$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa File: 717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa (raw, json) Hash identifier: BKyL5VGN2WYhC06u68hzTJnKOCxzOsqWsDpmxT7QTco= Subject key identifier: 36:E4:B5:E2:04:3F:1D:AC:93:6C:55:0F:86:EC:A0:D4:DF:69:78:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111D57307D325039980A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.7.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1d:57:30:7d:32:50:39:98:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=fa06f8c7-3d55-431b-923d-8ee7f0e374a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:93:30:63:b7:45:92:40:57:45:91:a3:93:c5: 4b:0c:e5:c4:f5:70:22:b8:58:f4:f9:7c:82:73:08: 44:41:f3:f2:a8:7c:90:23:b5:07:43:8a:10:07:c3: 63:d1:47:f8:ce:8e:96:65:04:34:16:6e:ea:16:fd: 02:bd:b7:24:c6:32:fc:77:9f:43:1e:ea:4e:8d:59: 54:eb:e3:86:e4:79:92:fd:48:cc:9e:f1:e2:60:64: ad:f0:73:3a:c5:fd:80:98:fd:21:ae:a8:0b:a4:33: 17:a9:10:83:b6:df:d8:1e:b0:6c:f2:2e:96:66:4d: 0a:b3:6b:1f:05:1d:1b:f9:be:27:6e:bc:01:ba:0e: de:a4:d2:f1:11:85:e5:50:64:13:d8:47:15:a9:7b: 5f:bb:f9:37:0f:d9:b2:21:2f:cf:84:14:3f:02:ee: 4c:d6:bc:26:e2:85:08:85:77:bf:ab:6f:4f:d4:d1: d7:bc:90:9a:f5:7c:3b:3e:f2:42:72:da:28:41:b0: 70:c5:2b:46:da:06:a9:0d:b7:e3:f9:63:96:92:be: 7b:f2:76:1d:f9:57:c2:ea:a6:7e:d5:5e:b1:e5:f4: 6a:a6:22:08:4e:3a:71:99:6d:4a:e4:dd:d3:25:0b: 11:45:00:b7:92:2a:b1:0a:27:21:b2:48:41:6f:c8: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E4:B5:E2:04:3F:1D:AC:93:6C:55:0F:86:EC:A0:D4:DF:69:78:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/717c4358-15b0-3f84-969e-b7f10fdb2f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:89:6a:8e:5e:35:d0:40:95:bd:b6:c2:1a:a1:39:0b:f1:2e: 67:b5:f1:b9:96:b8:44:46:ce:7f:09:87:ac:a8:b7:ce:32:ad: 77:66:6e:ac:69:53:b0:4e:ee:30:c1:e7:47:e2:f2:90:8d:91: d6:e4:14:53:c6:ab:64:89:bf:cf:8b:4c:51:7a:56:a8:e9:ce: 60:22:80:a3:94:60:67:3f:94:70:d3:ea:22:9d:11:8b:32:a3: 36:eb:64:d5:e1:7b:37:7a:36:3d:ea:11:e6:16:94:51:e0:53: 4a:74:78:62:a5:d5:4e:30:20:82:d8:e9:a9:c5:0f:0c:f5:76: be:2b:ef:c7:63:f2:d4:2a:76:db:4e:9f:e1:18:99:41:05:75: 3a:aa:0e:ff:2d:c4:8e:4a:25:74:6f:e2:e7:17:38:b8:c2:28: 12:c6:50:15:1e:40:e9:3b:85:16:c7:46:5f:66:93:23:95:b4: 93:3e:6e:aa:2d:a4:f3:aa:a5:0f:8d:83:6e:8f:19:34:ce:00: 80:e0:2d:30:05:07:34:2f:9a:01:be:0b:d2:28:ac:95:af:a2: 0a:ed:97:b2:ed:d0:c3:de:93:e5:0d:7a:fc:61:b9:4e:d4:b3: 9a:94:7c:54:c1:13:d4:8c:01:9e:af:5d:6e:7a:06:eb:44:a0: e7:b5:e6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER1XMH0yUDmYCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmEwNmY4YzctM2Q1NS00MzFiLTkyM2QtOGVlN2YwZTM3NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJMwY7dFkkBXRZGjk8VLDOXE9XAiuFj0+XyC cwhEQfPyqHyQI7UHQ4oQB8Nj0Uf4zo6WZQQ0Fm7qFv0CvbckxjL8d59DHupOjVlU 6+OG5HmS/UjMnvHiYGSt8HM6xf2AmP0hrqgLpDMXqRCDtt/YHrBs8i6WZk0Ks2sf BR0b+b4nbrwBug7epNLxEYXlUGQT2EcVqXtfu/k3D9myIS/PhBQ/Au5M1rwm4oUI hXe/q29P1NHXvJCa9Xw7PvJCctooQbBwxStG2gapDbfj+WOWkr578nYd+VfC6qZ+ 1V6x5fRqpiIITjpxmW1K5N3TJQsRRQC3kiqxCichskhBb8j/rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbkteIEPx2sk2xVD4bsoNTfaXhHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzE3YzQzNTgtMTViMC0z Zjg0LTk2OWUtYjdmMTBmZGIyZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwcnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2Jao5eNdBAlb22whqhOQvxLme18bmWuERGzn8Jh6yot84yrXdmbqxp U7BO7jDB50fi8pCNkdbkFFPGq2SJv8+LTFF6VqjpzmAigKOUYGc/lHDT6iKdEYsy ozbrZNXhezd6Nj3qEeYWlFHgU0p0eGKl1U4wIILY6anFDwz1dr4r78dj8tQqdttO n+EYmUEFdTqqDv8txI5KJXRv4ucXOLjCKBLGUBUeQOk7hRbHRl9mkyOVtJM+bqot pPOqpQ+Ng26PGTTOAIDgLTAFBzQvmgG+C9IorJWvogrtl7Lt0MPek+UNevxhuU7U s5qUfFTBE9SMAZ6vXW56ButEoOe15lE= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:33 2025 by rpki-client