$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27c249a-9eb2-3469-8266-9ad17c9b50ed.roa File: a27c249a-9eb2-3469-8266-9ad17c9b50ed.roa (raw, json) Hash identifier: nQnsIEjRCOzi6BEFBMScfy0ZL9JN3BVjF+J7XPGlC3w= Subject key identifier: B6:4F:D6:A2:52:1F:D7:3C:C1:AE:A9:67:0B:FE:8C:73:40:A1:14:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2336EA935AF522106280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27c249a-9eb2-3469-8266-9ad17c9b50ed.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.28.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:23:36:ea:93:5a:f5:22:10:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=07e1061d-bc55-4d1b-8dc9-280c054e35cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:27:6b:eb:0d:05:92:5d:45:75:16:6b:80:4f: 4c:8b:76:95:d6:50:ed:6e:89:e9:66:41:10:0e:b7: 40:dc:d6:84:1a:bd:bf:66:7b:92:70:4a:95:48:3b: 12:0b:02:de:b1:41:b8:bf:60:88:1c:28:b8:87:8c: fa:ea:fb:5e:09:61:ba:92:ae:30:06:de:05:2a:7a: a5:1f:51:43:05:ad:e5:d1:c6:7c:3b:69:42:d9:bb: 45:49:a9:a0:93:99:b0:f3:82:f0:c9:13:25:01:be: 16:5b:b9:fc:e1:54:12:37:9c:a5:10:e6:a3:e2:16: 76:cc:c8:9b:66:e1:bc:bb:e8:05:85:1d:3c:da:0b: 2b:0d:4f:f3:33:9b:7e:c3:ae:41:3c:dd:bb:c1:43: ac:89:87:fd:dd:2b:63:5c:4c:08:75:bf:3d:3b:40: 1a:8a:75:9e:6d:c5:e2:79:de:65:d2:f0:ed:1e:e0: d7:e1:74:18:e6:39:8c:89:5f:60:6f:1e:a9:85:8c: 9d:4f:c1:81:9a:55:32:86:7d:61:3f:32:60:b2:77: 61:91:b5:75:67:a4:cd:18:d5:ea:7e:35:2a:81:b8: 83:34:ae:47:cf:86:5a:d5:52:d6:9c:d7:b3:5a:0e: f5:c3:63:d5:08:bd:f8:0e:ae:50:88:ac:89:c7:94: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4F:D6:A2:52:1F:D7:3C:C1:AE:A9:67:0B:FE:8C:73:40:A1:14:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a27c249a-9eb2-3469-8266-9ad17c9b50ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d2:a6:32:a6:65:36:9e:15:10:70:1e:8e:8f:02:02:95:24: 91:11:c9:3f:4c:28:c0:5e:ef:e4:79:bb:ad:b7:1d:15:83:bc: e7:ce:17:84:66:3e:c7:03:04:33:7f:62:8f:94:25:7d:9e:40: 55:99:22:60:a1:88:14:cd:1d:b2:a6:9e:7e:a1:d5:06:9a:73: 06:2e:8d:b8:98:44:48:6b:d8:75:34:34:7b:03:4f:ce:88:70: 98:ad:21:97:f3:e1:b3:c2:0f:f8:70:87:97:a1:ef:b7:03:24: 1d:5c:c8:50:c6:4b:1b:ae:c8:48:32:c0:5a:42:29:6c:3f:87: 6b:11:33:6c:b2:9d:1e:17:f5:0a:50:1e:f3:2f:98:a7:bd:c7: 01:45:3a:d9:7c:07:6b:e4:c5:3d:be:30:a9:45:45:3a:8f:5c: 79:42:06:5f:dc:db:bc:9c:38:7e:21:51:95:65:69:95:70:ed: f0:d4:c5:5e:ee:fb:2c:ed:fc:c0:86:bc:23:cb:26:13:02:43: f8:31:3e:5e:f2:35:a3:90:0f:a4:9f:bc:f8:7a:13:a2:20:7d: 0b:75:de:3a:65:17:32:25:71:bb:20:1f:df:1a:0c:43:33:9b: a4:41:0b:f3:03:ab:06:bb:19:93:c7:e1:c1:ba:6a:0f:76:97: ef:15:b6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiM26pNa9SIQYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MDdlMTA2MWQtYmM1NS00ZDFiLThkYzktMjgwYzA1NGUzNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgidr6w0Fkl1FdRZrgE9Mi3aV1lDtbonpZkEQ DrdA3NaEGr2/ZnuScEqVSDsSCwLesUG4v2CIHCi4h4z66vteCWG6kq4wBt4FKnql H1FDBa3l0cZ8O2lC2btFSamgk5mw84LwyRMlAb4WW7n84VQSN5ylEOaj4hZ2zMib ZuG8u+gFhR082gsrDU/zM5t+w65BPN27wUOsiYf93StjXEwIdb89O0AainWebcXi ed5l0vDtHuDX4XQY5jmMiV9gbx6phYydT8GBmlUyhn1hPzJgsndhkbV1Z6TNGNXq fjUqgbiDNK5Hz4Za1VLWnNezWg71w2PVCL34Dq5QiKyJx5TnTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZP1qJSH9c8wa6pZwv+jHNAoRRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI3YzI0OWEtOWViMi0z NDY5LTgyNjYtOWFkMTdjOWI1MGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTSpjKmZTaeFRBwHo6PAgKVJJERyT9MKMBe7+R5u623HRWDvOfOF4Rm PscDBDN/Yo+UJX2eQFWZImChiBTNHbKmnn6h1QaacwYujbiYREhr2HU0NHsDT86I cJitIZfz4bPCD/hwh5eh77cDJB1cyFDGSxuuyEgywFpCKWw/h2sRM2yynR4X9QpQ HvMvmKe9xwFFOtl8B2vkxT2+MKlFRTqPXHlCBl/c27ycOH4hUZVlaZVw7fDUxV7u +yzt/MCGvCPLJhMCQ/gxPl7yNaOQD6SfvPh6E6IgfQt13jplFzIlcbsgH98aDEMz m6RBC/MDqwa7GZPH4cG6ag92l+8VtoI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:25:01 2025 by rpki-client