$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa File: 4193fa81-f8ac-363a-9704-2c5c108fed13.roa (raw, json) Hash identifier: KBa5KG6IANJ0GVOpjMIPzfTYyHkc5lUm2ZOd8kpfJM0= Subject key identifier: EB:56:6B:EF:16:5E:0D:8E:DF:0E:69:B4:5B:56:A4:B0:D8:6B:5F:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849473402B6A59FF131B5500B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:34:02:b6:a5:9f:f1:31:b5:50:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=90145e22-b5d0-406c-8feb-a862c3828e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:28:3c:78:4e:3c:de:7e:18:fa:e1:63:63: 00:ea:b1:d5:04:a5:e5:bd:ed:a2:78:30:54:2b:98: ad:8e:27:1d:f0:89:51:01:2a:ef:93:7e:ca:f0:6d: 70:70:d5:f2:81:7f:4c:5b:cb:ed:b3:d9:67:60:8c: 56:0e:0a:fc:23:c1:02:37:71:e3:cf:08:5c:67:20: a1:63:0b:2c:30:dd:c9:45:15:91:7e:63:da:6d:52: 17:13:49:4e:62:2d:0f:49:6c:79:b0:02:68:6b:eb: ed:ed:fa:cc:22:db:81:10:b7:fa:09:80:9f:a2:01: 24:dc:b2:ac:a5:ea:e4:6a:98:9c:25:b7:f4:9b:55: 4a:0e:43:9c:9e:6a:16:18:f2:66:52:ce:ff:5b:c9: 9b:1a:cf:a3:60:59:f7:d5:19:73:18:41:03:b6:e2: 53:0b:6f:b0:97:a8:9e:5c:0d:7c:d0:74:05:cf:e6: b7:12:a1:f4:41:29:6b:81:9b:c1:29:95:f8:1e:f4: 88:b4:c6:6f:8b:73:40:ef:9e:62:c9:5c:63:6e:f3: 5c:d0:64:ff:a9:35:87:33:1a:b3:57:54:d8:5a:80: 5f:b8:db:58:ab:1d:9a:b6:5a:02:cf:93:5f:d1:dd: b1:b6:87:40:ec:d2:8a:84:fb:21:e4:2c:0d:a6:43: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:6B:EF:16:5E:0D:8E:DF:0E:69:B4:5B:56:A4:B0:D8:6B:5F:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ac:8b:a6:52:5d:2a:c3:7e:a9:23:bc:d8:f8:de:47:d3:01: 3d:d4:f4:82:e5:03:95:52:9c:c9:ef:f1:8f:c0:7f:1b:f8:e6: 93:50:02:71:e0:25:3e:c1:fd:01:45:91:39:7b:d0:a6:43:28: 92:ff:92:cb:3a:bc:2f:35:98:58:08:7a:1c:82:ec:59:e4:b7: 4b:b0:65:fb:29:d4:d8:63:c5:aa:30:51:ed:55:a3:78:62:f1: 8e:69:de:d6:3c:18:22:be:41:9a:3d:cf:22:6f:52:1c:f2:84: 8e:97:0c:64:4a:1f:22:31:a1:75:14:77:50:45:22:12:91:cc: d9:03:39:88:46:7d:8c:7b:6c:9d:38:34:b6:06:e7:24:a2:f3: 72:95:9a:9a:5d:44:d5:e3:7c:d2:f6:44:c5:87:34:8e:1b:8f: b8:b2:95:ea:d6:c6:0d:db:ce:72:48:3a:4e:87:10:bc:83:08: b1:83:a0:ef:01:05:4b:21:f7:e9:a7:f8:d8:c4:75:d3:a9:c7: c4:b8:48:6d:8b:e7:00:69:e2:d9:e9:c5:ed:bf:88:9e:bc:b9: 6c:08:d5:bf:e3:f8:e2:cc:13:02:6c:f5:19:f6:f6:8f:e8:b5: 8d:5d:90:d8:38:26:33:12:33:71:37:5b:a9:13:3f:db:9e:46: 3d:63:f4:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHNAK2pZ/xMbVQCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTAxNDVlMjItYjVkMC00MDZjLThmZWItYTg2MmMzODI4ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb8oPHhOPN5+GPrhY2MA6rHVBKXlve2ieDBU K5itjicd8IlRASrvk37K8G1wcNXygX9MW8vts9lnYIxWDgr8I8ECN3HjzwhcZyCh YwssMN3JRRWRfmPabVIXE0lOYi0PSWx5sAJoa+vt7frMItuBELf6CYCfogEk3LKs perkapicJbf0m1VKDkOcnmoWGPJmUs7/W8mbGs+jYFn31RlzGEEDtuJTC2+wl6ie XA180HQFz+a3EqH0QSlrgZvBKZX4HvSItMZvi3NA755iyVxjbvNc0GT/qTWHMxqz V1TYWoBfuNtYqx2atloCz5Nf0d2xtodA7NKKhPsh5CwNpkMihQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtWa+8WXg2O3w5ptFtWpLDYa1+GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE5M2ZhODEtZjhhYy0z NjNhLTk3MDQtMmM1YzEwOGZlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISsi6ZSXSrDfqkjvNj43kfTAT3U9ILlA5VSnMnv8Y/Afxv45pNQAnHg JT7B/QFFkTl70KZDKJL/kss6vC81mFgIehyC7Fnkt0uwZfsp1NhjxaowUe1Vo3hi 8Y5p3tY8GCK+QZo9zyJvUhzyhI6XDGRKHyIxoXUUd1BFIhKRzNkDOYhGfYx7bJ04 NLYG5ySi83KVmppdRNXjfNL2RMWHNI4bj7iylerWxg3bznJIOk6HELyDCLGDoO8B BUsh9+mn+NjEddOpx8S4SG2L5wBp4tnpxe2/iJ68uWwI1b/j+OLMEwJs9Rn29o/o tY1dkNg4JjMSM3E3W6kTP9ueRj1j9KA= -----END CERTIFICATE-----Generated at Sun Apr 6 14:01:36 2025 by rpki-client