$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa File: 05cff55e-3007-36c6-b796-ac74cbc05295.roa (raw, json) Hash identifier: soPk5rmBXnbWntiKRCtsNwq5u/NlC6+AhAmZOcRBZhw= Subject key identifier: 9D:81:C9:18:FD:A1:20:DA:95:1D:51:B0:25:6B:6D:3B:C6:E2:EE:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715F76017FC5C5521AE580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:76:01:7f:c5:c5:52:1a:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=ce631929-ded1-42cd-bbaa-78456c867c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:99:02:12:f1:36:59:03:5e:99:6e:8c:25: 9d:0c:34:2f:2f:6d:8b:01:cf:34:9b:e0:1f:9a:dd: 6b:40:92:73:c8:3f:d5:ec:42:4a:d9:cf:f5:13:63: 42:0c:52:20:91:e7:9f:51:44:67:a7:f8:5e:99:78: 81:4f:ee:b7:79:44:85:35:c2:d3:29:25:a9:21:d6: aa:39:6a:d7:06:51:0a:a2:9b:69:b7:39:4d:da:0c: f1:e6:66:5f:3c:ee:47:cf:9a:de:57:be:94:9c:6a: 75:bd:1a:c8:ea:4d:7f:3c:58:af:78:9f:67:f2:bb: 59:ec:8a:60:ba:90:52:0d:d7:89:36:94:a1:20:27: 76:05:92:80:e1:56:83:d5:b0:d5:b3:ea:cc:3c:0d: 3c:d2:8a:4e:fe:f0:9e:d3:d2:da:db:f0:90:c0:7b: 49:90:b9:35:7e:fa:27:1f:bb:0c:05:85:af:85:e4: bc:5b:4f:3a:09:68:4f:d8:b0:7a:31:40:c3:0d:0d: fc:c7:33:79:e1:dd:ab:cd:45:53:7b:56:14:3d:3d: a6:b9:c9:90:dd:ca:51:4a:ae:e7:43:94:e9:e7:e0: 01:40:b7:ea:06:c6:13:f5:78:32:df:d9:dd:00:90: 36:25:cf:06:ac:e4:89:15:93:49:32:20:2b:ca:20: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:81:C9:18:FD:A1:20:DA:95:1D:51:B0:25:6B:6D:3B:C6:E2:EE:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:15:da:51:9b:e7:6c:d5:cc:76:a4:c6:87:57:13:5e:ad:21: 64:79:a4:0b:a1:bf:fa:3a:c5:e1:9d:8d:92:85:5e:ec:3c:8b: 71:0f:6e:7c:d1:a6:31:6d:d0:dc:cc:dd:1d:a9:40:2c:23:cc: a0:ea:a9:40:04:2e:30:1d:16:df:07:81:d5:7d:57:d3:ac:20: 63:b6:8e:7e:d7:b7:bb:4c:e6:04:b3:eb:b9:a0:9c:99:86:e1: 43:74:86:b8:12:51:3c:9d:9a:cb:f7:91:b4:26:6c:ba:6c:48: 7f:f5:c2:59:2b:15:24:dc:68:77:aa:38:8d:88:ee:88:97:28: 1d:96:81:4b:53:b8:2a:af:38:b5:a3:40:17:d3:68:fa:5a:d1: 04:d3:b5:dc:c3:9c:87:fc:32:b3:8d:75:b0:af:ba:df:8f:d9: 4f:f8:db:0b:f8:8d:fe:de:94:56:40:85:6a:1e:dc:97:7f:03: e4:4c:06:57:61:38:ce:9b:98:f0:ae:c8:41:bc:36:0f:86:c2: b5:88:0e:0d:be:c2:29:3e:bd:b7:1e:64:df:21:ac:02:37:06: 29:79:e8:83:c7:59:7a:2e:6d:7c:a4:06:b6:89:0f:8a:a8:91: 4f:0b:aa:a6:13:d7:c3:fc:37:69:6f:e4:92:33:c7:b5:62:10: 80:b5:1b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV92AX/FxVIa5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk Y2U2MzE5MjktZGVkMS00MmNkLWJiYWEtNzg0NTZjODY3YzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9aZAhLxNlkDXplujCWdDDQvL22LAc80m+Af mt1rQJJzyD/V7EJK2c/1E2NCDFIgkeefUURnp/hemXiBT+63eUSFNcLTKSWpIdaq OWrXBlEKoptptzlN2gzx5mZfPO5Hz5reV76UnGp1vRrI6k1/PFiveJ9n8rtZ7Ipg upBSDdeJNpShICd2BZKA4VaD1bDVs+rMPA080opO/vCe09La2/CQwHtJkLk1fvon H7sMBYWvheS8W086CWhP2LB6MUDDDQ38xzN54d2rzUVTe1YUPT2mucmQ3cpRSq7n Q5Tp5+ABQLfqBsYT9Xgy39ndAJA2Jc8GrOSJFZNJMiAryiB8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2ByRj9oSDalR1RsCVrbTvG4u6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDVjZmY1NWUtMzAwNy0z NmM2LWI3OTYtYWM3NGNiYzA1Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkV2lGb52zVzHakxodXE16tIWR5pAuhv/o6xeGdjZKFXuw8i3EPbnzR pjFt0NzM3R2pQCwjzKDqqUAELjAdFt8HgdV9V9OsIGO2jn7Xt7tM5gSz67mgnJmG 4UN0hrgSUTydmsv3kbQmbLpsSH/1wlkrFSTcaHeqOI2I7oiXKB2WgUtTuCqvOLWj QBfTaPpa0QTTtdzDnIf8MrONdbCvut+P2U/42wv4jf7elFZAhWoe3Jd/A+RMBldh OM6bmPCuyEG8Ng+GwrWIDg2+wik+vbceZN8hrAI3Bil56IPHWXoubXykBraJD4qo kU8LqqYT18P8N2lv5JIzx7ViEIC1G2M= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:28 2025 by rpki-client