$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc5b57bd-d6db-38f3-8142-25ddbd2cc64a.roa File: cc5b57bd-d6db-38f3-8142-25ddbd2cc64a.roa (raw, json) Hash identifier: hdljAGaJke/I7tmY75zS8TJsplxL6lxeqSZNkO7j8i0= Subject key identifier: 08:32:B0:CE:A6:04:8E:32:46:EF:82:F9:C1:1D:87:9D:14:98:87:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA23F8FE38B5064571EA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc5b57bd-d6db-38f3-8142-25ddbd2cc64a.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.31.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:23:f8:fe:38:b5:06:45:71:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=4c8c11bf-4786-4b37-983d-6c57c5bf15ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:ac:06:b6:c4:69:d1:3b:41:b8:56:44:4f: 37:43:3c:de:b6:68:13:84:4f:82:ac:57:71:f5:a7: ed:0d:8f:85:25:7c:3f:79:37:47:36:7d:05:28:16: 49:fb:de:73:84:9d:28:86:2a:a5:2f:d7:87:3f:65: 07:de:06:01:78:79:f1:a4:2d:3b:a6:a2:be:1a:7b: 66:e4:8b:20:f9:4b:10:df:ba:8c:bb:8e:ad:e7:8d: 08:f6:18:5f:8d:70:f9:75:8b:ad:a8:50:2e:e8:1a: e8:62:b3:0e:52:f7:04:c0:cf:0c:7a:87:8d:ed:de: 36:75:51:71:8e:ec:b5:29:9c:d7:6b:19:a9:9b:08: c7:91:a8:3f:31:bb:f5:33:d5:03:b2:a9:fc:0e:1e: 2d:e5:b1:87:04:64:f2:1c:9e:0c:33:ee:b4:42:a5: ba:12:62:5c:f8:19:37:18:b9:89:c1:66:d7:7f:de: f2:09:50:5a:9d:bf:90:b5:b4:ea:9d:9d:8d:d2:ec: 32:51:56:6a:3f:72:1f:64:bb:5b:30:69:b8:99:50: dd:e8:9e:05:b2:4e:61:d4:c1:b0:f4:9f:b8:50:b7: 24:fe:4f:f5:e8:e1:7d:32:ba:d9:1a:93:74:b5:32: 2f:99:3d:29:6f:9a:cd:47:dc:0a:5c:14:07:f5:5c: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:B0:CE:A6:04:8E:32:46:EF:82:F9:C1:1D:87:9D:14:98:87:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc5b57bd-d6db-38f3-8142-25ddbd2cc64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a5:2e:98:a1:ac:44:ec:76:6d:ba:f7:e0:e9:6b:27:f6:89: 94:b7:fa:77:3f:09:71:62:0e:1b:d7:9a:15:01:ea:c8:d9:6d: 40:f0:d5:b9:00:7c:1c:82:52:16:f5:d3:46:03:e5:40:04:75: e3:4c:f9:57:ce:b3:aa:28:0b:f0:de:2f:a9:0b:3a:2c:e0:95: 39:6e:b0:91:09:5f:50:40:73:42:93:f3:49:a9:8d:f2:24:c5: e4:d3:a1:b5:f9:0a:25:fe:23:10:bd:2d:d5:d1:ce:d6:44:55: 23:e0:fc:0b:d7:59:91:11:44:d7:2f:c6:cc:74:35:49:96:0a: 72:6a:2d:dc:b4:db:07:e0:9b:54:94:a1:bb:f6:4d:b3:1b:7a: 73:d1:27:ac:27:91:e2:33:d6:eb:fa:cb:92:34:51:df:b8:19: 02:42:b2:dd:84:7e:33:25:00:40:3c:49:03:b4:3e:01:0d:eb: 31:b0:2d:19:92:b5:c2:c1:91:df:73:56:ef:e6:aa:92:b5:5b: 05:89:41:00:3c:79:4c:28:f3:bf:d9:87:fe:c0:be:0d:42:31: 85:8d:03:80:56:d8:75:ac:73:1b:41:5e:a7:7d:f4:80:45:11: ea:78:47:c5:97:5d:37:41:5d:76:fa:cd:1e:a1:0a:dd:6f:95: 22:93:9b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiP4/ji1BkVx6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk NGM4YzExYmYtNDc4Ni00YjM3LTk4M2QtNmM1N2M1YmYxNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHWsBrbEadE7QbhWRE83QzzetmgThE+CrFdx 9aftDY+FJXw/eTdHNn0FKBZJ+95zhJ0ohiqlL9eHP2UH3gYBeHnxpC07pqK+Gntm 5Isg+UsQ37qMu46t540I9hhfjXD5dYutqFAu6BroYrMOUvcEwM8MeoeN7d42dVFx juy1KZzXaxmpmwjHkag/Mbv1M9UDsqn8Dh4t5bGHBGTyHJ4MM+60QqW6EmJc+Bk3 GLmJwWbXf97yCVBanb+QtbTqnZ2N0uwyUVZqP3IfZLtbMGm4mVDd6J4Fsk5h1MGw 9J+4ULck/k/16OF9MrrZGpN0tTIvmT0pb5rNR9wKXBQH9VzxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgysM6mBI4yRu+C+cEdh50UmIeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M1YjU3YmQtZDZkYi0z OGYzLTgxNDItMjVkZGJkMmNjNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx9PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOlLpihrETsdm269+Dpayf2iZS3+nc/CXFiDhvXmhUB6sjZbUDw1bkA fByCUhb100YD5UAEdeNM+VfOs6ooC/DeL6kLOizglTlusJEJX1BAc0KT80mpjfIk xeTTobX5CiX+IxC9LdXRztZEVSPg/AvXWZERRNcvxsx0NUmWCnJqLdy02wfgm1SU obv2TbMbenPRJ6wnkeIz1uv6y5I0Ud+4GQJCst2EfjMlAEA8SQO0PgEN6zGwLRmS tcLBkd9zVu/mqpK1WwWJQQA8eUwo87/Zh/7Avg1CMYWNA4BW2HWscxtBXqd99IBF Eep4R8WXXTdBXXb6zR6hCt1vlSKTmyY= -----END CERTIFICATE-----Generated at Sun Jun 15 11:42:18 2025 by rpki-client