$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa File: cfdab452-30ce-33d8-b092-188782742a3d.roa (raw, json) Hash identifier: s7/xSTHZXUFVZhpI7a3K1QDzxwhWe8Jc/7jXsuW4sxQ= Subject key identifier: 36:5E:2A:3A:E0:EB:7C:08:EB:20:91:D7:69:8F:59:FD:A8:D4:EB:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E0068671A2CC56CFA69BC980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:86:71:a2:cc:56:cf:a6:9b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e5c290e9-2b6a-4276-aa2e-3693cbacfdeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:1e:95:5f:e1:27:58:d2:e9:77:40:08:96: f1:11:b9:d2:dd:2e:2b:e2:c4:17:8a:03:e5:ae:3a: c3:85:6c:92:c6:dc:7e:91:a8:ee:04:03:e4:80:51: 62:cf:e7:2e:aa:38:48:c5:95:33:58:a6:42:f9:b5: fe:d3:11:ad:70:02:bb:61:70:d1:10:44:5e:fd:b4: 8f:93:55:af:c7:7e:c1:ca:92:8b:dc:c9:d8:dc:35: 96:fc:3e:3e:c2:7b:a1:ea:69:e8:93:49:cf:5f:cb: b5:e7:97:d3:5e:64:e0:af:f7:91:ca:57:eb:b5:45: b7:c5:22:2f:1b:86:a6:7e:dd:5b:f9:3e:11:52:85: 70:38:ab:a2:72:65:fc:a1:e6:a9:b6:b6:42:46:8f: b0:21:39:15:be:14:73:b5:34:22:11:f2:5e:74:d7: 35:1f:53:4d:a1:24:78:35:04:35:62:a2:18:88:39: 88:eb:c2:f4:8f:bf:1e:55:15:1d:6d:c2:fd:6f:c2: 59:9f:b7:c8:0b:98:ed:1d:71:7b:5f:9f:89:8b:76: b9:8f:58:46:69:bd:c7:59:77:cd:b0:4b:b5:f9:42: d8:d6:10:c6:83:20:49:fb:ba:7f:bd:79:1f:37:2b: 12:c1:0f:c3:6a:4b:e2:86:03:41:3e:29:8d:72:4c: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5E:2A:3A:E0:EB:7C:08:EB:20:91:D7:69:8F:59:FD:A8:D4:EB:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cfdab452-30ce-33d8-b092-188782742a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:0a:56:ba:cb:e3:44:24:ed:cc:2c:ac:54:db:6a:8c:53:41: 04:6c:0f:eb:7b:93:c4:f0:82:a4:ce:4f:ae:e6:c1:d2:b3:ee: a9:01:b2:22:c2:2f:04:0c:46:d6:ac:ab:c4:48:32:e9:97:92: 86:f5:ff:2d:87:87:5e:21:4e:66:05:c3:5d:7a:58:fc:44:14: da:3d:f5:ed:41:1c:c9:86:dd:18:ae:76:f4:32:ab:82:fe:1c: 3e:58:0e:1d:2d:24:32:b3:48:12:e3:96:43:da:46:ba:c7:c1: 1a:14:79:70:f1:26:b2:af:b5:32:fe:cb:42:af:33:8d:cc:25: 1b:54:0a:2e:de:2a:63:0d:6a:95:59:fd:84:bc:be:bb:3b:73: 70:ae:34:9f:b7:1c:9e:78:31:ed:fb:de:16:f7:65:7f:cd:a9: 27:8c:e4:ee:4d:fa:a0:ce:f4:08:08:b1:9e:8f:2c:d9:1e:50: 35:a1:63:a8:c0:4d:9b:42:6c:ff:60:1d:e0:5c:0c:b5:d4:92: da:50:20:13:c7:8c:92:01:96:d5:f2:86:03:bf:e5:10:3c:9d: 4c:f1:6c:a9:f1:20:b7:55:a3:43:2c:a2:8e:81:0c:c0:01:4e: dd:25:4a:24:46:10:c1:d3:10:0e:22:69:d4:34:d2:d5:1b:e5: 23:5f:1b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoZxosxWz6abyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTVjMjkwZTktMmI2YS00Mjc2LWFhMmUtMzY5M2NiYWNmZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUQelV/hJ1jS6XdACJbxEbnS3S4r4sQXigPl rjrDhWySxtx+kajuBAPkgFFiz+cuqjhIxZUzWKZC+bX+0xGtcAK7YXDREERe/bSP k1Wvx37BypKL3MnY3DWW/D4+wnuh6mnok0nPX8u155fTXmTgr/eRylfrtUW3xSIv G4amft1b+T4RUoVwOKuicmX8oeaptrZCRo+wITkVvhRztTQiEfJedNc1H1NNoSR4 NQQ1YqIYiDmI68L0j78eVRUdbcL9b8JZn7fIC5jtHXF7X5+Ji3a5j1hGab3HWXfN sEu1+ULY1hDGgyBJ+7p/vXkfNysSwQ/DakvihgNBPimNckxI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZeKjrg63wI6yCR12mPWf2o1Ou5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZkYWI0NTItMzBjZS0z M2Q4LWIwOTItMTg4NzgyNzQyYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEKVrrL40Qk7cwsrFTbaoxTQQRsD+t7k8TwgqTOT67mwdKz7qkBsiLC LwQMRtasq8RIMumXkob1/y2Hh14hTmYFw116WPxEFNo99e1BHMmG3RiudvQyq4L+ HD5YDh0tJDKzSBLjlkPaRrrHwRoUeXDxJrKvtTL+y0KvM43MJRtUCi7eKmMNapVZ /YS8vrs7c3CuNJ+3HJ54Me373hb3ZX/NqSeM5O5N+qDO9AgIsZ6PLNkeUDWhY6jA TZtCbP9gHeBcDLXUktpQIBPHjJIBltXyhgO/5RA8nUzxbKnxILdVo0Msoo6BDMAB Tt0lSiRGEMHTEA4iadQ00tUb5SNfG3A= -----END CERTIFICATE-----Generated at Sun Apr 27 22:10:18 2025 by rpki-client