$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa File: 73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa (raw, json) Hash identifier: +dgrbMfNIQYPwgsIVl+Xu3WM7Pjs5I2MWFxC04cJ/2Y= Subject key identifier: 5A:32:8B:5F:87:E2:EF:D4:FD:62:6C:0D:68:3A:DA:F5:6F:DD:B3:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71686B190448A202FE0C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:68:6b:19:04:48:a2:02:fe:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=598a5e0c-3d9c-4382-872f-3fafbcdb6292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:63:36:1a:7e:5a:49:26:5d:5a:36:d5:2d: ac:0a:6f:44:6e:cd:ed:ad:fa:b5:25:03:16:f4:d9: bf:ed:26:d8:b0:cb:68:7a:b3:fe:f4:3d:40:71:84: 2a:7f:7f:34:94:26:d3:16:f3:52:8e:2f:60:25:de: 79:d8:55:6a:cb:80:b6:9c:a3:19:6e:09:0b:a3:d4: 05:3e:ec:49:68:a1:62:c0:48:6c:95:f9:30:be:60: a3:d8:a8:41:be:33:04:0c:06:16:8a:bb:66:19:71: 8a:6e:e4:23:a2:bb:36:86:3b:43:0e:67:09:49:9d: 12:4b:3e:d1:df:b9:fc:6a:1c:69:13:89:da:55:94: 82:8d:9c:d9:4f:f7:cc:d0:8e:c7:9c:f7:81:66:ec: 49:6f:54:92:9c:4f:70:3b:d9:6a:82:b1:65:ac:dc: 04:5c:f1:6a:06:2b:57:bb:74:20:cc:46:7f:46:86: 2c:98:b4:9e:9f:68:99:20:6f:5d:a6:4b:92:b4:31: 33:b3:82:5b:fb:3c:c0:5f:23:af:e3:06:e4:70:06: 12:40:b7:f0:b8:b2:dd:dc:d0:ec:49:f5:aa:93:6d: 5b:df:b5:22:7a:c1:13:d5:91:1e:af:aa:7a:38:46: cf:63:bc:2e:23:64:84:90:66:41:d3:3b:a1:34:2c: 85:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:8B:5F:87:E2:EF:D4:FD:62:6C:0D:68:3A:DA:F5:6F:DD:B3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a4:c7:c4:0c:7f:79:59:5f:c7:7d:8e:6e:78:c5:b7:0f:72: 97:64:96:76:2b:04:7a:60:d5:cb:e8:3e:df:89:e9:fc:37:df: 09:f2:cb:8d:17:fe:8e:ba:3b:52:ad:e4:dc:3d:39:ca:b1:78: 3f:19:f4:74:7d:de:94:22:ca:8f:98:f8:1e:20:c1:51:43:be: 2e:46:91:55:a7:15:34:ae:34:32:df:79:11:13:9b:6f:4c:dd: 1a:7e:7e:81:f4:8e:09:a8:65:a5:a0:66:36:27:6b:7c:fd:3b: b4:ca:f1:85:ac:63:50:2d:8c:33:50:d9:9b:ae:2e:69:47:f7: ab:a7:02:f5:f3:35:2e:5b:db:ad:90:3e:b6:96:c4:ac:1a:27: 10:19:6f:02:98:2b:10:1a:ff:da:6b:2a:67:f3:a5:0b:04:73: 02:cc:25:8b:1e:f5:69:02:e8:fe:1c:17:74:eb:42:45:0f:2c: 6b:27:fd:55:ff:e9:99:5c:49:a3:99:d9:45:c4:6a:5d:06:d8: 2b:9b:fa:78:e4:f2:a2:a7:79:50:a5:ba:a0:67:fc:73:e7:56: e0:a4:66:d1:55:09:7c:b9:f2:0c:dd:13:67:22:a6:00:75:a0: 93:3a:0b:db:d7:e9:57:72:0e:0a:e3:7d:bf:a5:7c:25:3e:f1: c2:c3:81:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWhrGQRIogL+DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTk4YTVlMGMtM2Q5Yy00MzgyLTg3MmYtM2ZhZmJjZGI2MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJhjNhp+WkkmXVo21S2sCm9Ebs3trfq1JQMW 9Nm/7SbYsMtoerP+9D1AcYQqf380lCbTFvNSji9gJd552FVqy4C2nKMZbgkLo9QF PuxJaKFiwEhslfkwvmCj2KhBvjMEDAYWirtmGXGKbuQjors2hjtDDmcJSZ0SSz7R 37n8ahxpE4naVZSCjZzZT/fM0I7HnPeBZuxJb1SSnE9wO9lqgrFlrNwEXPFqBitX u3QgzEZ/RoYsmLSen2iZIG9dpkuStDEzs4Jb+zzAXyOv4wbkcAYSQLfwuLLd3NDs SfWqk21b37UiesET1ZEer6p6OEbPY7wuI2SEkGZB0zuhNCyFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoyi1+H4u/U/WJsDWg62vVv3bOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNmYzE0NzktOWFiZi0z NWJhLWI1ODctYThmYTNmZDQxY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCkx8QMf3lZX8d9jm54xbcPcpdklnYrBHpg1cvoPt+J6fw33wnyy40X /o66O1Kt5Nw9OcqxeD8Z9HR93pQiyo+Y+B4gwVFDvi5GkVWnFTSuNDLfeRETm29M 3Rp+foH0jgmoZaWgZjYna3z9O7TK8YWsY1AtjDNQ2ZuuLmlH96unAvXzNS5b262Q PraWxKwaJxAZbwKYKxAa/9prKmfzpQsEcwLMJYse9WkC6P4cF3TrQkUPLGsn/VX/ 6ZlcSaOZ2UXEal0G2Cub+njk8qKneVCluqBn/HPnVuCkZtFVCXy58gzdE2cipgB1 oJM6C9vX6VdyDgrjfb+lfCU+8cLDgco= -----END CERTIFICATE-----Generated at Sat Apr 5 20:34:25 2025 by rpki-client