:2e:1a: 0f:ea:41:36:82:02:49:f7:18:4f:d0:5d:df:a3:ed: 82:ee:ea:00:29:a6:cf:48:1a:2d:49:13:7a:43:60: a0:8c:89:4b:c5:06:15:8c:b0:6c:9b:ef:b7:01:de: 53:e3:15:f1:a7:4f:b9:a9:57:de:76:bb:0d:21:99: a7:df:46:fe:1c:1e:29:e8:ea:d1:15:ae:6f:f7:4b: 69:29:0f:44:0c:59:6a:07:49:97:66:7b:61:d5:7b: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:E7:02:A0:BB:6F:9F:C2:C6:05:10:C2:EE:6F:0F:06:17:06:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fef181dd-6b0d-3837-9465-7b4b9128065a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:eb:77:68:66:da:1d:c5:3a:47:a8:16:e6:fa:39:55:13:4c: d1:b0:d1:32:d8:09:5b:39:c5:0b:43:1a:89:0d:79:34:55:ad: 2c:3c:78:54:29:e8:2a:cc:a6:6c:c4:44:15:18:85:aa:93:f8: 7f:57:5d:8d:cd:a6:f2:73:be:5c:61:d5:4c:6f:56:32:0e:be: 87:96:37:da:3f:6e:21:bc:09:a2:b2:2f:53:d2:99:ad:15:02: fa:9b:95:30:38:73:b5:0c:19:6d:4c:7f:a9:8b:4a:41:bb:b3: 55:30:15:34:7e:21:ac:8a:78:91:86:1b:50:25:6c:be:85:bd: 25:b1:d5:81:23:0d:5b:01:aa:6a:11:cf:47:c6:eb:f7:11:66: 6d:91:20:0c:14:1e:73:57:7d:66:7b:8c:e0:8d:52:25:79:32: ea:08:03:c3:a2:44:cc:60:66:7b:f2:61:91:01:d7:c5:0b:1e: 11:0a:1d:1a:64:60:52:61:78:b3:97:d1:71:a9:e1:ef:56:e8: ce:19:d9:21:f2:7d:ae:7f:49:df:85:91:b1:14:a9:9a:55:db: 43:dd:cc:e7:9e:2d:4c:7b:32:b8:5c:ad:37:78:9c:74:38:c6: d2:ca:33:ca:20:aa:b2:62:15:48:f1:3e:4a:22:b3:dd:e6:24: 97:ec:fa:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhh1/JNzn23jVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2EwZTljMWEtNGRkYi00YmZkLTgwNWUtNzMwYTE5MmJlNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGleXTj5uCege/zkNlGRv74b4DboxraNiDqw SsGMrDpN6hWkUIc15jV1mepVGYerPQmFKlZHQyTZrwfCD4qhKo2e32fCnBFwri3n F6ikC82XbxfaPAZz6L7j8dYLvCuz55TxHgflPZTsjovyCDuGiKnh2MHBhUmGwhpp Dz8Edz7HH+VsWnQfDPbOZX35RMZA9HDOuTqUKlhYVDWinz2MSaGkLhoP6kE2ggJJ 9xhP0F3fo+2C7uoAKabPSBotSRN6Q2CgjIlLxQYVjLBsm++3Ad5T4xXxp0+5qVfe drsNIZmn30b+HB4p6OrRFa5v90tpKQ9EDFlqB0mXZnth1XsIcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgs5wKgu2+fwsYFEMLubw8GFwYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmVmMTgxZGQtNmIwZC0z ODM3LTk0NjUtN2I0YjkxMjgwNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjrd2hm2h3FOkeoFub6OVUTTNGw0TLYCVs5xQtDGokNeTRVrSw8eFQp 6CrMpmzERBUYhaqT+H9XXY3NpvJzvlxh1UxvVjIOvoeWN9o/biG8CaKyL1PSma0V AvqblTA4c7UMGW1Mf6mLSkG7s1UwFTR+IayKeJGGG1AlbL6FvSWx1YEjDVsBqmoR z0fG6/cRZm2RIAwUHnNXfWZ7jOCNUiV5MuoIA8OiRMxgZnvyYZEB18ULHhEKHRpk YFJheLOX0XGp4e9W6M4Z2SHyfa5/Sd+FkbEUqZpV20PdzOeeLUx7MrhcrTd4nHQ4 xtLKM8ogqrJiFUjxPkois93mJJfs+hA= -----END CERTIFICATE-----Generated at Sun May 11 11:01:01 2025 by rpki-client