$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa File: 4a247f56-b1dc-3ee6-aeef-1edd281752db.roa (raw, json) Hash identifier: 7YfNQmFLO3mfw3WBHAMOUn74SYYt6/QPWQWIL3kkpFg= Subject key identifier: 54:0E:F0:73:B0:73:DA:B6:7A:AA:D7:B7:81:60:EE:FB:80:89:A9:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BE861D3CED0D665779433A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:1d:3c:ed:0d:66:57:79:43:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=70006f44-2c7c-4402-bcb3-741d401898e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:23:ba:d5:46:df:d3:6e:f1:a4:da:92:1b: 0c:8e:21:ed:15:bb:8a:0c:f0:94:13:bc:88:ef:18: f4:a9:61:be:ef:dc:0a:20:e2:da:5c:48:ec:07:9f: 3a:77:c4:f2:08:f8:93:10:80:f1:ae:f8:77:2d:59: a8:0d:26:a9:43:df:09:f3:c2:3f:7c:b9:36:c4:26: 02:1f:6f:46:ff:34:61:b4:da:14:d0:80:5c:47:e5: 15:24:a2:e1:73:0c:2e:ea:8b:7f:0e:af:de:7e:a9: 08:86:65:1b:dd:06:27:96:fa:0b:26:76:9d:86:16: bd:fa:3e:c1:3c:fb:81:70:7c:44:ec:2a:1f:4e:1d: 59:fe:f0:a7:ad:36:5d:f5:af:ce:62:ce:ca:d4:dd: 76:03:0a:75:b4:9b:1f:31:18:1d:5a:33:bc:71:af: ed:0d:3f:61:44:13:88:89:e0:9a:34:44:59:28:29: 27:79:22:11:d7:e8:c9:09:30:b0:44:bd:c5:e5:08: 97:68:6e:92:1a:10:ee:7f:5d:14:72:25:29:d9:f4: b8:34:f0:e4:ba:f7:e7:a7:c8:26:d5:a5:fc:e9:c7: 38:80:c6:cc:34:ee:9a:75:f8:e9:cd:c2:a9:6d:76: 21:fb:63:41:e8:76:7f:3e:4f:24:91:99:13:10:34: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0E:F0:73:B0:73:DA:B6:7A:AA:D7:B7:81:60:EE:FB:80:89:A9:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a247f56-b1dc-3ee6-aeef-1edd281752db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:37:2e:80:e6:55:86:fe:26:96:49:fc:15:e9:de:03:8a:f7: 9f:95:2b:37:95:37:c8:c2:0d:cb:e7:d4:6b:ee:db:08:50:74: 17:6b:3d:c0:75:77:2c:ea:36:bf:10:28:42:22:e1:09:54:1f: 18:d9:d9:23:d6:78:c2:5f:3e:8a:74:ee:f4:ef:1a:e5:04:24: 89:87:b5:8d:25:95:b1:a2:87:dd:d2:0d:5d:98:78:71:5a:5d: 7b:f8:13:72:68:9d:97:fb:89:99:32:f7:11:a6:27:f7:b5:d6: 29:f8:0e:68:b9:6a:15:e9:59:f1:f8:b1:3a:27:41:63:83:3a: e1:a5:c1:f4:5b:44:7d:6f:e8:1a:51:b8:76:f2:29:61:58:e3: 7e:48:d2:31:7c:e6:f4:97:b5:9f:22:f4:83:2f:6c:4a:c1:87: 47:01:68:17:ce:b3:a0:3f:ec:32:af:52:35:52:02:6f:ab:59: 0c:a9:77:5f:7f:a1:2f:b8:66:7f:a7:f4:22:58:df:7b:76:1b: 47:fe:b4:67:6f:56:ad:6c:3e:48:9f:3d:04:43:fa:f8:90:d2: 42:99:5a:4c:2a:90:78:d3:ef:01:dc:2b:e5:04:41:4b:b5:a7: c1:6d:5b:5e:ac:c8:d5:05:d7:b3:59:b4:54:43:22:2e:39:af: b7:b1:9e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hh087Q1mV3lDOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NzAwMDZmNDQtMmM3Yy00NDAyLWJjYjMtNzQxZDQwMTg5OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUcjutVG39Nu8aTakhsMjiHtFbuKDPCUE7yI 7xj0qWG+79wKIOLaXEjsB586d8TyCPiTEIDxrvh3LVmoDSapQ98J88I/fLk2xCYC H29G/zRhtNoU0IBcR+UVJKLhcwwu6ot/Dq/efqkIhmUb3QYnlvoLJnadhha9+j7B PPuBcHxE7CofTh1Z/vCnrTZd9a/OYs7K1N12Awp1tJsfMRgdWjO8ca/tDT9hRBOI ieCaNERZKCkneSIR1+jJCTCwRL3F5QiXaG6SGhDuf10UciUp2fS4NPDkuvfnp8gm 1aX86cc4gMbMNO6adfjpzcKpbXYh+2NB6HZ/Pk8kkZkTEDR0KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQO8HOwc9q2eqrXt4Fg7vuAiannMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyNDdmNTYtYjFkYy0z ZWU2LWFlZWYtMWVkZDI4MTc1MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs3LoDmVYb+JpZJ/BXp3gOK95+VKzeVN8jCDcvn1Gvu2whQdBdrPcB1 dyzqNr8QKEIi4QlUHxjZ2SPWeMJfPop07vTvGuUEJImHtY0llbGih93SDV2YeHFa XXv4E3JonZf7iZky9xGmJ/e11in4Dmi5ahXpWfH4sTonQWODOuGlwfRbRH1v6BpR uHbyKWFY435I0jF85vSXtZ8i9IMvbErBh0cBaBfOs6A/7DKvUjVSAm+rWQypd19/ oS+4Zn+n9CJY33t2G0f+tGdvVq1sPkifPQRD+viQ0kKZWkwqkHjT7wHcK+UEQUu1 p8FtW16syNUF17NZtFRDIi45r7exnvk= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:42 2025 by rpki-client