$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa File: 6d313f68-163c-307a-a84d-e9a01b347c96.roa (raw, json) Hash identifier: Cnl56+wfmi0H93MZciMPg7Zm4OoM7ZBxzgcMKUYo8gg= Subject key identifier: B6:07:A9:76:D3:3A:23:DA:28:52:F7:AF:14:0C:79:8D:AF:26:9C:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C22FAB9E5C048D34A6980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.29.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:22:fa:b9:e5:c0:48:d3:4a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=1c58559e-8bb1-4ac4-8a2a-6d812b653168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:d7:75:df:a1:58:7f:0a:7e:92:8e:9c:a9: c6:60:08:8d:3c:93:2f:eb:e4:83:35:ba:39:ea:59: 98:a8:61:b4:29:fa:5b:e5:8f:ed:9b:77:d0:57:f4: 72:6b:16:7f:37:d7:75:b0:ac:b0:9d:e8:48:4e:9d: cd:eb:dc:e7:5a:3c:08:d3:7a:12:8b:e2:0c:c5:02: f4:cb:33:b7:f7:c1:68:1c:37:24:83:92:76:05:44: 67:05:f2:69:20:4b:53:cb:11:49:cd:f8:2a:69:17: b6:3c:ae:22:62:78:dc:57:65:4e:8c:bc:54:46:82: 0c:73:77:30:23:61:0c:36:8f:27:39:2a:46:51:27: 10:84:b9:32:67:81:22:8c:3c:a9:2e:92:cf:d3:a8: 6a:94:e6:dd:ca:de:11:01:6f:85:2d:a8:c6:2f:76: a0:d0:c1:d3:82:87:14:c2:34:9e:9a:b1:89:1b:24: 03:19:3c:9b:2a:0a:87:13:8a:57:7f:60:84:63:91: 62:3d:a8:6e:1c:78:ae:d5:fa:ba:0f:e7:d3:9a:b6: 6a:71:48:0f:76:19:98:e3:30:f7:38:fc:86:ea:70: cc:49:da:c0:2c:79:19:20:c0:a1:5c:01:e7:84:0d: cf:d1:0e:6a:85:53:ae:f9:61:b2:20:b8:ea:ec:6e: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:07:A9:76:D3:3A:23:DA:28:52:F7:AF:14:0C:79:8D:AF:26:9C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d313f68-163c-307a-a84d-e9a01b347c96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:81:05:79:d9:ef:f0:bf:c2:c1:0b:3f:c6:04:64:83:2b:3e: 83:1f:ff:b3:84:b5:66:15:ac:ba:6d:49:4d:3e:15:02:11:fe: 48:e7:c9:80:dd:9c:32:c3:fc:cd:bd:0a:5f:d8:10:96:d5:c5: 0a:02:dd:82:01:47:16:a7:c8:c0:e9:2e:0e:46:c5:69:e1:ab: 5d:65:cc:1f:59:19:60:8d:2c:65:88:ce:af:a6:ed:76:63:a3: eb:16:b8:32:72:ce:79:4f:51:30:10:2f:24:3a:35:b0:8c:93: 5a:46:9c:c0:ba:4c:d2:e5:48:77:5e:71:c0:3e:67:90:7f:43: a3:9d:f5:1a:ee:10:9d:e6:bc:99:8b:23:58:f2:ef:e1:92:25: 65:a2:37:b1:e1:26:2a:2e:99:63:df:ef:5a:fb:0a:0f:f4:d7: 9d:38:bc:69:e7:af:0f:13:3f:3e:c5:aa:50:04:13:80:da:83: e6:bd:e6:53:2b:16:b5:fc:8f:ec:e9:23:c0:96:7b:a3:2c:f1: cc:24:51:5b:bc:88:d9:a8:7f:13:9c:14:34:79:68:da:9f:84: 08:49:b2:50:f2:a0:33:de:fd:8b:d7:7f:85:0a:c3:62:f5:39: da:3f:8c:06:f4:49:77:24:79:75:89:29:14:8b:8d:73:f8:e1: 1b:89:95:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCL6ueXASNNKaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MWM1ODU1OWUtOGJiMS00YWM0LThhMmEtNmQ4MTJiNjUzMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2HXdd+hWH8KfpKOnKnGYAiNPJMv6+SDNbo5 6lmYqGG0Kfpb5Y/tm3fQV/RyaxZ/N9d1sKywnehITp3N69znWjwI03oSi+IMxQL0 yzO398FoHDckg5J2BURnBfJpIEtTyxFJzfgqaRe2PK4iYnjcV2VOjLxURoIMc3cw I2EMNo8nOSpGUScQhLkyZ4EijDypLpLP06hqlObdyt4RAW+FLajGL3ag0MHTgocU wjSemrGJGyQDGTybKgqHE4pXf2CEY5FiPahuHHiu1fq6D+fTmrZqcUgPdhmY4zD3 OPyG6nDMSdrALHkZIMChXAHnhA3P0Q5qhVOu+WGyILjq7G56nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYHqXbTOiPaKFL3rxQMeY2vJpw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQzMTNmNjgtMTYzYy0z MDdhLWE4NGQtZTlhMDFiMzQ3Yzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeBBXnZ7/C/wsELP8YEZIMrPoMf/7OEtWYVrLptSU0+FQIR/kjnyYDd nDLD/M29Cl/YEJbVxQoC3YIBRxanyMDpLg5GxWnhq11lzB9ZGWCNLGWIzq+m7XZj o+sWuDJyznlPUTAQLyQ6NbCMk1pGnMC6TNLlSHdeccA+Z5B/Q6Od9RruEJ3mvJmL I1jy7+GSJWWiN7HhJioumWPf71r7Cg/01504vGnnrw8TPz7FqlAEE4Dag+a95lMr FrX8j+zpI8CWe6Ms8cwkUVu8iNmofxOcFDR5aNqfhAhJslDyoDPe/YvXf4UKw2L1 Odo/jAb0SXckeXWJKRSLjXP44RuJlXk= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:52 2025 by rpki-client