$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa File: 95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa (raw, json) Hash identifier: vayYlBgKcFmEwQxGkh0CfTOFhvD8OVvXKLp7KFDI36s= Subject key identifier: E1:E5:DD:8C:9A:DF:11:F1:51:6A:B1:6B:F2:F6:2C:A1:56:57:1A:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A11C8323699A4299FF200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 71.29.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:c8:32:36:99:a4:29:9f:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=6740d60a-bc6a-4054-8e99-1ba68e96621b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:f9:cf:65:4f:67:f2:a6:35:e1:44:36:e0: 8d:0d:ea:55:76:ae:39:4b:3a:dc:97:6b:ad:45:54: 07:3e:a8:1f:91:cd:a6:1a:15:ea:03:08:62:bf:bb: 9d:db:2c:e8:d1:af:5e:27:cc:08:a0:45:fb:37:62: 23:cb:36:40:62:ae:47:ef:86:9b:80:23:ad:27:e9: 95:e0:b0:27:93:27:a0:12:32:34:95:c5:21:39:24: 6b:16:40:30:c6:57:56:16:a6:d8:65:be:26:ca:03: 29:6f:6c:ac:75:f7:5e:26:5b:bd:da:60:26:47:90: 55:5e:34:b0:a3:0a:a3:21:8b:4a:b6:ae:65:2b:01: 6c:e9:0c:89:8d:6e:73:11:6d:2e:07:bf:2a:73:02: ba:ec:05:11:35:ad:4c:9a:b0:66:d6:3a:3d:30:e0: 16:91:f1:1e:3a:1a:80:87:9e:17:9c:e6:24:c7:4f: 97:77:40:48:05:dd:3b:1f:23:0b:03:5c:f7:1a:c9: e8:7e:f9:6f:6a:bf:65:4c:5a:ba:5f:07:98:4b:1b: dc:78:e3:1a:86:f5:6d:a7:22:fb:9b:13:ca:7e:e7: db:82:df:7c:1f:69:6b:6e:63:d0:75:a2:2f:9a:7c: a7:d9:05:0b:f4:54:cc:b6:b2:2d:de:60:fa:46:82: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E5:DD:8C:9A:DF:11:F1:51:6A:B1:6B:F2:F6:2C:A1:56:57:1A:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95ecf8b3-b1d0-328e-b28d-0fd5c239f166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bf:e1:b8:a3:19:93:09:1d:54:3c:63:e3:c3:ce:99:e8:5f: 20:a3:fa:bd:fe:06:ba:46:c4:88:e9:f4:6d:db:14:9e:79:8d: 02:21:86:25:e6:66:6b:00:bd:a3:2c:78:75:f6:d1:7c:32:a8: 2d:aa:55:f4:53:9b:04:bb:3c:05:2a:97:40:d0:11:24:56:32: de:cc:a1:2a:ea:38:31:06:f2:21:9c:b0:c0:6a:58:15:c4:08: 9e:c8:4b:82:de:33:81:33:c8:90:a1:9d:a3:38:bf:53:1e:85: 0d:35:2a:a6:db:b6:41:a9:03:10:c3:31:50:c8:7b:30:e8:34: cf:41:ec:30:c9:ee:c9:97:b0:ae:2c:8e:48:c1:ed:65:13:c7: 80:77:b5:34:41:70:f1:21:d2:bf:f5:2b:3d:24:9b:9c:b8:bd: 48:dd:e9:2d:be:41:e2:30:50:95:db:fb:fb:53:ca:7d:bf:a3: b9:86:b4:fc:a7:ef:2d:e1:11:02:48:c9:1f:9a:d8:7e:9d:0d: d2:0c:12:b8:c2:2b:7f:41:26:bf:e9:bf:99:9c:22:fc:04:67: ad:e3:ea:b3:a7:f1:30:d1:f6:09:be:19:31:d1:2d:7d:75:18: bd:37:81:7b:9c:8f:b9:81:84:a5:25:da:e8:11:50:0f:5b:9b: 1b:8c:7a:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhHIMjaZpCmf8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Njc0MGQ2MGEtYmM2YS00MDU0LThlOTktMWJhNjhlOTY2MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhT5z2VPZ/KmNeFENuCNDepVdq45Szrcl2ut RVQHPqgfkc2mGhXqAwhiv7ud2yzo0a9eJ8wIoEX7N2IjyzZAYq5H74abgCOtJ+mV 4LAnkyegEjI0lcUhOSRrFkAwxldWFqbYZb4mygMpb2ysdfdeJlu92mAmR5BVXjSw owqjIYtKtq5lKwFs6QyJjW5zEW0uB78qcwK67AURNa1MmrBm1jo9MOAWkfEeOhqA h54XnOYkx0+Xd0BIBd07HyMLA1z3Gsnofvlvar9lTFq6XweYSxvceOMahvVtpyL7 mxPKfufbgt98H2lrbmPQdaIvmnyn2QUL9FTMtrIt3mD6RoJcXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHl3Yya3xHxUWqxa/L2LKFWVxraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVlY2Y4YjMtYjFkMC0z MjhlLWIyOGQtMGZkNWMyMzlmMTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC/4bijGZMJHVQ8Y+PDzpnoXyCj+r3+BrpGxIjp9G3bFJ55jQIhhiXm ZmsAvaMseHX20XwyqC2qVfRTmwS7PAUql0DQESRWMt7MoSrqODEG8iGcsMBqWBXE CJ7IS4LeM4EzyJChnaM4v1MehQ01KqbbtkGpAxDDMVDIezDoNM9B7DDJ7smXsK4s jkjB7WUTx4B3tTRBcPEh0r/1Kz0km5y4vUjd6S2+QeIwUJXb+/tTyn2/o7mGtPyn 7y3hEQJIyR+a2H6dDdIMErjCK39BJr/pv5mcIvwEZ63j6rOn8TDR9gm+GTHRLX11 GL03gXucj7mBhKUl2ugRUA9bmxuMehQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:14:06 2025 by rpki-client