$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json) Hash identifier: 57yBcZnsdXj65EOpaOZOCgFqgFrxAG3IbNCmt0ttKtQ= Subject key identifier: 53:F6:14:38:78:BF:2E:71:8F:19:44:6A:34:60:E0:EA:3F:1F:84:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7168381F8E5EA88DB0A700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:68:38:1f:8e:5e:a8:8d:b0:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a2e5ae2f-226f-4392-beab-8b2420e08b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:a2:94:3a:37:2e:be:33:6b:68:f8:36:66: 7c:80:29:58:81:3e:65:3f:41:2c:94:46:20:1d:84: 2a:c2:69:c3:42:e0:8d:e9:a6:71:f3:18:ee:dc:ad: e5:26:4b:b9:c2:de:ad:6e:d2:b3:38:16:12:d6:fd: d9:59:35:08:db:9e:c2:f8:7d:48:e1:19:68:74:e6: b9:f5:e2:ac:d1:9f:67:73:58:a2:86:50:14:c6:e7: 4a:e5:21:9d:1d:8f:9a:21:a3:ff:f6:31:bb:d5:18: 7b:83:27:09:ed:0a:db:65:bc:cc:92:b3:27:8b:3f: c6:85:ae:3e:8e:ee:d3:0a:12:77:f4:8b:7c:ce:57: 83:43:a6:ed:36:21:52:8c:02:97:6b:93:06:cc:15: a2:6b:8f:ac:ad:85:6c:ed:f9:d3:40:38:65:73:84: ba:3d:60:e2:c9:d0:00:e2:57:39:2f:01:80:e4:a2: 91:44:3d:d7:74:05:dc:45:4d:b9:dc:09:89:d4:46: 9c:5c:ff:3a:ec:a4:b9:d0:6a:d5:e8:1a:56:a4:8b: f3:72:73:c0:04:80:9d:42:07:47:de:db:53:7e:36: 66:76:4b:19:59:d4:95:c1:df:24:d9:38:73:cb:a9: 7a:d2:3f:ab:d9:d2:e9:e9:28:d4:a4:b7:f4:26:fb: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:14:38:78:BF:2E:71:8F:19:44:6A:34:60:E0:EA:3F:1F:84:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ed:3b:ee:b6:f3:d9:46:15:99:ac:21:7f:53:c0:0d:0b:b1: 0e:ea:55:65:e6:ce:82:6c:b9:85:6b:1c:0a:29:c8:88:d5:bc: d6:24:10:49:25:cc:b3:dd:d4:1a:0a:86:be:cc:12:c2:1a:1d: 8f:1c:3e:3e:f6:e2:bb:e4:d5:43:cd:7c:e0:8d:56:ac:6f:56: 93:95:c1:5a:a3:7a:8a:91:96:d3:ea:68:3e:50:c7:54:02:58: a6:b9:a9:16:5d:66:6a:fa:91:5f:89:d3:b4:24:c5:f8:82:ec: 30:ed:ac:78:74:c5:7b:f2:87:c8:66:de:1f:e2:5e:5a:8c:65: 83:33:96:e0:7d:da:6b:ed:a4:93:c6:6b:57:3c:d5:2f:b4:d4: 9a:9c:90:61:fa:39:db:cf:90:00:3c:d7:f8:45:f0:e2:3b:24: cc:b0:ba:8b:d8:0f:a5:48:e8:8e:f5:07:3f:2c:c6:03:0a:2d: 22:19:5c:52:8f:05:c2:60:00:5e:58:1f:25:51:dc:d6:fb:29: 3b:69:bc:04:82:2a:ce:c0:e3:0a:1e:fc:d7:6e:26:58:d5:c4: a0:fc:ed:07:38:43:10:14:cf:92:c8:8d:48:cb:42:42:e9:00: f4:c7:b5:d5:45:53:7f:02:e1:aa:65:3e:8c:2f:74:69:e5:87: 64:21:a0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWg4H45eqI2wpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTJlNWFlMmYtMjI2Zi00MzkyLWJlYWItOGIyNDIwZTA4YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aqilDo3Lr4za2j4NmZ8gClYgT5lP0EslEYg HYQqwmnDQuCN6aZx8xju3K3lJku5wt6tbtKzOBYS1v3ZWTUI257C+H1I4RlodOa5 9eKs0Z9nc1iihlAUxudK5SGdHY+aIaP/9jG71Rh7gycJ7QrbZbzMkrMniz/Gha4+ ju7TChJ39It8zleDQ6btNiFSjAKXa5MGzBWia4+srYVs7fnTQDhlc4S6PWDiydAA 4lc5LwGA5KKRRD3XdAXcRU253AmJ1EacXP867KS50GrV6BpWpIvzcnPABICdQgdH 3ttTfjZmdksZWdSVwd8k2Thzy6l60j+r2dLp6SjUpLf0Jvua2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP2FDh4vy5xjxlEajRg4Oo/H4TdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY3NTRmN2ItOTU0Ny0z OTQ3LWJlY2EtZjEzZGQ5OTYyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvtO+6289lGFZmsIX9TwA0LsQ7qVWXmzoJsuYVrHAopyIjVvNYkEEkl zLPd1BoKhr7MEsIaHY8cPj724rvk1UPNfOCNVqxvVpOVwVqjeoqRltPqaD5Qx1QC WKa5qRZdZmr6kV+J07QkxfiC7DDtrHh0xXvyh8hm3h/iXlqMZYMzluB92mvtpJPG a1c81S+01JqckGH6OdvPkAA81/hF8OI7JMywuovYD6VI6I71Bz8sxgMKLSIZXFKP BcJgAF5YHyVR3Nb7KTtpvASCKs7A4woe/NduJljVxKD87Qc4QxAUz5LIjUjLQkLp APTHtdVFU38C4aplPowvdGnlh2QhoNE= -----END CERTIFICATE-----Generated at Sun Apr 27 04:07:50 2025 by rpki-client