$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa File: 88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa (raw, json) Hash identifier: MFOgeQnzez2edl8V2FEe0WBj4Dcg2mOrSJr8UeMs+pI= Subject key identifier: 3A:73:C7:F1:BF:13:DF:51:F0:3D:E2:2C:67:0A:73:D7:7F:0B:29:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2220D5A15F6622C74F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:22:20:d5:a1:5f:66:22:c7:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=e6cf7288-fe46-4e2e-9d72-3da227227048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:16:86:bd:8d:ec:87:a7:5a:f6:ea:82:c4: 07:23:64:12:54:7d:36:03:bb:a1:32:54:f1:11:90: 0a:fd:f5:f6:73:b0:ce:13:c9:32:96:18:fa:b6:00: c7:ee:6e:dd:46:02:32:73:34:d5:b8:ac:be:cb:ac: 33:f4:b4:74:df:ab:e2:f4:dd:e2:78:3a:b7:10:55: 3e:68:09:93:2c:e5:bc:33:5e:c2:79:46:e5:cb:26: 08:20:05:f0:74:1c:c2:3b:ce:b8:de:78:0f:eb:11: 45:c1:de:8c:4d:23:76:ab:af:88:eb:89:32:4e:a8: cd:1e:cd:fa:8c:8d:1b:03:a1:20:86:42:00:98:3d: f8:78:76:cd:c0:0a:9e:ac:a5:69:7a:b7:53:b4:cb: 60:5d:4d:00:13:fe:cb:bb:3d:f7:85:cb:30:a0:81: da:07:ca:6a:92:9e:6a:ce:ad:b4:ff:f7:26:2e:69: 08:13:33:4b:4b:30:42:64:4c:ee:af:85:20:e9:0b: 50:3b:00:ef:74:41:fd:3a:cc:d5:31:b5:b2:4b:31: cc:ea:e8:ce:79:d7:ce:4f:a7:60:a7:6e:5a:98:2a: 62:5b:2e:59:b7:a3:e8:1f:96:0c:c2:a7:44:46:40: a5:05:4b:df:a5:ac:75:4f:b1:6b:83:6b:96:a0:15: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:C7:F1:BF:13:DF:51:F0:3D:E2:2C:67:0A:73:D7:7F:0B:29:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c1:38:ff:42:7a:2e:24:98:95:77:35:67:d1:5b:b0:d2:74: 74:c1:4c:e7:38:96:27:ce:8d:61:15:79:0c:ff:00:16:18:16: 8e:02:21:08:76:90:f2:56:77:cf:e5:66:60:19:90:2a:60:d9: c8:3b:0e:9b:b9:0e:5c:91:c5:eb:f2:d9:eb:81:9f:4c:23:c9: d4:27:9b:03:21:08:bb:6a:5b:09:a7:84:6a:2c:9d:16:f5:c7: 84:4a:b3:92:0e:5a:10:88:7d:0d:f4:53:3a:7d:18:83:8d:c6: 7a:ed:9d:4f:0e:a2:4b:23:ab:3b:9d:59:3f:8d:e0:00:91:90: ab:7f:dd:64:f5:52:7e:6f:1d:60:89:21:1c:3a:73:79:9a:25: 9f:a5:83:a1:26:f2:47:ce:32:cc:aa:68:49:f5:01:68:01:2b: b3:fc:ad:18:c4:7f:a6:ed:b0:64:13:dd:4a:e2:7b:9a:79:3e: 71:7c:31:2b:e0:d6:87:a6:2c:aa:91:86:c2:cf:64:24:60:66: 26:37:ed:63:22:83:61:2e:df:01:d3:ce:ff:c0:8a:d3:08:92: f3:5a:4e:de:e8:54:69:64:13:eb:14:07:75:14:ac:29:6f:65: d9:23:ae:67:9a:51:48:a9:a0:01:57:92:8e:04:2b:4d:48:aa: ff:02:99:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiIg1aFfZiLHTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZTZjZjcyODgtZmU0Ni00ZTJlLTlkNzItM2RhMjI3MjI3MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVwWhr2N7IenWvbqgsQHI2QSVH02A7uhMlTx EZAK/fX2c7DOE8kylhj6tgDH7m7dRgIyczTVuKy+y6wz9LR036vi9N3ieDq3EFU+ aAmTLOW8M17CeUblyyYIIAXwdBzCO8643ngP6xFFwd6MTSN2q6+I64kyTqjNHs36 jI0bA6EghkIAmD34eHbNwAqerKVperdTtMtgXU0AE/7Luz33hcswoIHaB8pqkp5q zq20//cmLmkIEzNLSzBCZEzur4Ug6QtQOwDvdEH9OszVMbWySzHM6ujOedfOT6dg p25amCpiWy5Zt6PoH5YMwqdERkClBUvfpax1T7Frg2uWoBX1/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpzx/G/E99R8D3iLGcKc9d/CynKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhjM2MyM2ItODQyMi0z MGYwLWE4MDYtYzdmMTIxM2Y2ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjBOP9Cei4kmJV3NWfRW7DSdHTBTOc4lifOjWEVeQz/ABYYFo4CIQh2 kPJWd8/lZmAZkCpg2cg7Dpu5DlyRxevy2euBn0wjydQnmwMhCLtqWwmnhGosnRb1 x4RKs5IOWhCIfQ30Uzp9GIONxnrtnU8OoksjqzudWT+N4ACRkKt/3WT1Un5vHWCJ IRw6c3maJZ+lg6Em8kfOMsyqaEn1AWgBK7P8rRjEf6btsGQT3Urie5p5PnF8MSvg 1oemLKqRhsLPZCRgZiY37WMig2Eu3wHTzv/AitMIkvNaTt7oVGlkE+sUB3UUrClv ZdkjrmeaUUipoAFXko4EK01Iqv8CmYE= -----END CERTIFICATE-----Generated at Sun Jun 15 20:01:16 2025 by rpki-client