$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa File: 555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa (raw, json) Hash identifier: GlEXgCQG4FUdCUge8SJRGgHOj7a2zkxSKkUn6zEUTSY= Subject key identifier: 78:50:95:73:EC:E7:73:45:A2:12:3B:9E:6B:93:E7:57:C7:FB:E3:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABBF5848ABED5EDAFB8F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.29.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bf:58:48:ab:ed:5e:da:fb:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=43c7eb17-ccfd-4578-85ca-000d29e0dc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:12:44:03:ea:90:37:ea:31:68:18:52:d9:e2: 4e:0c:fc:8b:ad:e7:d3:48:a6:33:cd:52:77:3f:1c: ec:36:4b:05:1e:66:6b:ad:f0:89:d8:e9:af:65:23: 88:46:59:ef:33:66:d4:19:97:5a:cb:04:d0:3c:2b: 85:7c:4a:05:b7:91:a7:3f:af:64:43:5a:1b:0a:ae: a0:44:8c:e2:23:c4:61:a8:39:a4:ac:6b:ea:2d:57: 8f:9c:81:b3:26:f1:3a:f4:5d:34:a8:c4:89:b8:63: d9:fc:48:73:ea:c3:c8:ee:ec:9f:e2:e8:ab:cd:0b: 3b:4d:35:0c:3f:c7:80:35:1d:9e:70:d7:70:26:8a: 31:0f:c9:42:ab:2c:9d:80:ca:6c:6c:c8:88:2b:f1: 8e:0d:5a:6b:f8:e9:9a:04:d3:5a:1f:05:a9:07:48: 72:f2:6d:6b:cd:51:67:16:e7:ae:07:d8:e2:9a:07: 07:51:77:b4:67:82:e0:61:fe:bf:8f:8c:fb:5b:27: 9c:cd:7c:93:61:ea:72:19:85:a7:a2:aa:dd:59:03: fa:e7:52:4c:88:26:72:1b:85:50:33:dd:9e:06:2f: 6b:7f:fd:ab:df:38:f2:8f:3d:21:dc:50:dc:8a:8b: a7:71:57:8b:94:56:ea:14:65:a8:a4:4f:56:2e:34: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:50:95:73:EC:E7:73:45:A2:12:3B:9E:6B:93:E7:57:C7:FB:E3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f1:cc:ad:c8:5a:13:d0:c5:c9:bd:43:01:fb:c0:71:13:0d: 5a:d8:d4:d9:35:84:72:99:1c:39:23:0a:37:fa:a6:7a:90:ae: 19:7b:eb:50:62:80:78:82:0b:f1:b5:62:85:2f:e1:45:a3:d6: a5:d0:1f:8a:63:76:1d:ac:4f:21:89:ba:95:07:59:23:7a:07: 97:f0:86:bb:0b:70:ef:d3:87:40:82:92:f0:bc:1b:f1:97:e4: d8:5f:08:00:24:e1:60:81:b7:e6:ce:92:af:ea:12:34:74:1b: d1:ef:5a:fc:6a:04:11:cc:0f:ea:3a:86:65:9e:f4:f4:dc:11: 97:43:56:a9:7a:fa:e8:a1:b9:fe:2a:51:32:fb:fe:73:c1:4f: c6:54:f2:29:70:1d:13:86:9f:1a:c2:f9:d7:18:db:8c:8a:1a: bf:bc:3e:03:55:5d:d8:e2:f0:1d:48:e2:4a:cd:20:59:32:a1: 2f:d2:a9:f3:38:15:7c:22:29:ea:96:d9:a4:9b:e7:24:a9:70: 34:cc:49:9b:df:d8:ab:4d:25:fd:72:92:51:1a:4e:7f:ce:96: 05:e9:87:71:bc:ee:85:e8:a2:75:ef:43:67:eb:dc:a5:04:b9: be:38:a6:b0:1d:2f:bf:50:43:f7:6b:82:87:96:fb:83:42:4b: 4e:32:13:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq79YSKvtXtr7j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NDNjN2ViMTctY2NmZC00NTc4LTg1Y2EtMDAwZDI5ZTBkYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRJEA+qQN+oxaBhS2eJODPyLrefTSKYzzVJ3 PxzsNksFHmZrrfCJ2OmvZSOIRlnvM2bUGZdaywTQPCuFfEoFt5GnP69kQ1obCq6g RIziI8RhqDmkrGvqLVePnIGzJvE69F00qMSJuGPZ/Ehz6sPI7uyf4uirzQs7TTUM P8eANR2ecNdwJooxD8lCqyydgMpsbMiIK/GODVpr+OmaBNNaHwWpB0hy8m1rzVFn FueuB9jimgcHUXe0Z4LgYf6/j4z7WyeczXyTYepyGYWnoqrdWQP651JMiCZyG4VQ M92eBi9rf/2r3zjyjz0h3FDciouncVeLlFbqFGWopE9WLjSEswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhQlXPs53NFohI7nmuT51fH++PyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU1ZmY5N2ItN2RiNS0z MGNjLThlMGMtZWE0MDJiNzc5ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfxzK3IWhPQxcm9QwH7wHETDVrY1Nk1hHKZHDkjCjf6pnqQrhl761Bi gHiCC/G1YoUv4UWj1qXQH4pjdh2sTyGJupUHWSN6B5fwhrsLcO/Th0CCkvC8G/GX 5NhfCAAk4WCBt+bOkq/qEjR0G9HvWvxqBBHMD+o6hmWe9PTcEZdDVql6+uihuf4q UTL7/nPBT8ZU8ilwHROGnxrC+dcY24yKGr+8PgNVXdji8B1I4krNIFkyoS/SqfM4 FXwiKeqW2aSb5ySpcDTMSZvf2KtNJf1yklEaTn/OlgXph3G87oXoonXvQ2fr3KUE ub44prAdL79QQ/drgoeW+4NCS04yE5Q= -----END CERTIFICATE-----Generated at Thu Apr 10 04:06:04 2025 by rpki-client