$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa File: 09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa (raw, json) Hash identifier: GgSg+whnZ/yNvK0FhdNdgefy7y7SeHxfrH2TQivFmlM= Subject key identifier: 4F:52:DF:A4:4F:3C:5D:58:40:75:E4:13:9D:F5:95:0C:01:C5:0B:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658763F44466282B509F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 71.28.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:63:f4:44:66:28:2b:50:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=52f96520-18ea-46bd-9efa-0390ffad9010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:d3:34:54:0f:24:eb:9d:dd:c1:30:33:ee: ba:81:ba:48:a3:f5:4c:9d:6e:1a:d7:4b:7a:6d:01: ae:5f:53:f8:10:96:86:27:4b:bd:0f:d5:1a:c5:25: da:a3:1a:3c:7e:b4:0c:c1:c8:31:55:96:aa:09:32: 8c:2c:95:47:46:dd:6d:b4:3a:ba:91:aa:2e:e5:36: 2d:91:12:a0:0d:04:10:04:f3:eb:d5:29:1a:a8:94: 9b:11:9f:30:b0:af:1a:d1:fa:61:d5:50:79:8b:6c: e8:f0:00:ce:e2:43:d5:fe:97:6e:49:f8:2b:fd:64: 3b:8c:88:9b:71:f0:a0:bd:86:cf:49:02:e3:1a:1e: 31:17:0c:ed:c2:c1:40:ea:80:1e:a3:fe:f9:2d:a3: 30:d1:63:02:51:ad:a9:b5:13:ae:c4:d3:33:f5:04: cb:16:19:21:b5:64:8c:48:f8:26:f2:d9:a0:a5:e9: 24:3f:f5:77:97:54:e1:d3:b7:8d:0f:cf:33:18:b3: 29:24:ce:b3:49:48:e9:31:a4:0f:b9:af:d7:09:43: c9:3d:33:eb:5c:60:73:33:38:fc:67:64:70:24:21: 97:8e:2f:d1:4a:ee:85:38:ee:27:9f:1a:2f:2a:6a: 95:ab:7a:5f:14:bc:4d:40:83:07:d4:3f:b3:8f:d8: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:52:DF:A4:4F:3C:5D:58:40:75:E4:13:9D:F5:95:0C:01:C5:0B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:39:2b:7d:6d:e5:5f:4d:90:be:51:e1:ff:0c:03:63:61:93: b9:81:6f:f3:ba:e9:03:06:7d:43:83:e4:ee:93:76:86:8f:7e: fb:6c:5e:4a:71:5a:49:f1:8d:8f:9a:e3:60:a6:f0:ef:26:e8: 0a:7f:0a:29:ee:27:99:e5:77:7a:60:b1:b8:7e:ec:61:ff:cd: b2:0d:e8:a9:16:a0:9a:b0:0e:4f:ee:10:73:e0:81:02:8c:47: e0:55:5c:82:1c:23:a3:71:d0:d8:20:27:dc:f2:2d:e7:2f:a6: 83:a7:96:ca:cc:5a:30:91:11:48:28:e1:90:58:41:fd:3d:1d: 56:16:94:a3:b0:17:02:e7:b4:62:a9:3c:ae:85:ec:8e:00:3b: b7:6e:8e:3c:06:6d:c3:44:82:4c:0e:f5:ea:86:77:52:32:f7: 36:73:75:70:0b:42:f6:d8:a1:17:94:46:7f:5b:8e:98:b2:80: eb:93:1f:54:db:c5:b0:bc:26:c0:13:4b:c4:1c:f2:fb:f0:3f: 46:06:53:aa:50:24:96:64:d4:6e:4a:ed:c1:40:fb:d8:d6:aa: fe:35:10:eb:12:20:44:40:ee:e7:af:a0:be:f0:67:08:01:09: 2b:cb:f9:19:b8:d0:3f:2e:c5:24:db:35:a4:7c:f3:ac:c9:ab: 69:4e:09:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYdj9ERmKCtQn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NTJmOTY1MjAtMThlYS00NmJkLTllZmEtMDM5MGZmYWQ5MDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ3TNFQPJOud3cEwM+66gbpIo/VMnW4a10t6 bQGuX1P4EJaGJ0u9D9UaxSXaoxo8frQMwcgxVZaqCTKMLJVHRt1ttDq6kaou5TYt kRKgDQQQBPPr1SkaqJSbEZ8wsK8a0fph1VB5i2zo8ADO4kPV/pduSfgr/WQ7jIib cfCgvYbPSQLjGh4xFwztwsFA6oAeo/75LaMw0WMCUa2ptROuxNMz9QTLFhkhtWSM SPgm8tmgpekkP/V3l1Th07eND88zGLMpJM6zSUjpMaQPua/XCUPJPTPrXGBzMzj8 Z2RwJCGXji/RSu6FOO4nnxovKmqVq3pfFLxNQIMH1D+zj9ilCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9S36RPPF1YQHXkE531lQwBxQs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDlhNmEyZDUtNDFmMC0z NGVkLWE5NmQtYjc1MWYwYzg5ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD85K31t5V9NkL5R4f8MA2Nhk7mBb/O66QMGfUOD5O6TdoaPfvtsXkpx WknxjY+a42Cm8O8m6Ap/CinuJ5nld3pgsbh+7GH/zbIN6KkWoJqwDk/uEHPggQKM R+BVXIIcI6Nx0NggJ9zyLecvpoOnlsrMWjCREUgo4ZBYQf09HVYWlKOwFwLntGKp PK6F7I4AO7dujjwGbcNEgkwO9eqGd1Iy9zZzdXALQvbYoReURn9bjpiygOuTH1Tb xbC8JsATS8Qc8vvwP0YGU6pQJJZk1G5K7cFA+9jWqv41EOsSIERA7uevoL7wZwgB CSvL+Rm40D8uxSTbNaR886zJq2lOCZA= -----END CERTIFICATE-----Generated at Sun Jun 15 18:51:23 2025 by rpki-client