$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa File: 568233e0-8076-307e-941b-cf901e9814cd.roa (raw, json) Hash identifier: c/Tzfvz1dLHwOgiQ+9OqLhJ7CAx9sbHlgiUMT9AwMZY= Subject key identifier: C9:3C:E9:D5:EE:B4:48:EB:ED:05:40:A2:A5:C8:17:07:FE:A9:41:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584960525D9432D6D8F98C494880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa Signing time: Tue 01 Apr 2025 00:57:23 +0000 ROA not before: Tue 01 Apr 2025 00:57:23 +0000 ROA not after: Mon 30 Jun 2025 00:57:23 +0000 asID: 7029 IP address blocks: 71.29.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:52:5d:94:32:d6:d8:f9:8c:49:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 1 00:57:23 2025 GMT Not After : Jun 30 00:57:23 2025 GMT Subject: CN=b6a41794-24b4-46a7-ac48-76fa4a3df2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:e9:ce:e0:b1:8c:7d:07:0c:13:a3:12:6b: b7:bc:d7:7e:c1:cb:09:b3:67:c1:46:7a:2e:23:db: 76:58:2e:91:bd:ea:b1:91:2b:32:24:7f:e1:7a:43: ca:b6:00:94:c6:d6:9e:ce:76:05:5c:b9:1a:aa:63: cf:3a:ef:02:d5:4f:11:9a:55:50:b9:31:5d:bf:3b: 8d:4b:5c:04:3d:1b:cc:f5:9b:5d:3c:23:bf:e9:2f: ea:fe:6b:87:c5:0f:72:91:e7:9f:f3:88:6f:26:2b: 5d:8a:e5:c7:e1:7a:57:c1:b9:2f:78:27:38:70:99: 84:05:8b:94:ea:79:90:a5:17:8f:9a:fd:12:c5:6b: ef:dc:bf:72:ad:04:a5:60:24:f6:6c:51:d3:d0:e8: a5:ed:09:25:f7:67:36:d8:3b:78:16:4a:8a:f8:7e: d1:18:92:f7:00:6e:d9:d3:88:f0:51:d6:67:bd:b4: ce:8b:28:dc:be:fb:80:27:46:78:ee:5c:7a:62:85: 13:f9:a6:83:59:0b:2a:8a:41:0c:f9:e0:b8:a6:ef: 46:81:24:70:4e:59:d9:cd:b1:3a:c4:ef:5b:ea:30: 85:f6:38:34:9c:e7:37:23:76:35:3e:c2:f6:66:d1: 56:09:81:4d:5d:33:41:93:c6:19:ed:da:4e:f0:9b: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3C:E9:D5:EE:B4:48:EB:ED:05:40:A2:A5:C8:17:07:FE:A9:41:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:84:e0:80:97:8f:53:c1:e4:4d:f1:b4:19:aa:34:1e:ca:90: 30:63:93:f9:ad:d9:f9:3c:da:e4:d9:81:e5:d6:7c:b1:c4:e6: 5b:7a:65:09:5d:77:5d:43:4c:8f:f7:59:e1:04:13:e2:e5:eb: ea:c1:c4:34:ad:0d:31:b3:4f:ea:a2:12:c3:52:bc:4f:0c:bc: 5b:cf:31:42:e6:5d:f2:34:93:c8:76:d2:19:43:fb:99:3a:15: db:1b:b5:4c:16:d3:91:ab:4e:d7:c2:2b:92:12:74:d5:a5:35: 09:27:77:ee:0d:41:35:b7:08:2c:ff:90:bc:d3:0c:09:79:5b: 6c:b1:a9:ba:b2:12:45:f4:6e:c9:56:9e:11:56:3a:00:9d:92: 2e:22:28:39:96:39:4d:8b:30:2c:d1:4d:fb:53:a8:74:8d:dc: 84:63:61:01:11:31:82:90:96:18:a8:24:17:26:44:cf:fc:1b: b0:13:6d:5e:52:8e:19:50:09:0b:2f:68:f3:12:91:ed:c7:68: ce:ca:e7:0e:1f:18:7b:4f:79:f8:03:6b:ec:7a:44:d3:54:4a: 0f:34:42:11:ec:5d:4e:f0:5b:b1:0c:7c:2b:02:d4:11:44:20: 58:a1:3c:09:cd:50:79:cc:30:17:84:f5:0e:b7:0f:24:58:1e: 56:8d:0c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgUl2UMtbY+YxJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwMTAwNTcyM1oXDTI1MDYzMDAwNTcyM1owLzEtMCsGA1UEAxMk YjZhNDE3OTQtMjRiNC00NmE3LWFjNDgtNzZmYTRhM2RmMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD/pzuCxjH0HDBOjEmu3vNd+wcsJs2fBRnou I9t2WC6RveqxkSsyJH/hekPKtgCUxtaeznYFXLkaqmPPOu8C1U8RmlVQuTFdvzuN S1wEPRvM9ZtdPCO/6S/q/muHxQ9ykeef84hvJitdiuXH4XpXwbkveCc4cJmEBYuU 6nmQpRePmv0SxWvv3L9yrQSlYCT2bFHT0Oil7Qkl92c22Dt4FkqK+H7RGJL3AG7Z 04jwUdZnvbTOiyjcvvuAJ0Z47lx6YoUT+aaDWQsqikEM+eC4pu9GgSRwTlnZzbE6 xO9b6jCF9jg0nOc3I3Y1PsL2ZtFWCYFNXTNBk8YZ7dpO8JtUKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk86dXutEjr7QVAoqXIFwf+qUH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MjMzZTAtODA3Ni0z MDdlLTk0MWItY2Y5MDFlOTgxNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuE4ICXj1PB5E3xtBmqNB7KkDBjk/mt2fk82uTZgeXWfLHE5lt6ZQld d11DTI/3WeEEE+Ll6+rBxDStDTGzT+qiEsNSvE8MvFvPMULmXfI0k8h20hlD+5k6 FdsbtUwW05GrTtfCK5ISdNWlNQknd+4NQTW3CCz/kLzTDAl5W2yxqbqyEkX0bslW nhFWOgCdki4iKDmWOU2LMCzRTftTqHSN3IRjYQERMYKQlhioJBcmRM/8G7ATbV5S jhlQCQsvaPMSke3HaM7K5w4fGHtPefgDa+x6RNNUSg80QhHsXU7wW7EMfCsC1BFE IFihPAnNUHnMMBeE9Q63DyRYHlaNDCc= -----END CERTIFICATE-----Generated at Sat Apr 5 18:40:01 2025 by rpki-client