$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa File: 08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa (raw, json) Hash identifier: I8Qr4AXPsS0J94EbUuQP2yAFHcwZKT7d0iNqF0zLSN8= Subject key identifier: 03:43:E8:B9:EA:25:61:60:2C:E0:0E:BD:44:68:5E:DF:4B:24:41:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB9413077F8F0DA32BE73380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa Signing time: Thu 06 Feb 2025 18:14:20 +0000 ROA not before: Thu 06 Feb 2025 18:14:20 +0000 ROA not after: Wed 07 May 2025 17:14:20 +0000 asID: 7029 IP address blocks: 71.30.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:94:13:07:7f:8f:0d:a3:2b:e7:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:20 2025 GMT Not After : May 7 17:14:20 2025 GMT Subject: CN=8ea438ce-368f-4cb3-bf2b-f25ef4102534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:3f:5f:7e:5d:e4:43:bb:aa:74:66:ef:6c: b7:a6:dc:52:99:1d:3f:bb:26:a2:c4:65:f9:45:97: 65:1e:90:43:ee:a0:93:d3:36:5f:b7:50:6c:8d:cd: ce:8b:59:41:75:89:22:33:cc:69:f6:1c:94:bf:f6: 2e:65:04:d8:18:23:0f:de:51:c0:e4:8e:63:6e:60: 13:7f:90:91:c3:0c:f0:b6:d6:61:c0:14:12:2b:29: 6c:9c:0b:15:e6:15:95:d4:d1:18:6d:01:da:88:27: 38:7a:f4:74:26:58:59:c5:23:6e:5b:77:d2:dd:79: fd:17:f9:70:87:68:4f:ae:28:93:f3:a6:08:40:e5: 66:8e:c5:72:26:4a:d3:f0:89:0c:58:b5:01:cc:6e: f7:00:11:4b:72:5a:b3:fd:b6:8c:b3:92:19:05:31: 78:eb:54:6f:2f:26:ff:e6:fc:c3:38:9d:e3:53:88: 36:b9:d6:68:e4:08:2f:5e:78:64:f7:b0:fd:94:35: 6b:ca:f5:9c:80:a3:85:e1:96:1c:5a:c9:5e:12:2a: d4:6d:31:1a:0f:3b:33:e2:72:c3:24:65:fd:ee:90: 67:84:c8:27:b9:92:72:82:9d:89:d9:cc:b4:ac:bc: ef:e5:b4:f6:47:cf:f6:39:30:2a:86:3d:67:29:f4: 5a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:43:E8:B9:EA:25:61:60:2C:E0:0E:BD:44:68:5E:DF:4B:24:41:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08ae7c07-9789-3345-a18a-ed058d1bfa4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:04:e0:6f:ca:15:a1:ec:88:66:6c:17:18:75:e9:37:e2:2c: 05:0b:93:67:91:c2:1c:f8:fc:5b:c0:2d:b3:bd:c3:bd:35:1c: 88:34:f0:dc:6c:e2:ab:b0:be:33:6f:dc:6b:42:00:45:21:e0: a4:9f:db:6f:83:3c:25:23:97:ca:62:91:ff:02:3a:9f:be:b6: 80:6f:bb:66:d5:da:26:af:6e:d6:91:84:9d:db:6c:ab:40:ef: c1:dc:6e:9d:82:8e:73:e5:c2:cd:c7:34:15:7c:dd:32:45:8f: 11:4f:59:07:4b:16:df:d2:df:1c:03:5f:d8:67:3a:f4:be:77: 77:21:84:65:b8:b2:1f:50:aa:09:82:b7:77:8a:b1:1c:01:70: b3:6f:21:fc:9e:7b:f5:d7:78:b9:24:2b:bb:bf:e3:4e:ca:eb: 5d:96:4e:b7:f0:94:71:4f:1d:f1:7c:ea:fc:fe:98:87:f8:2f: b3:bb:38:5c:38:e9:27:46:6e:e1:9a:fd:ad:bf:26:d4:a8:21: 10:bd:71:23:e1:1f:b2:1f:50:c9:ab:a8:93:b2:eb:a6:b1:eb: 87:c4:ef:40:52:cf:0f:92:14:97:93:d4:9f:a1:28:ef:f1:c5: 0d:d0:be:7a:be:1b:8d:27:7f:ed:61:0c:08:2c:34:36:e0:05: 6e:7a:3d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlBMHf48NoyvnM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQyMFoXDTI1MDUwNzE3MTQyMFowLzEtMCsGA1UEAxMk OGVhNDM4Y2UtMzY4Zi00Y2IzLWJmMmItZjI1ZWY0MTAyNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyM/X35d5EO7qnRm72y3ptxSmR0/uyaixGX5 RZdlHpBD7qCT0zZft1Bsjc3Oi1lBdYkiM8xp9hyUv/YuZQTYGCMP3lHA5I5jbmAT f5CRwwzwttZhwBQSKylsnAsV5hWV1NEYbQHaiCc4evR0JlhZxSNuW3fS3Xn9F/lw h2hPriiT86YIQOVmjsVyJkrT8IkMWLUBzG73ABFLclqz/baMs5IZBTF461RvLyb/ 5vzDOJ3jU4g2udZo5AgvXnhk97D9lDVryvWcgKOF4ZYcWsleEirUbTEaDzsz4nLD JGX97pBnhMgnuZJygp2J2cy0rLzv5bT2R8/2OTAqhj1nKfRa5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAND6LnqJWFgLOAOvURoXt9LJEHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhhZTdjMDctOTc4OS0z MzQ1LWExOGEtZWQwNThkMWJmYTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcE4G/KFaHsiGZsFxh16TfiLAULk2eRwhz4/FvALbO9w701HIg08Nxs 4quwvjNv3GtCAEUh4KSf22+DPCUjl8pikf8COp++toBvu2bV2iavbtaRhJ3bbKtA 78Hcbp2CjnPlws3HNBV83TJFjxFPWQdLFt/S3xwDX9hnOvS+d3chhGW4sh9QqgmC t3eKsRwBcLNvIfyee/XXeLkkK7u/407K612WTrfwlHFPHfF86vz+mIf4L7O7OFw4 6SdGbuGa/a2/JtSoIRC9cSPhH7IfUMmrqJOy66ax64fE70BSzw+SFJeT1J+hKO/x xQ3Qvnq+G40nf+1hDAgsNDbgBW56PTw= -----END CERTIFICATE-----Generated at Sun Apr 27 23:05:19 2025 by rpki-client