$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa File: 87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa (raw, json) Hash identifier: f3+81l7H61mSzeyl+yW/zC0aecy7lbOI9L3QBr6gkIg= Subject key identifier: 6A:F7:68:16:FA:F2:9E:E8:CB:91:F6:CE:12:20:B6:64:AB:DB:17:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11BC197C0AA155D31DA20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 71.7.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:c1:97:c0:aa:15:5d:31:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=c3abf283-d25f-4602-a0ee-68c0054d8a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:fe:c9:a9:f3:70:2e:0d:ef:40:d7:36:f3: 64:c2:dc:38:d5:3e:b8:f0:c5:39:b6:76:40:2f:fd: e9:a8:19:00:f5:81:48:53:b0:6c:81:09:63:ae:b6: 7f:6f:1f:e1:76:e7:45:df:7a:af:00:e8:44:eb:73: 9c:6c:d0:5b:ce:ef:41:ba:52:8b:d0:3d:9d:d4:c0: e6:59:41:0e:e8:55:08:83:07:0f:44:74:e2:47:45: 69:8a:9c:cc:2f:11:fe:22:09:db:96:7e:16:44:65: 84:e3:19:b4:38:1b:09:84:d8:b6:83:ad:67:1c:de: 2e:40:67:77:fd:fa:bc:3f:a2:23:bb:d5:b0:28:5f: 11:29:48:be:b0:51:62:c9:aa:43:b1:49:65:bb:36: 60:f9:46:c4:a6:8d:6e:2d:4b:87:54:53:ed:2b:95: b5:2b:c0:d6:be:98:fb:3a:ba:46:87:20:cb:61:b0: bc:b3:c8:17:6e:13:1c:40:50:8b:4c:1b:a5:b7:4d: 5a:8f:fa:a6:25:fb:8d:df:7b:a0:87:e7:98:6b:fb: be:4d:71:d6:12:7c:5b:2a:25:70:14:d9:2e:95:c5: cc:e5:1e:86:02:e2:fc:cf:cb:aa:6b:e9:32:ee:63: 7c:58:93:6b:23:8d:8b:47:a1:dd:79:24:3b:2a:15: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:68:16:FA:F2:9E:E8:CB:91:F6:CE:12:20:B6:64:AB:DB:17:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87d61e5e-efc9-3a8a-9c51-e1c6a34bb183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e2:10:9d:56:22:be:f7:18:49:6a:8f:a6:bf:e7:56:ed:a1: a6:76:e7:b1:a8:40:c1:38:c2:7f:c9:e0:ac:96:94:2f:b7:65: 79:04:c5:27:dd:1b:58:5c:05:f4:54:a0:89:84:6f:d3:e8:b7: da:ce:82:9d:65:33:09:b1:e7:7d:bf:c3:43:16:e1:5b:fb:c6: 66:f9:90:ee:fb:f1:07:92:83:99:43:42:84:9e:2f:0a:4b:b7: 15:58:bb:dd:16:24:88:7a:45:00:a2:52:93:ab:8c:0b:2d:c5: 09:c1:6b:fc:39:8b:a4:d7:43:1d:f7:bc:c6:e2:36:27:fd:2d: 51:28:ad:33:51:aa:4c:df:98:fd:10:f1:54:49:91:f7:92:14: fa:cb:fc:90:c6:8e:cf:7f:1f:7b:34:64:40:94:c9:9b:c8:1b: 70:f6:4e:a3:31:09:d2:b2:04:d2:25:f9:15:74:4c:ff:7c:52: 40:1b:c3:f9:b8:f2:a8:f7:33:9d:95:57:ec:4f:fe:0e:5e:e1: 63:59:8d:ba:71:a6:9c:a4:89:6d:ec:93:ab:eb:e3:64:fd:25: ab:11:6d:bc:8e:79:4b:95:79:db:ce:f7:64:dc:cc:e4:d4:03: 21:04:7b:b1:0d:12:df:82:9b:18:27:e4:9a:98:40:57:9d:65: b4:7e:01:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RvBl8CqFV0x2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YzNhYmYyODMtZDI1Zi00NjAyLWEwZWUtNjhjMDA1NGQ4YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqT+yanzcC4N70DXNvNkwtw41T648MU5tnZA L/3pqBkA9YFIU7BsgQljrrZ/bx/hdudF33qvAOhE63OcbNBbzu9BulKL0D2d1MDm WUEO6FUIgwcPRHTiR0VpipzMLxH+Ignbln4WRGWE4xm0OBsJhNi2g61nHN4uQGd3 /fq8P6Iju9WwKF8RKUi+sFFiyapDsUlluzZg+UbEpo1uLUuHVFPtK5W1K8DWvpj7 OrpGhyDLYbC8s8gXbhMcQFCLTBult01aj/qmJfuN33ugh+eYa/u+TXHWEnxbKiVw FNkulcXM5R6GAuL8z8uqa+ky7mN8WJNrI42LR6HdeSQ7KhUA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr3aBb68p7oy5H2zhIgtmSr2xeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdkNjFlNWUtZWZjOS0z YThhLTljNTEtZTFjNmEzNGJiMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRwd2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXiEJ1WIr73GElqj6a/51btoaZ257GoQME4wn/J4KyWlC+3ZXkExSfd G1hcBfRUoImEb9Pot9rOgp1lMwmx532/w0MW4Vv7xmb5kO778QeSg5lDQoSeLwpL txVYu90WJIh6RQCiUpOrjAstxQnBa/w5i6TXQx33vMbiNif9LVEorTNRqkzfmP0Q 8VRJkfeSFPrL/JDGjs9/H3s0ZECUyZvIG3D2TqMxCdKyBNIl+RV0TP98UkAbw/m4 8qj3M52VV+xP/g5e4WNZjbpxppykiW3sk6vr42T9JasRbbyOeUuVedvO92TczOTU AyEEe7ENEt+Cmxgn5JqYQFedZbR+AVo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:30:13 2025 by rpki-client