$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa File: 40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa (raw, json) Hash identifier: 4/afZN3I7lwSStenIsGkcG3KJ30t1EP1TCt24MZzer4= Subject key identifier: 9C:A4:39:F7:06:58:80:99:7F:E4:BD:53:54:F7:56:B8:6E:B8:0A:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA667D445BF907C1F08080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa Signing time: Thu 20 Feb 2025 18:15:51 +0000 ROA not before: Thu 20 Feb 2025 18:15:51 +0000 ROA not after: Wed 21 May 2025 17:15:51 +0000 asID: 7029 IP address blocks: 71.31.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:66:7d:44:5b:f9:07:c1:f0:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:51 2025 GMT Not After : May 21 17:15:51 2025 GMT Subject: CN=9425c47d-a2d1-493c-905f-969dc8646846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:ad:92:3f:71:be:57:b0:23:48:f0:3b:b9: aa:fd:20:a3:80:95:79:57:de:76:f4:0c:8d:92:5b: 0b:38:84:f6:7d:f7:05:09:09:29:23:19:20:55:a6: 65:59:e6:d0:a5:f2:b7:44:38:0c:ff:5b:44:b7:7a: b6:f3:c1:ab:87:7f:50:3f:0c:1a:2d:80:b3:bf:03: 6c:e1:37:71:85:7d:22:3b:19:11:ba:4b:0a:2c:20: 40:02:42:0b:28:c0:fb:86:28:42:74:88:48:70:c3: cb:db:4a:7e:9f:83:78:03:af:3e:f3:65:55:4f:21: 2e:7c:64:7f:ac:9b:97:59:bf:6a:dc:f8:57:98:1b: 55:7f:0a:63:67:4c:18:b3:55:79:b2:f1:47:ae:50: 71:9b:a2:ec:14:44:43:08:df:13:7e:59:1d:c5:3c: b9:b3:4f:f0:2d:26:96:5d:0f:96:45:48:93:7c:e5: c8:00:d5:c2:a1:37:49:5e:65:9a:15:40:5c:c1:f8: 74:4d:7d:e6:d3:06:af:a2:f4:bb:29:50:01:43:9a: 90:93:90:0d:e7:da:7a:cd:d8:0b:4a:48:5f:ef:0f: 5c:89:78:ca:04:99:8b:10:b5:0c:ab:36:ad:35:59: 98:93:2c:19:00:bf:37:85:71:15:05:db:1f:d5:5c: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A4:39:F7:06:58:80:99:7F:E4:BD:53:54:F7:56:B8:6E:B8:0A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4b:8b:23:0a:fa:3b:c0:bd:66:37:3f:81:1d:96:ad:aa:a4: a5:4c:a1:e7:81:16:74:f3:e5:49:79:c7:30:4a:64:28:9e:d5: b7:2e:4a:bd:75:52:e0:b7:2a:65:09:f9:57:9e:fc:71:4c:3b: a6:00:27:12:4b:9a:60:4a:44:3a:4b:08:17:a3:d3:ac:95:7a: ab:fc:42:d1:12:15:73:bb:30:fe:5e:70:41:7a:ab:3a:f7:49: 6c:70:15:c4:30:9b:ac:e2:f0:b4:03:2b:7b:a1:bb:38:92:ef: ba:f9:96:0e:65:4e:d9:01:29:61:f0:85:b3:00:8b:5e:9e:41: 4d:12:37:a1:6b:b5:85:f2:56:99:24:09:e2:8a:b3:ba:9f:38: 27:1b:1e:5b:24:c1:ff:81:36:6c:a1:de:da:b2:26:46:36:95: 4e:2a:4e:54:a4:05:92:15:f5:46:df:59:bb:52:18:52:e0:29: d4:a6:6e:af:bd:86:11:40:87:31:58:91:83:02:31:a0:e6:9e: ad:a7:55:19:0e:55:e3:29:cc:ff:a3:f7:a6:a2:c1:58:b8:72: 58:ec:50:66:f6:79:91:66:77:c9:43:8e:78:ca:8c:af:fd:85: 95:35:b4:12:16:e3:9a:99:15:d4:fc:ed:aa:c7:a6:03:1d:94: 18:7a:ea:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqmZ9RFv5B8HwgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU1MVoXDTI1MDUyMTE3MTU1MVowLzEtMCsGA1UEAxMk OTQyNWM0N2QtYTJkMS00OTNjLTkwNWYtOTY5ZGM4NjQ2ODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyitkj9xvlewI0jwO7mq/SCjgJV5V9529AyN klsLOIT2ffcFCQkpIxkgVaZlWebQpfK3RDgM/1tEt3q288Grh39QPwwaLYCzvwNs 4TdxhX0iOxkRuksKLCBAAkILKMD7hihCdIhIcMPL20p+n4N4A68+82VVTyEufGR/ rJuXWb9q3PhXmBtVfwpjZ0wYs1V5svFHrlBxm6LsFERDCN8TflkdxTy5s0/wLSaW XQ+WRUiTfOXIANXCoTdJXmWaFUBcwfh0TX3m0wavovS7KVABQ5qQk5AN59p6zdgL Skhf7w9ciXjKBJmLELUMqzatNVmYkywZAL83hXEVBdsf1VwnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJykOfcGWICZf+S9U1T3VrhuuArgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBiYWZiOWEtMWZmYy0z ZTdiLWIxNjAtMWFmZjdhZTYwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChLiyMK+jvAvWY3P4Edlq2qpKVMoeeBFnTz5Ul5xzBKZCie1bcuSr11 UuC3KmUJ+Vee/HFMO6YAJxJLmmBKRDpLCBej06yVeqv8QtESFXO7MP5ecEF6qzr3 SWxwFcQwm6zi8LQDK3uhuziS77r5lg5lTtkBKWHwhbMAi16eQU0SN6FrtYXyVpkk CeKKs7qfOCcbHlskwf+BNmyh3tqyJkY2lU4qTlSkBZIV9UbfWbtSGFLgKdSmbq+9 hhFAhzFYkYMCMaDmnq2nVRkOVeMpzP+j96aiwVi4cljsUGb2eZFmd8lDjnjKjK/9 hZU1tBIW45qZFdT87arHpgMdlBh66qQ= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:27 2025 by rpki-client