$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa File: abeb276b-390d-319e-8b39-73e7483a65f9.roa (raw, json) Hash identifier: kZRm87kKDQ9fgJ4gRIGKYbMEwowiJSWp8TL317BB+d8= Subject key identifier: 8E:AB:AB:55:05:74:2B:E2:91:3F:56:C3:0F:D6:3B:80:71:F5:BD:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71688034565372F01B8E20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:68:80:34:56:53:72:f0:1b:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a077b7c7-8e6d-4e70-bdf6-27c078cfcb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:ad:29:91:fc:e9:bb:a8:bc:84:67:50:a1: c6:00:ed:92:8c:f0:99:3c:fd:fa:fd:b6:09:97:a9: 41:95:1b:56:55:6d:fa:85:c8:d4:cd:0c:d5:7f:c1: c0:d9:cc:93:02:ee:0c:63:9c:a0:89:8e:85:4e:b5: d0:3d:0a:52:2e:f1:9a:73:cc:14:f1:d2:04:58:19: ec:79:9a:f3:ff:44:97:36:eb:cd:d1:4f:e7:0d:02: 66:a7:d3:40:61:80:5e:b9:9d:f8:85:e4:b4:f3:d1: f9:bc:08:47:29:09:fc:5a:4f:5e:d3:2f:41:52:63: 73:1f:be:df:bc:9a:a1:a0:15:77:58:5b:ac:8a:4a: ab:b6:97:d1:0c:ba:b0:63:8c:8c:83:af:0f:88:28: 87:0e:39:ab:3f:3a:fd:95:32:1d:f4:07:80:4c:62: b3:1d:79:f0:d2:f7:d4:7a:98:7b:38:04:97:0f:b7: 12:c6:ae:34:a6:98:e1:78:e6:8e:df:b1:98:54:4a: 76:f9:2c:69:f7:1d:b6:3b:18:7d:fb:4b:06:03:4a: 0e:76:95:03:70:e0:a8:b9:1b:2a:71:74:61:7a:51: 36:95:ec:09:6e:47:48:fc:3e:4f:f1:e0:cd:52:25: d0:4f:15:0b:78:8a:91:20:ea:43:07:7b:c3:ef:f4: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AB:AB:55:05:74:2B:E2:91:3F:56:C3:0F:D6:3B:80:71:F5:BD:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/abeb276b-390d-319e-8b39-73e7483a65f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6b:e5:10:51:82:ce:77:15:54:0e:5c:d0:af:e1:3d:fa:06: ec:63:39:20:31:ce:0a:21:26:61:d5:34:31:95:87:8c:50:ec: 5f:bc:f5:38:02:f0:8e:2c:de:af:b1:48:8d:43:7f:c4:30:18: e5:f7:f3:7b:fe:97:50:c7:f2:00:85:3c:9e:a2:b3:78:c5:5d: 11:74:28:91:6d:b4:4d:a7:d7:62:59:ae:92:48:3a:38:88:97: 8d:d6:37:88:90:e9:03:64:b6:74:f1:b5:8f:ab:a2:74:be:3d: 8b:c1:50:ad:5f:16:39:72:46:eb:ee:2c:ec:85:08:79:9b:20: c3:2d:90:f8:37:1f:34:aa:74:44:1d:4a:bf:23:e6:64:6d:4c: 0d:a0:e3:a3:26:98:21:25:d5:5e:f7:e8:92:bd:d2:29:11:db: 45:b6:9d:5e:b3:38:de:15:ac:62:4f:71:11:e7:6b:8c:55:44: b9:91:be:90:bb:0a:61:98:cc:16:aa:a5:80:57:9b:fc:4b:af: 23:52:8d:57:e1:db:0c:6d:63:0c:30:af:b1:dc:b8:3a:e6:75: 76:60:fd:e2:3e:fd:79:fc:dd:df:fb:6a:04:60:f0:6b:79:35: 15:bd:5d:71:a0:0e:35:4c:54:a7:ee:b6:65:51:1e:6e:8e:49: 2b:5d:15:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWiANFZTcvAbjiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTA3N2I3YzctOGU2ZC00ZTcwLWJkZjYtMjdjMDc4Y2ZjYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/+tKZH86buovIRnUKHGAO2SjPCZPP36/bYJ l6lBlRtWVW36hcjUzQzVf8HA2cyTAu4MY5ygiY6FTrXQPQpSLvGac8wU8dIEWBns eZrz/0SXNuvN0U/nDQJmp9NAYYBeuZ34heS089H5vAhHKQn8Wk9e0y9BUmNzH77f vJqhoBV3WFusikqrtpfRDLqwY4yMg68PiCiHDjmrPzr9lTId9AeATGKzHXnw0vfU eph7OASXD7cSxq40ppjheOaO37GYVEp2+Sxp9x22Oxh9+0sGA0oOdpUDcOCouRsq cXRhelE2lewJbkdI/D5P8eDNUiXQTxULeIqRIOpDB3vD7/QMKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6rq1UFdCvikT9Www/WO4Bx9b3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWJlYjI3NmItMzkwZC0z MTllLThiMzktNzNlNzQ4M2E2NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxr5RBRgs53FVQOXNCv4T36BuxjOSAxzgohJmHVNDGVh4xQ7F+89TgC 8I4s3q+xSI1Df8QwGOX383v+l1DH8gCFPJ6is3jFXRF0KJFttE2n12JZrpJIOjiI l43WN4iQ6QNktnTxtY+ronS+PYvBUK1fFjlyRuvuLOyFCHmbIMMtkPg3HzSqdEQd Sr8j5mRtTA2g46MmmCEl1V736JK90ikR20W2nV6zON4VrGJPcRHna4xVRLmRvpC7 CmGYzBaqpYBXm/xLryNSjVfh2wxtYwwwr7HcuDrmdXZg/eI+/Xn83d/7agRg8Gt5 NRW9XXGgDjVMVKfutmVRHm6OSStdFWM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:34:03 2025 by rpki-client