$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa File: 13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa (raw, json) Hash identifier: n6vnxKaQSYaNdF4z+QzXFVHvbAVc0AvdrNFpjZiIBNc= Subject key identifier: 09:ED:C6:08:52:D7:CC:27:CD:94:8A:A3:07:09:3C:B3:0F:57:A2:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA903513092D1782D7F580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.28.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:90:35:13:09:2d:17:82:d7:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=587b1a05-4841-48a9-9736-7919eeec8a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e9:1d:b5:ec:94:7f:ee:35:b0:56:38:17:63: 8a:50:10:d7:1f:51:ba:93:47:b3:c4:e3:d3:5e:dc: 45:6c:e9:d9:86:be:c7:f7:9a:6a:cc:ea:6e:97:e7: 6d:59:92:33:73:df:b7:27:94:40:d9:33:7b:f5:38: ff:4e:22:5f:12:5e:99:4a:2d:d5:64:3e:9b:72:98: 6d:76:f2:6d:62:43:87:9c:bc:bb:6e:25:5c:4b:43: 02:b7:42:b9:5a:5f:e8:f8:2f:16:94:e0:77:03:32: c2:05:cd:86:2f:0e:62:c6:5d:25:9a:2b:d2:c0:55: 04:9f:b3:93:a6:b8:66:b7:72:33:44:68:a8:2e:d1: d5:77:9d:e1:e1:5c:84:c9:7c:b8:36:8a:50:6c:be: 0f:53:26:29:dd:55:d0:ac:72:a8:c1:b2:e9:2c:ed: 80:c3:f2:a8:8b:7c:c2:b0:f9:98:71:be:42:b4:4d: a5:9f:f5:d8:9f:8e:38:e1:f3:a0:9f:7a:7b:98:a5: 6a:ca:66:5e:dc:93:7d:72:0d:8c:c0:db:07:9c:8d: 79:9c:5f:82:8d:b0:fc:8d:97:b0:0f:3b:01:91:66: f1:2a:21:f4:d8:65:e6:61:30:d0:1d:5d:c7:80:39: af:68:de:99:36:bd:20:b7:06:f5:67:b7:b3:71:0c: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:C6:08:52:D7:CC:27:CD:94:8A:A3:07:09:3C:B3:0F:57:A2:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13d273c5-624e-3c6e-a8cf-9cf091a11d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a9:7e:6e:a1:a7:07:f8:3c:64:de:ad:82:65:6d:b5:60:5f: a0:8a:56:6e:3d:45:76:5d:a2:f4:a2:cb:34:3d:9c:84:67:7b: 09:34:8f:e2:b4:33:79:fa:17:f3:f3:8a:98:69:06:0e:5c:d5: 06:a0:fc:f4:be:54:7a:e7:70:d4:e6:5f:2c:00:96:80:79:c4: b3:60:16:43:43:d8:5b:a7:10:21:44:51:e1:bd:3e:9b:ae:48: 8b:71:80:4a:38:e1:bc:f5:80:eb:cf:e0:db:cf:0d:da:7e:10: 30:b8:d5:79:dc:a1:22:83:0b:06:1b:15:99:2e:a7:8b:ef:6a: 47:e7:79:aa:0a:3e:73:83:25:83:26:6b:67:cf:74:3e:c8:0e: 79:a3:2c:27:21:1a:fb:20:e9:cc:16:cf:90:0f:93:95:e5:fb: 6a:75:28:5c:e5:41:e9:ed:f1:e4:d5:d7:5c:c2:48:81:eb:b1: 5a:5f:29:fb:20:50:9c:9e:21:f2:55:f3:4e:59:7b:a9:b6:3b: f3:4e:94:f0:24:c1:19:df:20:d2:9c:c5:74:65:71:3f:77:f0: 60:43:7e:d7:24:12:cf:a4:89:15:89:5f:b5:e9:cc:32:84:ad: f8:68:cb:73:87:31:e7:75:63:c7:42:be:e0:80:3e:5e:c5:1a: 90:bd:bd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpA1EwktF4LX9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTg3YjFhMDUtNDg0MS00OGE5LTk3MzYtNzkxOWVlZWM4YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOkdteyUf+41sFY4F2OKUBDXH1G6k0ezxOPT XtxFbOnZhr7H95pqzOpul+dtWZIzc9+3J5RA2TN79Tj/TiJfEl6ZSi3VZD6bcpht dvJtYkOHnLy7biVcS0MCt0K5Wl/o+C8WlOB3AzLCBc2GLw5ixl0lmivSwFUEn7OT prhmt3IzRGioLtHVd53h4VyEyXy4NopQbL4PUyYp3VXQrHKowbLpLO2Aw/Koi3zC sPmYcb5CtE2ln/XYn4444fOgn3p7mKVqymZe3JN9cg2MwNsHnI15nF+CjbD8jZew DzsBkWbxKiH02GXmYTDQHV3HgDmvaN6ZNr0gtwb1Z7ezcQwf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAntxghS18wnzZSKowcJPLMPV6KBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNkMjczYzUtNjI0ZS0z YzZlLWE4Y2YtOWNmMDkxYTExZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+pfm6hpwf4PGTerYJlbbVgX6CKVm49RXZdovSiyzQ9nIRnewk0j+K0 M3n6F/PziphpBg5c1Qag/PS+VHrncNTmXywAloB5xLNgFkND2FunECFEUeG9Ppuu SItxgEo44bz1gOvP4NvPDdp+EDC41XncoSKDCwYbFZkup4vvakfneaoKPnODJYMm a2fPdD7IDnmjLCchGvsg6cwWz5APk5Xl+2p1KFzlQent8eTV11zCSIHrsVpfKfsg UJyeIfJV805Ze6m2O/NOlPAkwRnfINKcxXRlcT938GBDftckEs+kiRWJX7XpzDKE rfhoy3OHMed1Y8dCvuCAPl7FGpC9vQg= -----END CERTIFICATE-----Generated at Sun Jun 15 18:55:01 2025 by rpki-client