$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa File: 722f3704-d798-3059-b812-9e050f41dc24.roa (raw, json) Hash identifier: FtT5NNIzdbK+WwohW7j0nVhRA8WSyUYb6OKxWRctBpM= Subject key identifier: 0F:01:EA:A0:F9:8D:90:BE:85:10:8A:24:45:4B:7E:75:A1:05:79:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715FC8F3876626FB5BC280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:c8:f3:87:66:26:fb:5b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=c267b1e4-c199-4f6e-b05e-cb9f3e47b6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:2a:65:3a:55:9a:89:ac:ec:2e:55:af:c9: 93:2d:1c:f6:b5:6b:dd:5a:64:86:89:d2:ff:cc:83: a0:7d:d9:35:af:6e:33:f8:97:f0:3b:8f:f4:d8:3a: de:3c:27:1f:98:4c:76:f5:8f:86:da:84:50:1c:a2: a3:ba:25:85:52:4a:0f:cc:ce:51:3e:d0:31:09:e6: 33:3a:73:13:91:78:6d:76:2c:c8:54:7c:09:78:45: 53:6d:32:58:ca:4a:5b:da:d3:7a:d4:0d:62:0b:f9: bf:67:2c:68:9f:9e:a9:6d:4d:21:b2:3f:5c:89:27: 7f:50:12:a9:13:3f:7f:3f:4a:33:b9:7f:6c:18:cd: b4:ab:89:ec:4f:74:90:ba:96:8b:b8:b8:33:d1:3e: 2e:06:c2:85:d4:03:5b:1a:6e:e0:16:66:51:57:1a: 55:38:00:bb:ae:3d:66:f6:bd:4c:f1:9c:0b:72:73: df:40:34:6a:0a:39:56:f8:8e:cc:63:7a:ad:68:96: e0:11:e7:5f:75:db:0e:5b:1d:26:c6:fc:07:d2:4a: 9e:0c:11:c2:a2:a1:3a:b7:98:bf:a0:70:c7:73:02: 09:4f:fc:5f:9d:43:e1:34:9d:d7:12:13:20:bb:8c: 52:b5:4a:bf:d6:97:4c:cd:87:8f:4e:c6:d9:66:83: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:01:EA:A0:F9:8D:90:BE:85:10:8A:24:45:4B:7E:75:A1:05:79:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:6e:94:a3:08:61:b4:4e:39:b7:d3:64:6b:06:d3:de:10:87: 3e:cd:04:59:72:e1:cb:5e:c5:d9:69:09:1d:a5:76:a9:57:2b: ca:1b:cd:26:6d:89:d2:e0:20:aa:80:d5:89:f4:ed:2f:83:cf: ba:df:bc:9c:22:e9:42:3d:27:19:cd:59:69:d7:a1:79:af:c2: da:51:d0:02:27:6d:3e:84:4b:88:39:5c:fa:5b:35:22:c3:d0: fe:fb:49:c5:78:77:a9:58:7f:18:91:a4:96:42:8e:15:52:39: 70:50:dd:27:ac:46:fc:f0:8c:ba:1e:59:8c:65:74:b5:77:57: 59:3c:97:14:92:c0:36:22:c6:95:fa:10:ba:6c:64:e4:4f:c0: f1:f4:f7:ec:0d:69:a9:6b:fa:1b:48:c0:46:8b:71:e0:ca:29: 8c:c9:9b:9c:65:1b:ae:33:05:0d:d8:08:07:6f:01:c5:eb:1a: a8:87:b1:8e:a7:eb:16:34:cb:55:94:2c:9a:d6:3a:12:95:6f: d6:5c:13:8b:dd:74:b1:dc:60:bb:c9:aa:64:bd:64:b0:d2:e8: 0f:aa:32:10:9e:34:e4:61:a1:e9:47:eb:5d:a3:d0:ec:9f:b8: 6a:7b:63:fe:c1:84:b1:ec:0a:82:4e:18:2f:05:0b:14:40:fe: 0b:c4:e1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV/I84dmJvtbwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzI2N2IxZTQtYzE5OS00ZjZlLWIwNWUtY2I5ZjNlNDdiNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUMqZTpVmoms7C5Vr8mTLRz2tWvdWmSGidL/ zIOgfdk1r24z+JfwO4/02DrePCcfmEx29Y+G2oRQHKKjuiWFUkoPzM5RPtAxCeYz OnMTkXhtdizIVHwJeEVTbTJYykpb2tN61A1iC/m/Zyxon56pbU0hsj9ciSd/UBKp Ez9/P0ozuX9sGM20q4nsT3SQupaLuLgz0T4uBsKF1ANbGm7gFmZRVxpVOAC7rj1m 9r1M8ZwLcnPfQDRqCjlW+I7MY3qtaJbgEedfddsOWx0mxvwH0kqeDBHCoqE6t5i/ oHDHcwIJT/xfnUPhNJ3XEhMgu4xStUq/1pdMzYePTsbZZoPbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8B6qD5jZC+hRCKJEVLfnWhBXkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzIyZjM3MDQtZDc5OC0z MDU5LWI4MTItOWUwNTBmNDFkYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1ulKMIYbROObfTZGsG094Qhz7NBFly4ctexdlpCR2ldqlXK8obzSZt idLgIKqA1Yn07S+Dz7rfvJwi6UI9JxnNWWnXoXmvwtpR0AInbT6ES4g5XPpbNSLD 0P77ScV4d6lYfxiRpJZCjhVSOXBQ3SesRvzwjLoeWYxldLV3V1k8lxSSwDYixpX6 ELpsZORPwPH09+wNaalr+htIwEaLceDKKYzJm5xlG64zBQ3YCAdvAcXrGqiHsY6n 6xY0y1WULJrWOhKVb9ZcE4vddLHcYLvJqmS9ZLDS6A+qMhCeNORhoelH612j0Oyf uGp7Y/7BhLHsCoJOGC8FCxRA/gvE4RM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:15 2025 by rpki-client