$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa File: 4f94a629-79eb-368a-9b8f-56715d70c771.roa (raw, json) Hash identifier: XiVUvmtRGIqBd4axTxLosuSeHW7XlrgVxiYsW8w4t1I= Subject key identifier: BF:75:EA:BF:F5:AF:7C:28:94:8D:AB:D5:06:8C:CC:74:F8:08:79:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849576FE95F878C5CF93C11BE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa Signing time: Fri 28 Mar 2025 20:34:38 +0000 ROA not before: Fri 28 Mar 2025 20:34:38 +0000 ROA not after: Thu 26 Jun 2025 20:34:38 +0000 asID: 7029 IP address blocks: 71.28.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:6f:e9:5f:87:8c:5c:f9:3c:11:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 20:34:38 2025 GMT Not After : Jun 26 20:34:38 2025 GMT Subject: CN=7ee9ca0a-fbef-44b1-a845-a0fc8af667cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:16:b4:26:24:f2:3e:81:2f:df:41:4e:c4: f2:de:0e:16:34:87:a9:99:73:94:0b:47:3d:08:3b: f4:ba:fa:b0:cd:97:54:46:f5:30:da:0b:77:01:4c: 55:11:b4:96:73:d4:60:15:25:b3:81:84:96:14:0c: 06:e6:8f:73:08:8c:bb:16:93:79:a3:cf:a1:0d:6d: 34:2f:d0:4d:bf:ea:73:4c:74:7b:47:a9:cd:99:c0: c4:0b:e8:14:eb:73:4b:aa:40:04:cd:7f:f6:cb:5c: 25:b9:e2:85:ab:33:ae:c6:2c:b7:0a:61:2d:80:1d: 95:92:af:f9:13:1a:bd:51:30:2f:31:af:20:3d:b7: 26:84:42:b0:36:18:1c:21:3f:d9:e4:74:d4:bf:27: eb:5b:23:12:79:ea:c5:d3:04:cf:e6:99:f8:c8:2b: d4:02:13:e8:52:f5:0b:b2:a1:fb:41:1e:d2:6e:e2: ea:8d:af:93:ae:c5:ba:8d:b4:29:92:a8:af:0b:f8: 59:fd:a0:de:fc:d4:79:8b:e7:24:dc:06:7b:12:a6: 84:c8:6c:63:06:51:d4:52:67:45:90:6c:0e:e5:91: ca:77:5c:af:f8:a0:56:08:d6:53:31:7c:42:b7:3a: 7c:53:a7:f5:29:17:79:4d:58:d2:9d:3a:92:49:93: 95:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:EA:BF:F5:AF:7C:28:94:8D:AB:D5:06:8C:CC:74:F8:08:79:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:3a:d6:04:a5:a2:ae:55:ea:0d:3e:70:96:d4:1c:53:e9:0d: 4c:15:d2:af:07:00:78:1d:d7:34:7f:e6:6b:83:9b:4a:25:1b: 34:ee:01:24:86:15:4c:d8:bf:79:46:8d:bd:0d:a6:1c:e4:a1: 89:0e:7c:00:a8:8d:53:52:51:64:84:f8:25:5f:00:8b:95:af: 1d:c9:66:91:c7:b0:ad:22:9c:78:f0:41:7e:90:78:cd:7d:6b: b3:fa:4e:90:9b:6f:51:03:98:de:90:59:b4:a0:60:a0:2e:05: 70:57:71:d8:3e:3e:2e:33:4f:01:28:c9:fb:c5:8a:fe:3e:12: 02:52:4f:c6:54:50:f3:02:36:7f:35:55:98:28:f8:b2:74:ca: 0f:be:71:5f:5f:80:ce:e0:c0:32:01:98:b1:da:88:44:ab:9f: 61:1c:5f:5c:57:dc:34:02:02:bb:97:af:b3:8d:f2:46:10:04: 13:09:57:f4:d7:1d:c6:a8:db:9e:f1:c7:41:da:1b:6f:57:da: b4:c1:b6:3f:43:66:34:7d:12:4b:c9:b6:54:2c:51:06:b4:a5: 97:8a:92:c5:78:ce:18:8f:3d:ec:26:c8:bb:3f:9a:53:24:7b: a6:af:0c:e5:00:b8:0c:6a:ac:37:b7:3b:88:f6:72:3e:a5:06: b3:cc:75:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElXb+lfh4xc+TwRvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyODIwMzQzOFoXDTI1MDYyNjIwMzQzOFowLzEtMCsGA1UEAxMk N2VlOWNhMGEtZmJlZi00NGIxLWE4NDUtYTBmYzhhZjY2N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4wWtCYk8j6BL99BTsTy3g4WNIepmXOUC0c9 CDv0uvqwzZdURvUw2gt3AUxVEbSWc9RgFSWzgYSWFAwG5o9zCIy7FpN5o8+hDW00 L9BNv+pzTHR7R6nNmcDEC+gU63NLqkAEzX/2y1wlueKFqzOuxiy3CmEtgB2Vkq/5 Exq9UTAvMa8gPbcmhEKwNhgcIT/Z5HTUvyfrWyMSeerF0wTP5pn4yCvUAhPoUvUL sqH7QR7SbuLqja+TrsW6jbQpkqivC/hZ/aDe/NR5i+ck3AZ7EqaEyGxjBlHUUmdF kGwO5ZHKd1yv+KBWCNZTMXxCtzp8U6f1KRd5TVjSnTqSSZOVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL916r/1r3wolI2r1QaMzHT4CHn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5NGE2MjktNzllYi0z NjhhLTliOGYtNTY3MTVkNzBjNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg61gSloq5V6g0+cJbUHFPpDUwV0q8HAHgd1zR/5muDm0olGzTuASSG FUzYv3lGjb0NphzkoYkOfACojVNSUWSE+CVfAIuVrx3JZpHHsK0inHjwQX6QeM19 a7P6TpCbb1EDmN6QWbSgYKAuBXBXcdg+Pi4zTwEoyfvFiv4+EgJST8ZUUPMCNn81 VZgo+LJ0yg++cV9fgM7gwDIBmLHaiESrn2EcX1xX3DQCAruXr7ON8kYQBBMJV/TX Hcao257xx0HaG29X2rTBtj9DZjR9EkvJtlQsUQa0pZeKksV4zhiPPewmyLs/mlMk e6avDOUAuAxqrDe3O4j2cj6lBrPMdco= -----END CERTIFICATE-----Generated at Thu Apr 10 13:16:57 2025 by rpki-client