$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa File: 4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa (raw, json) Hash identifier: nIudVe456dZ9wSoon4uolbL6wA3MpmecgqLgXs/QNWY= Subject key identifier: B0:BC:2E:E6:CD:8C:B5:66:EB:10:A6:CD:FB:6E:D7:67:F3:CE:E6:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71602632FA14EFA4046880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:60:26:32:fa:14:ef:a4:04:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d63478f9-3da3-42ec-be49-53ef97b0c229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:f0:09:bf:c0:a1:12:bd:73:f4:76:fd:18: 2a:4f:f2:66:8f:3c:6c:41:a9:be:ef:62:92:6e:00: bc:b0:49:e3:18:31:11:2a:53:49:a6:4c:2a:e6:31: c5:40:90:7d:a9:71:30:be:62:e2:4f:0a:38:05:87: b2:ea:2e:fd:9a:31:a0:fe:3d:56:a6:e0:19:52:71: 65:c2:57:59:82:14:f3:0e:3a:a3:b0:87:a6:83:da: 32:f0:e4:bf:b2:50:f4:d5:b4:b8:fc:23:80:b7:6a: 5b:f4:fb:da:b9:e1:5b:24:24:1b:a6:20:47:bb:51: 99:76:e3:c5:f2:05:dd:d2:d0:06:46:90:d0:81:b4: 30:ca:21:63:3e:e0:a2:74:f7:d7:96:a8:3c:6e:34: 78:0e:f3:75:85:f3:a3:7a:a3:38:66:df:c2:da:96: 37:ca:a8:20:5c:c3:7e:b1:ed:fc:f1:94:ef:80:ef: c6:ae:29:42:c2:62:2e:e8:aa:98:10:3e:f8:01:ad: bd:35:1b:a5:24:3b:d2:76:d6:8a:a1:c2:7d:11:9b: 03:73:e1:ee:be:19:eb:29:36:43:23:8c:64:92:ed: c6:bc:b5:05:6f:04:4c:5c:54:62:71:ce:08:fb:65: a7:ee:e8:81:7b:0b:c5:a1:fc:7c:fb:a3:22:e2:19: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:2E:E6:CD:8C:B5:66:EB:10:A6:CD:FB:6E:D7:67:F3:CE:E6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4aedf5bb-03e5-3ae4-80fb-6a89e13d6802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:eb:bc:0a:ff:47:96:14:4d:1a:98:62:c6:83:f2:97:e4:0e: b7:13:d7:7b:fa:18:40:99:1f:53:22:23:9f:9f:48:e8:c2:16: 31:39:64:a3:48:6f:ed:a4:31:7e:38:e8:86:16:1f:11:99:40: f8:6f:b5:38:46:cc:42:fb:dc:07:83:9a:e3:9e:89:45:8e:cc: 77:82:f4:81:ad:11:d4:a9:60:64:c6:db:81:74:b8:fc:cc:69: e0:f2:dc:2b:fb:b9:fc:fd:78:c8:4b:21:37:bb:e5:02:b7:be: ca:41:31:b0:3e:d9:66:6d:4b:51:b0:9e:2d:5c:01:f6:f7:0c: 5c:69:d7:fa:50:6d:15:c4:08:30:66:92:56:78:84:9f:8f:15: f6:2d:86:17:38:97:20:af:84:bd:b3:b7:75:6e:30:35:be:46: df:3f:47:16:72:58:a3:c0:d4:c9:f3:7b:c4:0c:f3:e3:85:7f: de:1e:d1:00:11:ea:fd:79:45:7a:96:1e:39:f6:53:71:79:aa: 3c:52:4a:7c:35:4b:6e:b5:ce:76:56:00:ee:66:9f:06:51:79: 54:55:11:24:9f:df:5e:17:62:e1:69:58:65:4c:40:34:f8:ef: 69:a7:c9:44:8d:11:7e:68:9f:05:d5:ac:54:d8:cb:05:81:27: 18:2b:50:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWAmMvoU76QEaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDYzNDc4ZjktM2RhMy00MmVjLWJlNDktNTNlZjk3YjBjMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7TwCb/AoRK9c/R2/RgqT/JmjzxsQam+72KS bgC8sEnjGDERKlNJpkwq5jHFQJB9qXEwvmLiTwo4BYey6i79mjGg/j1WpuAZUnFl wldZghTzDjqjsIemg9oy8OS/slD01bS4/COAt2pb9PvaueFbJCQbpiBHu1GZduPF 8gXd0tAGRpDQgbQwyiFjPuCidPfXlqg8bjR4DvN1hfOjeqM4Zt/C2pY3yqggXMN+ se388ZTvgO/GrilCwmIu6KqYED74Aa29NRulJDvSdtaKocJ9EZsDc+HuvhnrKTZD I4xkku3GvLUFbwRMXFRicc4I+2Wn7uiBewvFofx8+6Mi4hl66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLC8LubNjLVm6xCmzftu12fzzubVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGFlZGY1YmItMDNlNS0z YWU0LTgwZmItNmE4OWUxM2Q2ODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXrvAr/R5YUTRqYYsaD8pfkDrcT13v6GECZH1MiI5+fSOjCFjE5ZKNI b+2kMX446IYWHxGZQPhvtThGzEL73AeDmuOeiUWOzHeC9IGtEdSpYGTG24F0uPzM aeDy3Cv7ufz9eMhLITe75QK3vspBMbA+2WZtS1Gwni1cAfb3DFxp1/pQbRXECDBm klZ4hJ+PFfYthhc4lyCvhL2zt3VuMDW+Rt8/RxZyWKPA1Mnze8QM8+OFf94e0QAR 6v15RXqWHjn2U3F5qjxSSnw1S261znZWAO5mnwZReVRVESSf314XYuFpWGVMQDT4 72mnyUSNEX5onwXVrFTYywWBJxgrUGA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:17:34 2025 by rpki-client