$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa File: 9546816c-7b43-371f-8ba4-9b740de36224.roa (raw, json) Hash identifier: S7RLz//WlTBiUPVZyiIY/q1oHDY60/qGK2tpPVexRj4= Subject key identifier: D9:BC:D2:A2:13:4D:FD:D8:45:CB:D2:3D:4A:56:99:7E:42:48:42:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8A587F1A17BFF41260F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.31.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8a:58:7f:1a:17:bf:f4:12:60:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=f3a8d92f-ac94-47f3-9c51-10772c206b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:8e:d1:91:60:0e:a6:d1:6e:8e:56:dc:f9: 98:5d:3e:9e:93:e8:93:ca:4a:a4:86:4a:53:10:cf: 6c:de:4d:be:14:5c:a9:a5:27:f9:82:d9:25:75:ab: e2:b0:d2:9d:34:f7:ab:d3:fd:b3:9c:12:99:71:95: 92:30:c5:a1:97:9d:25:59:ec:25:1c:7d:f9:04:9d: 38:8d:92:40:ff:c3:9a:92:f1:43:f8:14:df:63:d3: e7:53:bc:28:b0:6f:fc:d0:f9:28:05:a6:fe:33:4e: 21:6a:02:82:0b:90:e4:8d:d0:fb:b5:51:50:8a:81: 1d:83:c3:ce:fd:ae:b0:24:53:d9:d1:88:e3:89:0a: 03:01:73:9e:df:8c:91:45:61:ff:e1:69:4d:a5:59: c7:b3:73:47:ad:59:74:ec:ef:d0:e4:f8:d1:1c:93: ce:a7:f9:58:4f:10:21:95:e0:84:a8:99:a0:9a:29: 6f:3a:84:c0:e7:27:8c:0c:45:d0:81:1b:b9:06:92: e7:48:cd:36:a2:1a:7d:81:eb:78:4d:3f:f6:ba:e3: 94:67:bc:8f:8d:a6:a9:50:64:89:39:4c:e5:af:34: 9b:78:bf:57:20:2b:7b:ea:c0:f3:44:75:19:3c:9a: 46:22:f5:96:23:08:63:33:e2:df:3f:a5:8b:4c:0e: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BC:D2:A2:13:4D:FD:D8:45:CB:D2:3D:4A:56:99:7E:42:48:42:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9546816c-7b43-371f-8ba4-9b740de36224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:40:b6:33:80:b8:25:fe:0f:a7:ea:6e:fd:b8:63:41:a4:71: 94:d0:47:ea:d5:64:f3:5a:6c:62:7f:04:77:a8:70:9f:a9:c7: 7e:fc:02:87:e8:40:f6:45:4b:65:41:4d:39:7f:1d:3d:9a:18: cf:6a:7b:13:be:88:c5:c5:53:74:07:de:30:57:29:58:ff:fc: 76:58:af:b1:85:bc:c1:99:10:5f:bc:90:ca:11:16:df:b0:b2: a7:4d:7a:5c:22:28:e1:ca:21:6c:61:b7:f1:b6:e4:8f:9f:1b: ec:01:ab:5d:65:ce:fa:e0:45:23:fc:f9:ac:cf:6a:d6:af:6e: 39:56:bd:56:c4:7a:84:a8:ad:26:e8:7f:18:5d:21:fb:06:09: 3e:48:02:df:5e:c1:6e:ba:dc:08:3b:23:36:10:6f:18:04:90: 32:85:45:78:28:80:74:6e:3a:e3:29:61:ac:49:eb:68:de:57: 25:f7:13:c3:ca:54:5b:16:0c:f9:12:f2:f2:58:56:0b:af:a5: e0:4e:6f:31:b8:b2:db:56:5c:7c:32:69:60:b0:01:63:33:e1: 78:2d:87:79:f2:bd:b5:74:81:5e:f1:fa:a2:98:b5:79:3a:05: 40:20:22:c9:1c:49:0c:67:b0:97:2e:1f:8a:b8:b2:61:64:5b: 7f:e6:74:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qopYfxoXv/QSYPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZjNhOGQ5MmYtYWM5NC00N2YzLTljNTEtMTA3NzJjMjA2Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVCO0ZFgDqbRbo5W3PmYXT6ek+iTykqkhkpT EM9s3k2+FFyppSf5gtkldavisNKdNPer0/2znBKZcZWSMMWhl50lWewlHH35BJ04 jZJA/8OakvFD+BTfY9PnU7wosG/80PkoBab+M04hagKCC5DkjdD7tVFQioEdg8PO /a6wJFPZ0YjjiQoDAXOe34yRRWH/4WlNpVnHs3NHrVl07O/Q5PjRHJPOp/lYTxAh leCEqJmgmilvOoTA5yeMDEXQgRu5BpLnSM02ohp9get4TT/2uuOUZ7yPjaapUGSJ OUzlrzSbeL9XICt76sDzRHUZPJpGIvWWIwhjM+LfP6WLTA4p7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm80qITTf3YRcvSPUpWmX5CSEIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTU0NjgxNmMtN2I0My0z NzFmLThiYTQtOWI3NDBkZTM2MjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhAtjOAuCX+D6fqbv24Y0GkcZTQR+rVZPNabGJ/BHeocJ+px378Aofo QPZFS2VBTTl/HT2aGM9qexO+iMXFU3QH3jBXKVj//HZYr7GFvMGZEF+8kMoRFt+w sqdNelwiKOHKIWxht/G25I+fG+wBq11lzvrgRSP8+azPatavbjlWvVbEeoSorSbo fxhdIfsGCT5IAt9ewW663Ag7IzYQbxgEkDKFRXgogHRuOuMpYaxJ62jeVyX3E8PK VFsWDPkS8vJYVguvpeBObzG4sttWXHwyaWCwAWMz4Xgth3nyvbV0gV7x+qKYtXk6 BUAgIskcSQxnsJcuH4q4smFkW3/mdP8= -----END CERTIFICATE-----Generated at Mon Jun 16 14:57:57 2025 by rpki-client