$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa File: b6644eb8-860e-36c8-9338-e619fe3b172f.roa (raw, json) Hash identifier: F1kwFSPz3eQFCiQiZCgdzdNgo7gcdFaVlRCQRM0gIjk= Subject key identifier: 55:51:C0:6B:5B:92:EF:3E:9A:08:C4:38:28:D7:AB:CE:0E:D4:E9:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB490E9FE03A4231EF6B500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 71.28.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:e9:fe:03:a4:23:1e:f6:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=d92de17c-44f2-4203-b7d3-d99775fe57eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:05:9c:5f:07:58:7e:92:3d:9c:7c:51:6f: 08:fb:e6:5e:ae:d5:00:b5:9a:25:c4:c4:04:66:40: 1e:3c:ab:07:be:85:eb:cf:ef:5a:96:77:ec:5f:1d: 82:d6:16:9e:a7:35:df:5e:d2:6b:1e:aa:2b:11:fc: 9d:56:80:2b:74:8a:a9:5f:df:79:1d:47:92:ae:28: 4a:66:4a:35:02:f5:7d:0b:ea:5b:1e:b4:ae:89:0b: 52:fe:43:82:5d:d5:5f:af:85:3a:f8:51:2f:5c:b0: 5e:d6:fa:ad:09:b0:6a:d8:36:68:a8:b6:dd:2d:6e: db:8c:3e:e9:59:bb:87:2d:20:db:8a:c6:c4:4b:b0: ac:58:bd:07:b3:d8:2f:1b:23:5f:68:76:9f:da:b6: 60:be:4e:7a:08:03:57:94:e0:fd:99:6e:7a:0a:76: db:e4:3b:71:26:ab:93:1c:15:67:3b:18:ad:3f:03: a3:cc:92:0d:bb:19:91:82:77:8f:86:00:11:e2:4d: 40:99:79:98:46:de:85:f4:ff:c4:26:0b:24:d5:5a: 2f:5c:ae:ba:0b:c6:e3:07:c2:39:d5:36:24:7e:11: 73:f6:63:15:03:80:a3:61:f6:d7:eb:a7:1a:70:72: f0:e2:65:d3:a7:47:95:bf:60:63:b5:8c:2b:c0:f5: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:51:C0:6B:5B:92:EF:3E:9A:08:C4:38:28:D7:AB:CE:0E:D4:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b6644eb8-860e-36c8-9338-e619fe3b172f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:af:2b:f6:f0:74:05:45:7b:91:a2:f1:d5:75:99:7f:2d:96: 40:7d:57:a7:4d:4a:da:82:fc:a9:c2:40:26:09:85:79:55:bf: 5b:72:23:8b:3f:9d:41:61:d7:86:d9:bf:8f:bf:bf:3d:b7:1c: 22:2b:f9:12:60:f5:41:0e:a7:cb:1c:cf:43:e3:43:dd:b2:10: a7:1b:49:db:49:2b:5c:26:bc:77:ab:8d:7c:24:70:3d:b4:cd: dd:bc:d5:c0:86:8c:e5:03:91:a5:91:60:a8:d2:fe:bf:d1:cc: 1e:60:67:8a:d3:bb:97:c6:71:b5:a1:ca:4f:48:76:fc:b3:21: a9:e9:82:a1:b9:fa:7f:95:97:70:3e:f9:56:e2:ca:26:f0:64: 7d:17:3b:c1:aa:ca:90:30:d1:7f:52:b9:9b:eb:75:0a:d1:bf: ea:85:4b:ee:67:4f:a8:60:97:fa:03:78:15:9c:b3:3c:ec:cf: ab:e1:f5:ed:7c:5d:5d:d8:7a:ec:1b:a2:14:d6:2b:c1:cf:54: d6:9f:0c:95:8b:03:19:23:de:b4:72:da:da:f0:c2:16:85:f0: 47:2e:68:58:af:0d:02:e7:40:ff:34:30:03:0f:18:c1:de:93: 1b:e9:53:3d:de:f0:66:c9:7a:17:e0:87:b6:e1:cf:21:1c:c7: 79:6a:ce:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJDp/gOkIx72tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZDkyZGUxN2MtNDRmMi00MjAzLWI3ZDMtZDk5Nzc1ZmU1N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy00FnF8HWH6SPZx8UW8I++ZertUAtZolxMQE ZkAePKsHvoXrz+9alnfsXx2C1haepzXfXtJrHqorEfydVoArdIqpX995HUeSrihK Zko1AvV9C+pbHrSuiQtS/kOCXdVfr4U6+FEvXLBe1vqtCbBq2DZoqLbdLW7bjD7p WbuHLSDbisbES7CsWL0Hs9gvGyNfaHaf2rZgvk56CANXlOD9mW56Cnbb5DtxJquT HBVnOxitPwOjzJINuxmRgnePhgAR4k1AmXmYRt6F9P/EJgsk1VovXK66C8bjB8I5 1TYkfhFz9mMVA4CjYfbX66cacHLw4mXTp0eVv2BjtYwrwPVddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVRwGtbku8+mgjEOCjXq84O1OlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjY2NDRlYjgtODYwZS0z NmM4LTkzMzgtZTYxOWZlM2IxNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOvK/bwdAVFe5Gi8dV1mX8tlkB9V6dNStqC/KnCQCYJhXlVv1tyI4s/ nUFh14bZv4+/vz23HCIr+RJg9UEOp8scz0PjQ92yEKcbSdtJK1wmvHerjXwkcD20 zd281cCGjOUDkaWRYKjS/r/RzB5gZ4rTu5fGcbWhyk9IdvyzIanpgqG5+n+Vl3A+ +VbiyibwZH0XO8GqypAw0X9SuZvrdQrRv+qFS+5nT6hgl/oDeBWcszzsz6vh9e18 XV3YeuwbohTWK8HPVNafDJWLAxkj3rRy2trwwhaF8EcuaFivDQLnQP80MAMPGMHe kxvpUz3e8GbJehfgh7bhzyEcx3lqztI= -----END CERTIFICATE-----Generated at Mon Apr 28 20:01:40 2025 by rpki-client