$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa File: 126c6742-4df7-3e16-966f-3b9c4b85cad9.roa (raw, json) Hash identifier: /5z++gKWkSKRb93pRRTK0gr/Nmwlvm1q9N9DPPafJMY= Subject key identifier: 12:66:69:F9:B8:F0:88:0D:0C:52:9F:43:D4:B3:C2:97:F9:79:0E:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658779A5D8532A44489600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 71.28.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:79:a5:d8:53:2a:44:48:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=3252313a-ee84-4409-a5a0-1240fb3873d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:08:b4:3b:32:1d:80:b7:8e:25:da:6b:a7: 6e:79:dc:fb:c1:c9:b6:78:ee:08:c5:44:83:1d:56: 61:ae:ab:04:d7:2f:50:32:a2:15:6b:06:58:d0:29: d1:db:02:90:fc:ff:c1:18:e3:00:5e:10:7c:e1:ae: a4:b3:f5:9e:4d:f8:09:88:71:4b:8d:40:86:ba:15: 8f:cf:cf:97:bf:13:02:a5:67:df:b6:4c:8f:36:ea: 3f:30:bc:49:9e:60:f0:25:6a:d9:f5:f7:c8:d8:4e: aa:28:92:be:af:8f:47:f7:61:0a:f2:ab:07:04:22: 6f:17:4d:8d:de:f0:38:9b:1c:2a:cd:b0:f2:69:94: 89:e4:e5:74:8a:d7:f9:ea:23:5e:1e:be:04:f3:2d: 2f:57:e1:00:cd:50:07:f8:e3:4e:e6:77:a9:0a:3b: c6:e8:61:dc:e1:e3:73:c6:7b:45:67:c1:42:73:fe: 89:b1:a1:b2:33:4d:0b:13:c2:f1:0c:26:b3:13:45: 1b:64:04:c9:ab:03:46:46:20:6a:d4:85:c4:11:66: b8:54:35:12:be:ae:5b:30:3e:0f:bf:de:90:f9:68: 07:9e:2e:6a:cf:68:6a:75:74:be:5c:0c:c5:a6:43: 92:f4:f0:35:29:7f:0f:4f:60:ff:f4:d0:c9:82:f3: 00:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:66:69:F9:B8:F0:88:0D:0C:52:9F:43:D4:B3:C2:97:F9:79:0E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/126c6742-4df7-3e16-966f-3b9c4b85cad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a3:32:ca:f7:9f:39:43:ae:af:5a:8c:a4:34:5d:08:c4:a6: 88:85:9d:cc:f6:34:a9:1d:7c:38:62:d7:43:50:00:c8:26:c7: 89:33:bb:b7:4f:63:df:2c:05:c7:11:e4:e9:1f:1b:80:e7:1b: d3:6a:fa:ed:51:18:60:7d:8d:99:aa:cd:86:0b:31:8e:65:8e: 35:bc:d7:d4:4a:4a:16:84:f0:98:1a:f5:43:f0:61:b3:d3:72: 43:96:86:fe:3a:7c:34:bb:77:a4:da:7d:65:e9:28:19:3a:d9: a5:fb:07:91:cf:40:2b:bf:aa:ca:96:bb:26:ee:df:4b:2e:a8: c2:b5:1c:83:89:84:22:79:b4:01:81:3d:3a:06:03:d5:4e:3e: 52:1b:35:12:ef:ef:aa:ff:39:da:82:3d:b9:43:57:b7:b3:98: 55:71:b2:9e:d4:d1:bc:53:17:80:62:cc:69:a9:fa:fb:5b:42: 95:f7:0e:ef:21:fa:eb:42:47:7c:dc:fe:01:7b:e9:e5:5f:07: 2e:ce:d0:14:7b:48:df:a6:f3:ff:91:83:44:71:bb:b9:be:75: 80:51:47:11:85:c4:f6:84:7c:1b:f6:a7:ab:d8:6b:bd:9b:99: 4e:6a:1c:dd:25:7a:62:25:96:6d:9b:19:ef:bd:b1:e3:a7:7a: c7:9e:f8:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYd5pdhTKkRIlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MzI1MjMxM2EtZWU4NC00NDA5LWE1YTAtMTI0MGZiMzg3M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7AItDsyHYC3jiXaa6duedz7wcm2eO4IxUSD HVZhrqsE1y9QMqIVawZY0CnR2wKQ/P/BGOMAXhB84a6ks/WeTfgJiHFLjUCGuhWP z8+XvxMCpWfftkyPNuo/MLxJnmDwJWrZ9ffI2E6qKJK+r49H92EK8qsHBCJvF02N 3vA4mxwqzbDyaZSJ5OV0itf56iNeHr4E8y0vV+EAzVAH+ONO5nepCjvG6GHc4eNz xntFZ8FCc/6JsaGyM00LE8LxDCazE0UbZATJqwNGRiBq1IXEEWa4VDUSvq5bMD4P v96Q+WgHni5qz2hqdXS+XAzFpkOS9PA1KX8PT2D/9NDJgvMASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJmafm48IgNDFKfQ9Szwpf5eQ6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI2YzY3NDItNGRmNy0z ZTE2LTk2NmYtM2I5YzRiODVjYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+jMsr3nzlDrq9ajKQ0XQjEpoiFncz2NKkdfDhi10NQAMgmx4kzu7dP Y98sBccR5OkfG4DnG9Nq+u1RGGB9jZmqzYYLMY5ljjW819RKShaE8Jga9UPwYbPT ckOWhv46fDS7d6TafWXpKBk62aX7B5HPQCu/qsqWuybu30suqMK1HIOJhCJ5tAGB PToGA9VOPlIbNRLv76r/OdqCPblDV7ezmFVxsp7U0bxTF4BizGmp+vtbQpX3Du8h +utCR3zc/gF76eVfBy7O0BR7SN+m8/+Rg0Rxu7m+dYBRRxGFxPaEfBv2p6vYa72b mU5qHN0lemIllm2bGe+9seOnesee+AY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:07 2025 by rpki-client