$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa File: 4a247f56-b1dc-3ee6-aeef-1edd281752db.roa (raw, json) Hash identifier: dlXOQV81lMR/JAe5hFR8QLfOVF1NaTIGxH25eLwbzUY= Subject key identifier: F1:3B:26:35:D9:4D:EF:CC:48:8D:DF:1D:9B:C7:45:79:EB:3F:16:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499DBF4985CAA737F5708AF200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 71.31.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:49:85:ca:a7:37:f5:70:8a:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=9ac9bc52-39da-411c-afaa-6d141b54db74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:79:24:a8:a3:c6:b5:b8:f8:aa:5f:13:7a: 46:18:e1:f2:78:0c:f0:89:17:fa:b6:24:9f:c7:4b: a9:5a:ef:0d:c0:e2:f8:dc:2f:63:36:e9:a9:67:c2: 6a:87:a5:81:88:d0:2c:24:55:d4:bc:11:5a:5a:63: 0e:5f:e7:e8:5a:c0:e2:a3:de:6b:06:95:e0:57:45: cc:50:dd:a1:7f:05:fe:fc:12:8c:e2:4e:e9:09:9e: 88:e0:87:24:dc:dc:79:89:af:e8:61:8a:fc:11:14: d9:7a:e3:6b:e1:42:b7:08:4d:77:4d:71:ae:44:c6: a8:36:4b:d9:29:84:01:46:c7:10:a6:d1:54:7b:ab: 85:24:50:0e:61:aa:05:a9:e4:e5:dd:1e:e0:c8:9a: 45:05:ef:68:bb:51:b4:5a:b1:11:97:be:bd:17:98: ea:23:4e:ae:a8:c3:cc:f9:1b:07:19:ae:4b:6a:ec: b9:06:ed:e5:af:dd:76:12:05:fc:58:33:54:e6:92: e0:12:67:44:d5:6c:65:d0:32:d7:4e:bf:75:77:06: 1d:fe:d1:23:f8:6e:46:62:b4:51:c7:b6:72:06:f9: 59:95:03:6a:18:61:6b:41:f0:8f:3c:e2:a3:7e:1c: 4b:d0:38:c5:3e:32:23:58:ac:fe:ef:34:b8:bb:e2: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3B:26:35:D9:4D:EF:CC:48:8D:DF:1D:9B:C7:45:79:EB:3F:16:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3d:77:03:eb:27:9b:ce:5b:09:45:dc:fb:c3:fb:59:2d:8f: 1b:87:1c:45:ce:db:54:b8:c2:71:45:62:23:86:7f:55:bb:e8: e4:ef:03:26:ba:8f:eb:90:d6:e5:3a:4d:e9:cc:3f:e2:c7:36: 8b:3e:b9:a1:ff:58:20:ee:42:dd:d3:9f:05:2d:d4:d6:26:b2: 67:09:c6:48:99:74:f5:29:c5:a3:79:92:6f:e5:cd:ca:4c:3d: d9:35:30:b5:d7:ed:fa:2b:13:53:e7:aa:66:93:e8:7c:06:2f: 82:78:a5:12:d5:db:89:3e:ae:2e:69:9e:e5:62:3f:e0:70:2a: ab:a9:0e:f7:69:c9:ae:b0:d7:7e:85:76:83:f7:96:26:f4:3c: be:63:0b:9d:3e:c2:ca:cf:d3:b7:f9:b2:18:ee:5c:77:a1:91: 16:b3:30:b1:c9:5f:a6:b7:b5:61:7e:fa:47:a6:65:6c:d4:03: 6a:f3:2a:a1:37:16:91:df:d0:d9:86:70:a4:ac:1e:84:37:dd: 03:3f:f1:dd:01:d4:cc:d5:b7:04:b6:e4:40:6a:34:b9:58:90: 87:1a:2a:99:72:08:00:88:ac:67:5b:33:69:d6:80:9b:b1:41: a2:08:f5:07:69:1f:24:0b:c1:00:de:4f:5d:ad:aa:23:24:7c: 52:a1:c5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdv0mFyqc39XCK8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OWFjOWJjNTItMzlkYS00MTFjLWFmYWEtNmQxNDFiNTRkYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/p5JKijxrW4+KpfE3pGGOHyeAzwiRf6tiSf x0upWu8NwOL43C9jNumpZ8Jqh6WBiNAsJFXUvBFaWmMOX+foWsDio95rBpXgV0XM UN2hfwX+/BKM4k7pCZ6I4Ick3Nx5ia/oYYr8ERTZeuNr4UK3CE13TXGuRMaoNkvZ KYQBRscQptFUe6uFJFAOYaoFqeTl3R7gyJpFBe9ou1G0WrERl769F5jqI06uqMPM +RsHGa5Lauy5Bu3lr912EgX8WDNU5pLgEmdE1Wxl0DLXTr91dwYd/tEj+G5GYrRR x7ZyBvlZlQNqGGFrQfCPPOKjfhxL0DjFPjIjWKz+7zS4u+IJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE7JjXZTe/MSI3fHZvHRXnrPxZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyNDdmNTYtYjFkYy0z ZWU2LWFlZWYtMWVkZDI4MTc1MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA9dwPrJ5vOWwlF3PvD+1ktjxuHHEXO21S4wnFFYiOGf1W76OTvAya6 j+uQ1uU6TenMP+LHNos+uaH/WCDuQt3TnwUt1NYmsmcJxkiZdPUpxaN5km/lzcpM Pdk1MLXX7forE1PnqmaT6HwGL4J4pRLV24k+ri5pnuViP+BwKqupDvdpya6w136F doP3lib0PL5jC50+wsrP07f5shjuXHehkRazMLHJX6a3tWF++kemZWzUA2rzKqE3 FpHf0NmGcKSsHoQ33QM/8d0B1MzVtwS25EBqNLlYkIcaKplyCACIrGdbM2nWgJux QaII9QdpHyQLwQDeT12tqiMkfFKhxTw= -----END CERTIFICATE-----Generated at Sun Apr 27 02:22:30 2025 by rpki-client