$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa File: 5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa (raw, json) Hash identifier: pgGTczAy/fQ/cZQ7+xjJi0in9ITBUTCygwPFdrCRFPM= Subject key identifier: 52:9A:B1:81:73:E9:98:29:2D:D6:29:51:F4:89:FA:09:CF:9C:AC:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715FB2B0DFDD08B7D19DE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:b2:b0:df:dd:08:b7:d1:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=0246ac49-0991-4581-b476-3b177682dd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:01:02:b8:2d:15:9d:9f:9e:e4:6f:ba:c9: 3a:bb:d1:97:a9:c9:da:9e:52:21:31:c9:8a:72:69: 54:9e:fc:94:b3:dc:5c:d1:06:fa:b0:b7:51:4a:d8: 0f:17:b5:9a:4b:41:9d:7f:75:97:04:7d:6a:da:d5: d6:4b:e0:fd:d8:d3:39:a1:f8:60:ce:18:a3:ce:b2: 88:af:3e:fc:c4:cc:15:be:d8:21:13:9b:e2:05:71: 55:8a:b1:be:69:e5:06:86:a1:4b:ea:cf:af:bd:45: 46:b1:d8:5f:dd:39:81:e9:c3:9b:c0:2c:12:87:5e: 84:b8:e6:5b:06:2e:75:af:b1:e7:d2:b5:e3:87:af: 31:b7:62:d7:6e:05:e5:c9:03:33:fc:de:61:26:78: 8d:ad:c5:70:5c:21:8f:ba:93:56:60:53:6c:45:65: 6b:2d:5b:d5:a1:1d:af:83:f7:0f:19:3b:5c:25:b4: 03:4c:f7:fb:9c:4e:6c:19:73:1b:b9:f3:9e:e2:e2: a6:37:12:0a:b2:43:19:03:39:d0:39:24:3d:33:01: f6:02:d1:a7:6a:48:b8:b1:a3:67:54:33:fe:9c:4b: 9f:3c:5d:d5:02:b8:ba:90:e0:a3:70:e1:8e:68:61: 30:e9:76:47:02:c7:db:14:39:c8:d4:a6:2d:86:00: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9A:B1:81:73:E9:98:29:2D:D6:29:51:F4:89:FA:09:CF:9C:AC:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ee:be:94:49:c7:84:53:39:3c:02:74:b5:bb:6b:8e:07:8e: 08:e4:fc:a7:77:9e:18:13:57:94:e4:94:be:9a:3e:e6:3b:32: 36:97:a7:2a:35:0e:e8:e0:9f:35:33:04:10:65:ca:52:72:fa: d3:f5:15:bf:c2:49:9f:95:c0:3a:87:75:50:55:3b:19:93:60: 7b:6d:ad:06:1f:6c:ce:2d:1a:69:40:12:d4:17:6c:c8:86:c3: 83:d1:92:1c:ef:aa:65:46:d3:11:4c:55:c1:2c:9e:22:59:55: 42:70:19:6b:c1:97:dc:ab:10:99:9c:47:96:0f:9c:e5:a4:27: 02:b6:cf:40:22:2a:a7:b5:f3:11:c3:5f:89:01:d7:1c:6c:cb: 64:62:51:6c:e1:21:d6:86:8b:61:59:37:92:e7:04:8c:34:82: ca:d6:b2:9a:35:de:5b:3e:1d:8b:3e:5c:27:4b:29:9e:7e:80: 97:77:fc:9c:0c:f2:fe:0f:a1:90:3f:23:24:88:5d:6f:da:4d: e4:d3:a5:66:90:19:cf:3e:a9:78:5f:f9:1c:7e:98:40:17:bc: fe:ed:2c:59:ce:69:a8:07:cb:64:f1:f9:d3:88:d8:6a:e6:09: 5d:c9:81:13:aa:25:e5:b8:a7:e6:35:60:e4:09:1f:1d:62:75: 7e:42:03:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV+ysN/dCLfRneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MDI0NmFjNDktMDk5MS00NTgxLWI0NzYtM2IxNzc2ODJkZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNEBArgtFZ2fnuRvusk6u9GXqcnanlIhMcmK cmlUnvyUs9xc0Qb6sLdRStgPF7WaS0Gdf3WXBH1q2tXWS+D92NM5ofhgzhijzrKI rz78xMwVvtghE5viBXFVirG+aeUGhqFL6s+vvUVGsdhf3TmB6cObwCwSh16EuOZb Bi51r7Hn0rXjh68xt2LXbgXlyQMz/N5hJniNrcVwXCGPupNWYFNsRWVrLVvVoR2v g/cPGTtcJbQDTPf7nE5sGXMbufOe4uKmNxIKskMZAznQOSQ9MwH2AtGnaki4saNn VDP+nEufPF3VAri6kOCjcOGOaGEw6XZHAsfbFDnI1KYthgC6EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKasYFz6ZgpLdYpUfSJ+gnPnKy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYxOWI5OGUtZTc5Yy0z MTViLWE3MmYtZmQ3MDIzZWI2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7uvpRJx4RTOTwCdLW7a44Hjgjk/Kd3nhgTV5TklL6aPuY7MjaXpyo1 DujgnzUzBBBlylJy+tP1Fb/CSZ+VwDqHdVBVOxmTYHttrQYfbM4tGmlAEtQXbMiG w4PRkhzvqmVG0xFMVcEsniJZVUJwGWvBl9yrEJmcR5YPnOWkJwK2z0AiKqe18xHD X4kB1xxsy2RiUWzhIdaGi2FZN5LnBIw0gsrWspo13ls+HYs+XCdLKZ5+gJd3/JwM 8v4PoZA/IySIXW/aTeTTpWaQGc8+qXhf+Rx+mEAXvP7tLFnOaagHy2Tx+dOI2Grm CV3JgROqJeW4p+Y1YOQJHx1idX5CAxw= -----END CERTIFICATE-----Generated at Fri Mar 14 08:24:01 2025 by rpki-client