$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa File: 5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa (raw, json) Hash identifier: qLA66vFVFzQ7wdsuAmB4CKzeO1W3s7Y5PCm5Ub290t4= Subject key identifier: FA:1F:42:26:BC:64:CB:DD:F1:2E:6D:D2:75:A6:D6:45:3C:68:FC:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849678C529B377A0D068AC44340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa Signing time: Thu 03 Apr 2025 15:04:49 +0000 ROA not before: Thu 03 Apr 2025 15:04:49 +0000 ROA not after: Wed 02 Jul 2025 15:04:49 +0000 asID: 7029 IP address blocks: 71.29.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:8c:52:9b:37:7a:0d:06:8a:c4:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 3 15:04:49 2025 GMT Not After : Jul 2 15:04:49 2025 GMT Subject: CN=0097a4e8-4dd7-4b60-b7b9-bccd411dee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:e9:91:ac:bb:75:ec:9c:71:97:2f:f1:63: 00:8a:d2:35:6a:95:b9:f7:f9:80:8c:5e:be:fb:f1: d0:0a:51:a4:a1:aa:68:cc:94:f4:82:cd:34:0a:33: 20:98:02:db:41:e0:b2:fa:47:ad:09:01:d5:92:48: 3b:0b:97:83:ae:53:f8:50:b3:1d:5c:93:4f:91:49: 18:80:2e:8f:f0:7d:50:40:ee:50:ec:85:4b:c8:c2: 0d:94:c4:2c:b9:e7:d1:08:e9:83:e2:1c:7f:a4:f3: f1:c0:66:e6:bd:44:47:52:80:95:d7:c9:ca:40:b7: b2:70:a0:56:5b:b9:13:ff:e8:d8:95:35:0a:0b:c1: 95:b5:3d:05:ed:07:6e:11:c1:13:48:a4:56:f6:0b: 11:4f:fa:4b:0d:fa:57:18:44:64:cd:16:ae:a9:35: c7:f7:5a:55:d3:08:78:ad:fc:dd:5a:64:8b:c2:3e: b1:f8:96:57:6d:7e:7e:a2:58:2a:a4:11:07:db:35: 95:b9:5b:5c:00:31:a5:d1:8d:34:21:f2:43:23:20: d5:ca:c1:7c:e0:71:e1:21:e6:5f:54:81:4c:66:a7: b6:95:55:ee:42:04:94:cc:04:90:17:d5:e0:30:9c: d0:1d:a2:c1:98:0e:3b:ab:8a:14:7f:f9:7e:b6:21: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1F:42:26:BC:64:CB:DD:F1:2E:6D:D2:75:A6:D6:45:3C:68:FC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:dd:1b:cd:1b:c1:8b:7b:45:0d:32:d5:3c:3d:0f:7f:dc:95: 08:bc:f2:c4:54:c9:33:7d:64:52:eb:e8:ce:83:7a:f2:e3:14: 9d:2b:d8:81:0b:c3:c6:4c:f0:a6:49:38:c9:1d:f2:7e:39:bb: b9:a3:2b:c1:1b:91:60:a4:5e:99:96:50:9e:af:ef:4e:d4:d9: f0:7f:83:ee:81:43:a3:7a:2d:41:62:71:7f:1a:8b:e2:55:ff: 31:f5:30:1f:13:3f:39:40:79:c1:a9:5b:0d:bd:fd:ef:66:4c: 41:de:96:bd:b0:9a:4d:0d:78:8d:88:8d:3d:e1:cb:5b:76:f1: 07:43:05:8c:d8:3c:73:f9:a2:dc:7a:48:2d:4a:5d:41:eb:e2: e7:3d:e0:0b:69:a1:2c:c3:56:b9:9a:7a:4f:c6:ec:f9:ec:1c: c8:66:f4:3b:ed:0e:e7:23:15:e5:83:b9:ba:ae:f5:7c:2b:0e: 29:4a:c4:42:47:3c:3f:ba:f6:89:7f:55:e9:6b:39:96:53:db: 59:67:1b:df:06:05:4f:82:fa:f9:ba:23:2d:e5:b1:2c:4f:18: 59:db:90:33:a3:82:c5:6b:52:50:c3:40:9d:5a:18:75:50:11: 89:f3:4d:0a:9f:78:31:a2:37:52:a4:c9:3b:ba:15:61:f8:4f: 2a:06:59:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnjFKbN3oNBorEQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwMzE1MDQ0OVoXDTI1MDcwMjE1MDQ0OVowLzEtMCsGA1UEAxMk MDA5N2E0ZTgtNGRkNy00YjYwLWI3YjktYmNjZDQxMWRlZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre/pkay7deyccZcv8WMAitI1apW59/mAjF6+ +/HQClGkoapozJT0gs00CjMgmALbQeCy+ketCQHVkkg7C5eDrlP4ULMdXJNPkUkY gC6P8H1QQO5Q7IVLyMINlMQsuefRCOmD4hx/pPPxwGbmvURHUoCV18nKQLeycKBW W7kT/+jYlTUKC8GVtT0F7QduEcETSKRW9gsRT/pLDfpXGERkzRauqTXH91pV0wh4 rfzdWmSLwj6x+JZXbX5+olgqpBEH2zWVuVtcADGl0Y00IfJDIyDVysF84HHhIeZf VIFMZqe2lVXuQgSUzASQF9XgMJzQHaLBmA47q4oUf/l+tiHoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPofQia8ZMvd8S5t0nWm1kU8aPzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM5ZGVhMjctNmQyNi0z MTE4LWFjZWMtYWIzYmRmM2UxMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHdG80bwYt7RQ0y1Tw9D3/clQi88sRUyTN9ZFLr6M6DevLjFJ0r2IEL w8ZM8KZJOMkd8n45u7mjK8EbkWCkXpmWUJ6v707U2fB/g+6BQ6N6LUFicX8ai+JV /zH1MB8TPzlAecGpWw29/e9mTEHelr2wmk0NeI2IjT3hy1t28QdDBYzYPHP5otx6 SC1KXUHr4uc94AtpoSzDVrmaek/G7PnsHMhm9DvtDucjFeWDubqu9XwrDilKxEJH PD+69ol/VelrOZZT21lnG98GBU+C+vm6Iy3lsSxPGFnbkDOjgsVrUlDDQJ1aGHVQ EYnzTQqfeDGiN1KkyTu6FWH4TyoGWdo= -----END CERTIFICATE-----Generated at Sun Jun 15 11:29:12 2025 by rpki-client