$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa File: e1ad356b-782c-388b-8017-6047f509cd8f.roa (raw, json) Hash identifier: gCXUS1xL/4wOzJGppHqVl9Uhib1yF/lndOM4qi+JzGw= Subject key identifier: 78:41:76:16:70:14:D9:30:B2:D3:3B:AA:47:23:10:9C:59:5E:B8:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB4907341D874FC6471FFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 71.29.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:73:41:d8:74:fc:64:71:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ce117efb-08dd-4e28-8f8f-06c1fc245d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:1a:bb:6f:f3:15:19:49:59:01:88:4f:67: 2e:58:04:a2:5f:cf:21:c8:05:a7:6b:4f:d2:de:f5: 9b:8e:e6:ee:a9:9f:1c:d1:cf:d1:5d:81:8b:ea:26: 13:44:3a:7f:1c:15:e2:61:05:0e:5c:1f:9b:ec:10: 00:bb:66:aa:85:47:fa:cf:f8:ca:28:d9:20:49:d1: c5:22:da:d5:6b:37:7a:9b:57:b9:9d:39:48:d7:a9: 2c:9c:ba:fa:55:e1:f9:ff:b6:94:60:9a:9f:4c:b1: f4:10:77:c2:c3:60:a0:72:77:fa:0a:fd:b4:7c:3b: 65:cb:fc:f0:d4:42:05:3a:f6:68:51:4c:ad:8a:cf: 50:fa:ca:64:8d:c4:4d:6a:0c:9a:bb:42:88:dd:be: 98:3b:7f:9b:77:9e:c3:b3:28:f5:a5:88:72:6b:c0: e6:66:bb:4c:ea:67:fa:83:68:52:9a:ed:03:d6:80: cf:92:c5:f6:70:f8:77:50:2c:8d:cc:ec:e1:ad:f5: 91:c9:bc:33:f9:1b:22:9c:a2:a5:ec:8a:73:dc:ca: 24:f6:cc:a4:1a:c8:ad:b1:f0:df:a5:e7:63:89:92: 3a:53:5e:2f:b3:f8:1b:5f:ea:4a:3d:67:48:ee:fd: 40:0f:b6:bc:bb:cb:e1:43:5f:5c:00:92:36:ee:f1: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:76:16:70:14:D9:30:B2:D3:3B:AA:47:23:10:9C:59:5E:B8:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e1ad356b-782c-388b-8017-6047f509cd8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:18:37:45:59:63:d6:1e:0b:29:bf:2f:6c:74:b4:f4:37: 26:bf:98:d3:12:e6:f8:a1:5d:9d:08:09:59:ef:3b:d4:69:a6: 7c:20:64:06:55:9d:1d:97:cc:69:ff:c6:28:e7:ec:2a:22:c3: 30:12:4a:1b:db:51:85:f1:9c:74:61:5c:72:43:5d:5b:38:5d: ae:98:9d:00:42:f5:d2:df:b2:42:dc:a0:1b:ae:c1:c8:7d:f2: 6f:e5:34:44:48:d5:49:c5:1a:97:4f:57:9c:d4:80:58:06:00: 1f:0d:ce:09:ea:c1:b5:19:08:18:52:aa:0a:c2:9c:b5:f0:87: 15:31:1c:84:7c:16:e0:92:bd:c7:f9:19:39:30:84:01:72:95: b2:73:06:3f:1f:69:0e:08:70:b2:96:55:71:d8:41:e3:a7:81: a8:71:77:06:4b:9c:d9:06:1f:ba:f4:a7:c1:bb:9a:6a:ff:f9: 46:3d:96:a7:10:72:53:30:54:6b:68:16:34:12:ba:61:6b:25: de:0a:65:41:54:7e:44:3c:1b:23:35:fa:38:ad:34:f6:2c:16: 31:88:f4:23:ef:ea:2a:f7:7d:65:30:36:e4:84:ad:84:44:f9: 04:c0:9e:b8:d1:74:b2:1c:7c:7a:fa:b4:16:04:0e:63:a0:ae: 25:39:32:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJBzQdh0/GRx/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk Y2UxMTdlZmItMDhkZC00ZTI4LThmOGYtMDZjMWZjMjQ1ZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qIau2/zFRlJWQGIT2cuWASiX88hyAWna0/S 3vWbjubuqZ8c0c/RXYGL6iYTRDp/HBXiYQUOXB+b7BAAu2aqhUf6z/jKKNkgSdHF ItrVazd6m1e5nTlI16ksnLr6VeH5/7aUYJqfTLH0EHfCw2Cgcnf6Cv20fDtly/zw 1EIFOvZoUUytis9Q+spkjcRNagyau0KI3b6YO3+bd57Dsyj1pYhya8DmZrtM6mf6 g2hSmu0D1oDPksX2cPh3UCyNzOzhrfWRybwz+RsinKKl7Ipz3Mok9sykGsitsfDf pedjiZI6U14vs/gbX+pKPWdI7v1AD7a8u8vhQ19cAJI27vFPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhBdhZwFNkwstM7qkcjEJxZXrisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTFhZDM1NmItNzgyYy0z ODhiLTgwMTctNjA0N2Y1MDljZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAYGDdFWWPWHgspvy9sdLT0Nya/mNMS5vihXZ0ICVnvO9RppnwgZAZV nR2XzGn/xijn7CoiwzASShvbUYXxnHRhXHJDXVs4Xa6YnQBC9dLfskLcoBuuwch9 8m/lNERI1UnFGpdPV5zUgFgGAB8NzgnqwbUZCBhSqgrCnLXwhxUxHIR8FuCSvcf5 GTkwhAFylbJzBj8faQ4IcLKWVXHYQeOngahxdwZLnNkGH7r0p8G7mmr/+UY9lqcQ clMwVGtoFjQSumFrJd4KZUFUfkQ8GyM1+jitNPYsFjGI9CPv6ir3fWUwNuSErYRE +QTAnrjRdLIcfHr6tBYEDmOgriU5Mtk= -----END CERTIFICATE-----Generated at Tue Apr 29 00:35:45 2025 by rpki-client