$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fe2f613-4bf1-30b8-8885-72c8fb9823f7.roa File: 3fe2f613-4bf1-30b8-8885-72c8fb9823f7.roa (raw, json) Hash identifier: DZZg1qK3jzk3ZB/QnvNW+l/E8DkUw80oY8D3iOZt6PY= Subject key identifier: 7B:D0:67:5C:E1:A1:39:85:8D:66:E7:FF:A8:32:94:7D:7C:71:B5:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA4FA2E482D68AE3538940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fe2f613-4bf1-30b8-8885-72c8fb9823f7.roa Signing time: Thu 20 Feb 2025 18:15:40 +0000 ROA not before: Thu 20 Feb 2025 18:15:40 +0000 ROA not after: Wed 21 May 2025 17:15:40 +0000 asID: 7029 IP address blocks: 71.31.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:4f:a2:e4:82:d6:8a:e3:53:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:40 2025 GMT Not After : May 21 17:15:40 2025 GMT Subject: CN=72497aa5-457b-4b03-8497-202d85913b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:e2:d6:f2:e0:66:10:0b:e5:de:7f:66:15: c2:02:fe:db:a2:95:7d:89:71:9c:98:14:bc:37:de: 77:f3:6c:8b:0d:14:63:40:bc:4a:9d:69:ad:31:a1: 23:66:45:7d:c6:e1:e9:d8:f8:8b:d4:05:61:6c:5e: f3:bc:02:b0:08:35:87:bf:fd:61:db:62:5a:a5:e2: 43:60:5e:36:b5:ba:a7:55:82:c7:34:57:5a:bc:57: 18:14:20:7e:8d:82:bf:0a:48:de:35:53:09:ac:17: 6b:af:7a:dc:65:4f:5d:17:78:49:35:fc:cf:fa:f7: 82:fd:db:ee:f3:0a:00:b6:d8:93:99:7b:9b:b8:42: 2c:c8:81:49:d1:3b:b9:24:12:39:2e:23:6e:ba:d8: 9a:83:23:f4:9a:84:8d:78:6c:93:cb:70:85:4f:a5: 71:34:8f:7a:0f:73:0b:81:02:9a:cb:4a:7a:65:30: 80:76:f0:26:19:4f:9f:66:f2:8f:f8:f5:72:66:c2: 20:92:a4:29:f2:e3:59:a6:65:d9:d5:8f:e6:dd:80: 17:4f:dc:d1:c4:73:4c:9e:dc:c9:f6:e2:ed:a4:82: 3e:1a:3b:6d:b6:fe:0b:85:01:04:a1:c6:1b:06:93: 3f:57:e3:69:de:0a:07:d9:c0:1a:fe:8f:4f:a1:3e: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:67:5C:E1:A1:39:85:8D:66:E7:FF:A8:32:94:7D:7C:71:B5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3fe2f613-4bf1-30b8-8885-72c8fb9823f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:01:e6:bf:1c:5a:f6:ab:b5:6e:0e:02:68:b3:fd:ec:7c:f1: 46:3d:60:a0:40:74:3d:5c:54:a7:0d:f5:2b:ce:10:a8:3b:f7: eb:76:ca:9e:44:9f:2a:a3:48:14:a4:bb:02:0a:da:43:2f:32: 4f:1c:db:d8:8f:41:7f:17:06:20:1e:5a:fd:b6:2a:bf:e9:f5: ca:73:3d:5a:72:d2:83:29:ca:04:a4:04:c5:5c:c3:0a:80:51: 1d:52:15:76:c1:4b:72:58:45:7a:fc:67:50:be:2b:fd:0e:d6: a7:2e:45:61:7a:6a:c7:4d:c4:70:b0:ba:fb:17:c2:15:76:af: 01:48:f4:ee:68:82:a0:5d:46:68:b6:35:36:66:50:b8:89:5f: 3f:e9:b7:f6:cb:88:60:93:f8:e7:65:22:e6:9c:a6:d0:bd:e2: ef:c5:31:7b:e2:e5:92:91:00:2f:54:c8:12:53:fa:f4:e7:5f: 88:96:04:43:06:03:0a:6e:69:e4:07:e7:8c:54:b4:93:ae:9c: 69:42:51:41:55:e8:9f:f8:d6:b1:f7:11:a9:1e:b1:4e:77:bc: d0:3b:3b:8f:76:92:15:bb:3f:95:4b:78:ee:9e:de:90:56:48: 21:ed:2e:19:96:cd:a5:87:14:cb:74:5b:89:eb:16:9f:04:30: 8b:59:9e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqk+i5ILWiuNTiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU0MFoXDTI1MDUyMTE3MTU0MFowLzEtMCsGA1UEAxMk NzI0OTdhYTUtNDU3Yi00YjAzLTg0OTctMjAyZDg1OTEzYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHi1vLgZhAL5d5/ZhXCAv7bopV9iXGcmBS8 N95382yLDRRjQLxKnWmtMaEjZkV9xuHp2PiL1AVhbF7zvAKwCDWHv/1h22JapeJD YF42tbqnVYLHNFdavFcYFCB+jYK/CkjeNVMJrBdrr3rcZU9dF3hJNfzP+veC/dvu 8woAttiTmXubuEIsyIFJ0Tu5JBI5LiNuutiagyP0moSNeGyTy3CFT6VxNI96D3ML gQKay0p6ZTCAdvAmGU+fZvKP+PVyZsIgkqQp8uNZpmXZ1Y/m3YAXT9zRxHNMntzJ 9uLtpII+Gjtttv4LhQEEocYbBpM/V+Np3goH2cAa/o9PoT4bJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvQZ1zhoTmFjWbn/6gylH18cbW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ZlMmY2MTMtNGJmMS0z MGI4LTg4ODUtNzJjOGZiOTgyM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMB5r8cWvartW4OAmiz/ex88UY9YKBAdD1cVKcN9SvOEKg79+t2yp5E nyqjSBSkuwIK2kMvMk8c29iPQX8XBiAeWv22Kr/p9cpzPVpy0oMpygSkBMVcwwqA UR1SFXbBS3JYRXr8Z1C+K/0O1qcuRWF6asdNxHCwuvsXwhV2rwFI9O5ogqBdRmi2 NTZmULiJXz/pt/bLiGCT+OdlIuacptC94u/FMXvi5ZKRAC9UyBJT+vTnX4iWBEMG AwpuaeQH54xUtJOunGlCUUFV6J/41rH3EakesU53vNA7O492khW7P5VLeO6e3pBW SCHtLhmWzaWHFMt0W4nrFp8EMItZnjQ= -----END CERTIFICATE-----Generated at Sat Apr 5 18:09:41 2025 by rpki-client