$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa File: 1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa (raw, json) Hash identifier: sgm/wwxN6hsRzTMOPJydAySp2W+4qA1v6Tc9EqEZ/CY= Subject key identifier: 07:51:82:73:5C:A6:FA:AC:26:F8:CD:9A:DC:51:8A:F0:79:31:0E:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB93D50B1838A65F564BDA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa Signing time: Thu 06 Feb 2025 18:13:51 +0000 ROA not before: Thu 06 Feb 2025 18:13:51 +0000 ROA not after: Wed 07 May 2025 17:13:51 +0000 asID: 7029 IP address blocks: 71.29.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:93:d5:0b:18:38:a6:5f:56:4b:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:13:51 2025 GMT Not After : May 7 17:13:51 2025 GMT Subject: CN=57e3fff7-f109-41ed-9a2f-6f8d1aec9e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:fc:75:5c:73:6d:38:1b:fa:7a:3e:b3:6a: 91:0f:af:d1:be:66:50:8d:75:48:53:2a:2d:90:ca: 7d:2e:ed:0e:4a:c2:9f:3c:9b:4c:e6:e9:98:bb:e2: b0:0b:6a:3a:a5:e4:63:ee:bb:99:e1:49:fb:eb:cb: 80:cc:71:ac:82:73:5e:b9:fd:d3:65:15:d5:93:b8: 76:e0:b5:bb:0c:fb:95:ee:ea:c3:48:42:3d:f0:e2: 7f:07:5a:1f:68:3e:9d:bb:09:b6:9d:1c:b2:8e:c9: ed:13:1a:3e:72:36:b7:f4:9e:75:44:9b:e4:7e:2e: 17:4b:19:5d:76:74:e4:e5:c0:ff:99:67:0b:37:eb: 32:91:cb:4d:f9:6b:41:6c:3e:34:1e:ab:7b:2f:98: 7b:64:34:ed:c0:0d:e4:4f:f1:8c:c1:29:9b:4d:5c: 08:dc:ec:5e:ce:00:28:82:32:09:c0:99:31:b5:e2: ec:03:97:f5:ca:87:58:f6:f2:27:2a:d6:ca:e9:32: 77:26:79:e8:a4:fd:fd:77:dd:7f:c3:bf:64:23:4e: b5:66:c9:b8:59:53:8b:30:41:67:a4:da:e2:ce:d0: 07:63:6e:26:24:f7:00:26:19:dd:42:65:65:2e:a5: f1:4c:9a:75:ac:69:64:35:bb:2b:95:2d:a0:d6:0b: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:51:82:73:5C:A6:FA:AC:26:F8:CD:9A:DC:51:8A:F0:79:31:0E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b7:5f:d7:a5:e5:0b:42:0f:7f:ba:89:e2:cc:05:dd:b6:15: d8:65:c1:22:74:2a:44:83:9b:9f:89:83:28:4d:12:28:3c:3b: ec:73:21:41:85:e8:a1:b8:1f:1e:be:d4:a2:ef:6a:c0:ab:ca: 02:bb:04:63:a4:1c:74:23:b9:46:b3:e6:3d:56:40:26:52:e0: 16:af:90:df:ba:7d:20:bf:c8:52:be:c3:3b:c3:69:2f:ee:c2: 55:f4:32:2e:d5:44:93:51:4e:32:76:21:2b:66:3e:58:90:05: 9c:37:08:f8:56:67:03:7e:8f:19:09:39:f4:54:84:f4:5f:c7: 70:d7:99:8a:48:78:be:2a:02:ba:2b:a4:c2:6e:0b:01:1d:69: b3:b2:7d:83:79:72:92:66:02:3f:26:03:d3:77:76:2b:58:42: 0c:51:65:83:c7:40:7f:46:c3:c1:49:e9:76:31:b1:bf:75:7c: ba:ac:69:bf:61:7b:d8:b1:9c:c8:d4:3f:ed:db:3d:e4:fa:ea: f6:c3:38:b2:86:a1:82:ba:4a:23:86:ba:c5:fc:7c:2d:a7:88: ed:1a:0f:12:69:6e:7c:8a:45:86:0a:73:a5:25:c5:f5:e3:85: 44:62:55:d9:be:92:7b:86:5c:95:a9:3d:65:d6:ce:fd:0b:c1: 4b:bd:c7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLk9ULGDimX1ZL2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTM1MVoXDTI1MDUwNzE3MTM1MVowLzEtMCsGA1UEAxMk NTdlM2ZmZjctZjEwOS00MWVkLTlhMmYtNmY4ZDFhZWM5ZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApev8dVxzbTgb+no+s2qRD6/RvmZQjXVIUyot kMp9Lu0OSsKfPJtM5umYu+KwC2o6peRj7ruZ4Un768uAzHGsgnNeuf3TZRXVk7h2 4LW7DPuV7urDSEI98OJ/B1ofaD6duwm2nRyyjsntExo+cja39J51RJvkfi4XSxld dnTk5cD/mWcLN+sykctN+WtBbD40Hqt7L5h7ZDTtwA3kT/GMwSmbTVwI3OxezgAo gjIJwJkxteLsA5f1yodY9vInKtbK6TJ3JnnopP39d91/w79kI061Zsm4WVOLMEFn pNriztAHY24mJPcAJhndQmVlLqXxTJp1rGlkNbsrlS2g1gsz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdRgnNcpvqsJvjNmtxRivB5MQ7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVhNzAxN2MtNmJjOS0z NGQzLWJhNDAtYWI3NjRjNGE3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa3X9el5QtCD3+6ieLMBd22FdhlwSJ0KkSDm5+JgyhNEig8O+xzIUGF 6KG4Hx6+1KLvasCrygK7BGOkHHQjuUaz5j1WQCZS4BavkN+6fSC/yFK+wzvDaS/u wlX0Mi7VRJNRTjJ2IStmPliQBZw3CPhWZwN+jxkJOfRUhPRfx3DXmYpIeL4qAror pMJuCwEdabOyfYN5cpJmAj8mA9N3ditYQgxRZYPHQH9Gw8FJ6XYxsb91fLqsab9h e9ixnMjUP+3bPeT66vbDOLKGoYK6SiOGusX8fC2niO0aDxJpbnyKRYYKc6UlxfXj hURiVdm+knuGXJWpPWXWzv0LwUu9xz8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:31 2025 by rpki-client