$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa File: 71a70251-1310-373d-a2b3-3aecbe490726.roa (raw, json) Hash identifier: UJZwHOxD93bEyka1gizmrXzYr3yVVZ79DoCp1hD/eUI= Subject key identifier: 94:E0:D6:03:E9:63:A5:46:9F:66:20:CB:F5:77:F2:7E:62:78:D9:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858495F993921EE96B59C53AD8100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa Signing time: Mon 31 Mar 2025 18:44:21 +0000 ROA not before: Mon 31 Mar 2025 18:44:21 +0000 ROA not after: Sun 29 Jun 2025 18:44:21 +0000 asID: 7029 IP address blocks: 71.29.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:99:39:21:ee:96:b5:9c:53:ad:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 31 18:44:21 2025 GMT Not After : Jun 29 18:44:21 2025 GMT Subject: CN=f3f5eb22-cf4b-44fb-ab50-e341d893c59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:8c:a3:f4:8d:0a:44:0e:b0:be:4e:65:5c: 57:99:1d:98:bd:37:d8:6b:ad:96:ce:31:de:66:f6: b3:8f:b1:b6:d1:88:af:aa:59:1d:b6:8b:c1:e5:19: 54:a7:ee:6a:68:89:ab:9c:b7:19:50:38:42:f8:3b: c5:bb:ea:bb:e3:3e:48:91:d4:a7:07:a4:76:6e:4b: 25:89:fa:2f:bf:7a:c5:47:56:7d:b4:61:bb:2b:56: eb:db:d2:cf:28:d7:be:9a:8a:50:2a:ec:78:0c:7b: 0a:18:fd:93:2e:a0:f5:b7:89:df:75:ec:5d:f4:e1: de:aa:93:68:bd:06:c8:4f:19:01:e5:43:db:09:eb: 3f:b2:95:87:dd:a6:ed:af:07:85:7b:55:1c:d4:a2: 83:32:9d:1f:a6:44:80:b4:fe:03:89:20:dd:bf:34: 0a:da:ba:47:84:3e:ed:aa:05:b8:18:f4:40:17:3e: d0:bd:29:44:dd:30:d8:5c:92:9e:18:cd:5d:4d:ea: 55:39:9b:20:81:fd:54:2c:a9:f3:a1:14:d6:95:8e: 07:b7:75:d2:40:ab:99:28:b3:8f:1c:00:68:31:b7: e8:27:5f:3b:a7:f2:7a:64:c9:e0:4a:d2:55:a5:f8: 18:1d:c3:bc:95:86:e2:42:b4:5c:a7:d4:94:20:6a: 28:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:D6:03:E9:63:A5:46:9F:66:20:CB:F5:77:F2:7E:62:78:D9:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/71a70251-1310-373d-a2b3-3aecbe490726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:06:14:89:5c:93:03:a4:9a:de:90:ac:93:fc:f2:e4:49:58: c8:64:6f:bd:c2:14:d8:f1:52:c9:72:77:6e:6b:d6:ea:dd:a0: a8:69:05:2c:dd:fd:e6:2f:bd:62:4b:a7:a7:97:8e:e8:ff:e9: 38:a0:5b:20:73:e8:f4:6c:e1:bd:b7:80:60:f5:58:7c:49:9d: 66:92:6f:02:79:31:27:6e:39:6f:70:0d:56:04:3a:03:ff:29: b8:3d:52:6d:2f:b2:c2:09:6a:1e:4d:d5:03:6b:b1:ed:90:09: c9:c9:e1:2d:bf:fc:86:cd:c6:01:c7:37:dd:98:62:f3:59:61: 6f:81:ef:66:4c:ff:be:e3:07:98:0d:99:b3:b3:9b:fb:44:95: 38:bf:66:fd:81:81:f8:35:8c:89:e9:2e:71:5b:27:c7:f0:b3: 97:07:09:53:44:9a:a8:38:c6:ed:65:7b:04:f9:de:53:6c:c1: 29:5e:40:fb:cb:82:bf:be:c5:c8:7d:7d:3d:0e:6d:2d:b1:85: cb:bc:3e:4a:e6:7f:25:82:61:3a:bb:04:1a:c5:6f:1d:61:5b: 82:ee:fd:6e:b0:3b:83:1d:a6:0b:03:b1:b1:11:67:0a:34:e0: ff:6b:d8:f4:49:7b:a9:82:da:58:9e:dd:13:1b:1e:3d:d7:19: 77:ca:9a:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfmTkh7pa1nFOtgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMzMTE4NDQyMVoXDTI1MDYyOTE4NDQyMVowLzEtMCsGA1UEAxMk ZjNmNWViMjItY2Y0Yi00NGZiLWFiNTAtZTM0MWQ4OTNjNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCCMo/SNCkQOsL5OZVxXmR2YvTfYa62WzjHe Zvazj7G20YivqlkdtovB5RlUp+5qaImrnLcZUDhC+DvFu+q74z5IkdSnB6R2bksl ifovv3rFR1Z9tGG7K1br29LPKNe+mopQKux4DHsKGP2TLqD1t4nfdexd9OHeqpNo vQbITxkB5UPbCes/spWH3abtrweFe1Uc1KKDMp0fpkSAtP4DiSDdvzQK2rpHhD7t qgW4GPRAFz7QvSlE3TDYXJKeGM1dTepVOZsggf1ULKnzoRTWlY4Ht3XSQKuZKLOP HABoMbfoJ187p/J6ZMngStJVpfgYHcO8lYbiQrRcp9SUIGoo9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTg1gPpY6VGn2Ygy/V38n5ieNl1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzFhNzAyNTEtMTMxMC0z NzNkLWEyYjMtM2FlY2JlNDkwNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYGFIlckwOkmt6QrJP88uRJWMhkb73CFNjxUslyd25r1urdoKhpBSzd /eYvvWJLp6eXjuj/6TigWyBz6PRs4b23gGD1WHxJnWaSbwJ5MSduOW9wDVYEOgP/ Kbg9Um0vssIJah5N1QNrse2QCcnJ4S2//IbNxgHHN92YYvNZYW+B72ZM/77jB5gN mbOzm/tElTi/Zv2Bgfg1jInpLnFbJ8fws5cHCVNEmqg4xu1lewT53lNswSleQPvL gr++xch9fT0ObS2xhcu8PkrmfyWCYTq7BBrFbx1hW4Lu/W6wO4MdpgsDsbERZwo0 4P9r2PRJe6mC2lie3RMbHj3XGXfKmm4= -----END CERTIFICATE-----Generated at Sun Apr 6 03:44:19 2025 by rpki-client