$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa File: faf66482-7afc-33d4-8de6-1371ecfa4006.roa (raw, json) Hash identifier: cTRQoeYe48pQ2eQcpMyF3Wjmn9Js28ZjKH6Ez+smaMk= Subject key identifier: E5:31:6B:A6:2A:AD:09:4E:AB:38:6D:9E:CC:E5:A3:02:A5:B1:39:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA889C8D940B6E617CAB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:9c:8d:94:0b:6e:61:7c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=43b7eb5e-787f-4034-b6fa-585761aac3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b8:fe:7f:1d:33:1f:49:ea:cc:a1:cc:eb:e5: 90:0e:f9:b5:0c:4c:39:7f:eb:bd:25:ba:da:2c:b0: b4:02:45:cd:84:88:b7:01:8a:c5:3c:6e:62:01:24: 71:f9:00:da:51:b0:e4:29:08:2b:4d:8d:7f:17:64: da:fe:e9:05:99:7b:29:01:98:31:9d:f8:f4:f0:79: c7:a8:a9:01:67:56:b9:fc:ec:f7:d5:7b:b7:7e:cc: 16:9f:84:c8:57:de:a0:18:a6:98:bf:d5:59:28:74: 03:6d:f4:ec:7a:9f:4c:70:d2:b6:d0:22:b4:58:61: 6c:42:07:57:76:6e:7b:52:90:fb:f6:b3:4c:c3:f9: 5e:3d:1a:c4:01:76:6a:29:05:78:7d:fa:60:63:ff: 93:d1:26:57:89:c4:fa:41:d2:8e:e6:96:41:c1:84: 67:e6:1c:c4:db:8c:fd:13:04:2c:c0:fc:ed:32:35: d8:bc:24:9f:e7:ff:4e:0d:74:e5:43:5e:6f:3b:d4: 7c:c2:27:5b:e9:12:0a:c4:1b:f4:ba:3b:77:89:b8: 72:96:e4:32:37:9d:f2:14:49:da:25:4b:aa:3c:4b: 75:14:7a:db:ea:f3:b1:7a:ee:70:3e:ed:9c:27:19: ce:68:2c:3a:21:63:87:4c:bd:51:e8:72:37:69:8e: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:31:6B:A6:2A:AD:09:4E:AB:38:6D:9E:CC:E5:A3:02:A5:B1:39:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:df:b7:e4:60:85:f8:ce:ab:e4:a5:81:4b:a2:51:65:e5:eb: 82:00:d6:7c:94:09:af:e6:a2:fd:39:ff:94:68:6f:e6:41:0e: 02:c1:90:07:05:66:4c:fd:c4:91:6d:f2:b3:e6:d3:56:53:9d: a6:60:f4:b1:9d:1e:73:17:6a:5c:23:4e:ea:aa:41:65:8f:10: 85:02:de:ef:b0:5a:90:6b:ec:5e:8d:37:6d:7a:94:1f:f6:8f: d1:47:4b:6f:91:20:80:f4:cf:0e:7a:4d:ca:67:ec:50:a8:21: 0f:59:44:67:cd:65:fb:e9:d7:57:53:a7:57:72:2f:80:f9:5f: a8:85:b0:5d:00:15:83:2b:68:d4:10:47:3f:16:01:7c:11:b9: 84:9b:08:ab:7b:a9:9b:c6:bc:8c:c4:59:12:d6:b6:19:b1:1a: 3c:a5:93:08:64:83:6d:86:48:92:57:2a:f8:ba:93:15:62:78: c7:69:aa:94:88:66:9e:c6:82:34:fc:28:77:cd:9c:ee:7d:0d: 98:dd:70:aa:70:35:20:9c:39:e4:5a:8c:64:e0:32:fc:5d:50: bc:16:23:63:ab:ee:20:af:f6:08:25:88:8c:d6:f8:b0:f8:1a: 5a:a2:85:b2:d5:a7:62:0a:95:a6:0f:ca:9b:6c:8d:ba:1d:a4: e7:a5:72:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoicjZQLbmF8qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NDNiN2ViNWUtNzg3Zi00MDM0LWI2ZmEtNTg1NzYxYWFjM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibj+fx0zH0nqzKHM6+WQDvm1DEw5f+u9Jbra LLC0AkXNhIi3AYrFPG5iASRx+QDaUbDkKQgrTY1/F2Ta/ukFmXspAZgxnfj08HnH qKkBZ1a5/Oz31Xu3fswWn4TIV96gGKaYv9VZKHQDbfTsep9McNK20CK0WGFsQgdX dm57UpD79rNMw/lePRrEAXZqKQV4ffpgY/+T0SZXicT6QdKO5pZBwYRn5hzE24z9 EwQswPztMjXYvCSf5/9ODXTlQ15vO9R8widb6RIKxBv0ujt3ibhyluQyN53yFEna JUuqPEt1FHrb6vOxeu5wPu2cJxnOaCw6IWOHTL1R6HI3aY5meQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUxa6YqrQlOqzhtnszlowKlsTm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFmNjY0ODItN2FmYy0z M2Q0LThkZTYtMTM3MWVjZmE0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTft+RghfjOq+SlgUuiUWXl64IA1nyUCa/mov05/5Rob+ZBDgLBkAcF Zkz9xJFt8rPm01ZTnaZg9LGdHnMXalwjTuqqQWWPEIUC3u+wWpBr7F6NN216lB/2 j9FHS2+RIID0zw56Tcpn7FCoIQ9ZRGfNZfvp11dTp1dyL4D5X6iFsF0AFYMraNQQ Rz8WAXwRuYSbCKt7qZvGvIzEWRLWthmxGjylkwhkg22GSJJXKvi6kxVieMdpqpSI Zp7GgjT8KHfNnO59DZjdcKpwNSCcOeRajGTgMvxdULwWI2Or7iCv9ggliIzW+LD4 GlqihbLVp2IKlaYPyptsjbodpOelcsQ= -----END CERTIFICATE-----Generated at Sun Jun 15 13:18:27 2025 by rpki-client