$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa File: 88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa (raw, json) Hash identifier: LXxCmzSmPM9GWRsM+02gTYwbXBGV/AwLZP/8oqDPXuM= Subject key identifier: 78:2D:02:5B:C8:3A:62:37:F3:61:70:0E:E7:6A:72:1F:55:AE:86:6E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA35FF1F46BBA4880DE1D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa Signing time: Thu 20 Feb 2025 18:15:28 +0000 ROA not before: Thu 20 Feb 2025 18:15:28 +0000 ROA not after: Wed 21 May 2025 17:15:28 +0000 asID: 7029 IP address blocks: 71.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:35:ff:1f:46:bb:a4:88:0d:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:28 2025 GMT Not After : May 21 17:15:28 2025 GMT Subject: CN=e656b167-78bc-413c-a39e-0b018a469c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:57:71:a2:72:0d:70:6b:58:6c:dc:41:08: 4f:5d:65:68:7f:1d:0b:44:de:86:01:78:83:97:f5: f5:be:1a:ee:c2:f8:4e:cb:ff:a9:4a:04:67:7e:4f: 6d:2a:da:f4:22:a6:d4:94:1e:1a:40:49:c6:f7:72: 9a:31:46:9e:51:21:d7:9a:ac:6f:d9:5c:21:1b:4a: 1b:13:5c:e4:0f:4b:8e:cc:64:85:83:5c:43:e6:87: fa:ef:7a:0e:f1:75:bb:0a:32:86:e1:f2:b2:c9:9a: 82:b4:f3:6c:52:63:fa:b8:dd:ef:62:73:58:f6:5a: bc:94:c3:55:c1:e6:37:6f:6c:4c:f9:3b:f5:b3:35: 63:22:56:ce:c5:cc:dc:bb:aa:ef:bf:ed:6b:2b:06: c6:f5:c6:16:aa:b2:b8:d1:46:0e:b0:dc:78:83:8a: 57:1e:66:a0:23:78:d0:31:2a:16:56:47:12:a7:9a: cd:b5:f6:d8:b9:98:5d:99:e9:ae:2f:46:10:f4:20: ae:54:ad:08:c5:32:66:8e:40:57:2d:05:6c:e5:d5: 09:32:d6:b7:e1:00:02:d5:45:48:2a:fa:3d:05:df: d6:e2:72:39:d1:92:7d:89:5b:d1:7b:bb:d7:7d:00: 12:be:91:2e:3c:de:59:3d:76:de:7f:12:55:83:e7: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2D:02:5B:C8:3A:62:37:F3:61:70:0E:E7:6A:72:1F:55:AE:86:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:0c:85:37:2f:92:09:5e:61:75:47:dc:7f:d8:87:0b:8a:5c: 44:ca:a0:b6:24:08:4e:07:ad:75:12:cd:2e:a6:fd:36:f7:4b: 9e:3c:af:3a:6e:1e:f6:22:e1:6c:b8:be:aa:5d:94:ea:ce:49: 18:ad:73:5c:73:3e:42:b3:76:97:a1:ae:d5:ea:a0:c3:7c:00: d3:5a:ad:5e:e2:7e:00:d2:cb:4f:03:7f:d2:14:78:15:11:2b: e2:86:7c:19:e9:c7:a4:c6:19:c0:bc:82:d4:6b:67:f8:4b:73: c7:58:63:d9:26:82:b6:de:eb:a4:82:d2:68:80:57:f3:22:07: 1c:d3:ba:34:e0:98:c4:c6:dd:13:4b:c6:b0:c5:94:d1:a7:e9: 5f:b8:ad:e3:13:f9:a8:36:13:90:a7:75:99:81:fa:53:65:09: b8:84:2f:ab:e3:bf:6e:96:2f:ed:7a:ca:32:a2:72:0b:c6:16: f7:0f:72:06:c2:a7:06:f2:19:fb:dc:d7:f8:8b:37:0e:53:2d: 88:50:56:ec:8c:dc:14:87:e0:62:ef:9f:47:46:ea:64:80:14: ad:d7:bc:29:cb:cf:95:f3:29:9a:05:19:73:c6:32:db:9a:d1: 37:95:be:ad:2a:05:c2:78:3e:df:a9:29:94:90:d0:66:11:90: 4c:64:96:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqjX/H0a7pIgN4dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUyOFoXDTI1MDUyMTE3MTUyOFowLzEtMCsGA1UEAxMk ZTY1NmIxNjctNzhiYy00MTNjLWEzOWUtMGIwMThhNDY5YzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlBXcaJyDXBrWGzcQQhPXWVofx0LRN6GAXiD l/X1vhruwvhOy/+pSgRnfk9tKtr0IqbUlB4aQEnG93KaMUaeUSHXmqxv2VwhG0ob E1zkD0uOzGSFg1xD5of673oO8XW7CjKG4fKyyZqCtPNsUmP6uN3vYnNY9lq8lMNV weY3b2xM+Tv1szVjIlbOxczcu6rvv+1rKwbG9cYWqrK40UYOsNx4g4pXHmagI3jQ MSoWVkcSp5rNtfbYuZhdmemuL0YQ9CCuVK0IxTJmjkBXLQVs5dUJMta34QAC1UVI Kvo9Bd/W4nI50ZJ9iVvRe7vXfQASvpEuPN5ZPXbefxJVg+ciAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgtAlvIOmI382FwDudqch9VroZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhjM2MyM2ItODQyMi0z MGYwLWE4MDYtYzdmMTIxM2Y2ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYMhTcvkgleYXVH3H/YhwuKXETKoLYkCE4HrXUSzS6m/Tb3S548rzpu HvYi4Wy4vqpdlOrOSRitc1xzPkKzdpehrtXqoMN8ANNarV7ifgDSy08Df9IUeBUR K+KGfBnpx6TGGcC8gtRrZ/hLc8dYY9kmgrbe66SC0miAV/MiBxzTujTgmMTG3RNL xrDFlNGn6V+4reMT+ag2E5CndZmB+lNlCbiEL6vjv26WL+16yjKicgvGFvcPcgbC pwbyGfvc1/iLNw5TLYhQVuyM3BSH4GLvn0dG6mSAFK3XvCnLz5XzKZoFGXPGMtua 0TeVvq0qBcJ4Pt+pKZSQ0GYRkExklhY= -----END CERTIFICATE-----Generated at Sun Apr 27 06:57:10 2025 by rpki-client