$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa File: a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json) Hash identifier: D+6RGmuXdPoWknBTFFnw5UAjRpAY+xwpVS//obMoLfA= Subject key identifier: 04:94:61:0C:CD:F4:E7:BC:5C:A5:A6:65:18:E7:33:4F:D8:5B:78:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7160367183486BDB63AD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:60:36:71:83:48:6b:db:63:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=49981f75-e9a0-4c2e-bcf8-33d82614b031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:29:3c:90:8f:6a:26:74:87:eb:04:0b:50: 99:9c:55:62:25:f7:17:18:10:c0:a2:e8:52:10:04: e0:8c:f1:da:43:62:00:bd:b3:24:b2:5f:3d:64:75: 32:d2:81:1d:55:29:8d:97:72:e7:26:5d:a2:25:54: f0:93:86:69:0f:ca:c2:f9:67:45:fe:58:26:66:bb: e6:c3:02:a9:d2:48:05:24:fa:33:f9:a8:1c:1d:ad: 09:09:b9:a6:9f:6d:07:4c:58:28:f8:67:71:a5:f1: 94:9d:a0:fc:37:5c:ab:d4:50:b8:d8:33:39:d1:4f: e3:8e:1e:f4:7d:fc:7f:64:a9:a9:af:66:83:44:b3: 25:af:90:6a:53:38:e5:f3:61:89:65:ba:d8:e5:b5: 2f:11:df:cc:0f:da:7d:07:60:1a:6d:6f:96:54:f0: 02:33:1a:a3:5e:f9:5e:51:0c:9c:92:8d:9e:d0:ec: 8c:01:0a:e8:b4:fe:bb:06:9b:01:ee:dd:8f:91:5a: 0d:72:4b:29:7c:a7:dc:fb:3b:11:9e:8b:c4:e7:72: 03:d2:af:d7:a9:7c:e5:92:f5:fe:f8:98:21:ce:d6: ca:4b:52:30:f1:2f:a8:29:cf:45:4b:fa:02:6a:b9: 57:52:bf:ce:0c:94:f1:ab:48:8c:8d:6f:7c:ab:61: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:61:0C:CD:F4:E7:BC:5C:A5:A6:65:18:E7:33:4F:D8:5B:78:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:53:be:8d:f5:74:67:6c:af:a9:59:63:b3:c6:60:73:b1:ca: d0:6c:98:9a:db:f2:61:08:d3:18:0d:fc:13:b3:e1:fd:41:00: 89:c5:66:72:f7:3d:b4:a0:2a:4d:4e:e9:84:b1:5f:f9:7a:4c: 0a:7c:af:f0:c6:e8:d7:da:c8:93:3c:5f:85:74:45:db:9b:96: 63:c1:1b:85:39:f4:17:d9:90:d4:5c:24:be:e7:43:c2:49:14: 2d:a8:34:31:31:01:85:3e:82:f6:ab:d2:64:1c:77:81:9b:2c: 5c:55:ef:9a:86:3d:e6:25:6e:b5:12:0d:ac:27:f5:66:ed:8c: 38:d2:d5:42:54:e6:29:34:45:e2:b5:50:ae:2c:f4:e5:62:9a: d7:81:e2:f4:51:e0:ea:44:8f:58:eb:be:c6:c6:83:c3:5f:4e: 46:c3:8e:51:f3:15:81:f7:7d:a2:92:e2:1f:4f:90:67:ac:19: 45:26:67:02:13:0d:c7:f8:2f:36:95:49:8a:17:88:76:5b:04: fe:fc:6b:b3:a6:8f:31:a6:d6:78:1b:5d:b6:4a:a8:bb:f6:2f: 3e:cd:b2:a0:a8:38:dc:e7:a6:fb:e5:9b:2a:cd:c3:2f:a0:64: 6a:48:f4:59:f0:56:ac:b5:27:70:74:4b:ef:cc:f5:63:12:9b: 61:29:cb:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWA2cYNIa9tjrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NDk5ODFmNzUtZTlhMC00YzJlLWJjZjgtMzNkODI2MTRiMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9kpPJCPaiZ0h+sEC1CZnFViJfcXGBDAouhS EATgjPHaQ2IAvbMksl89ZHUy0oEdVSmNl3LnJl2iJVTwk4ZpD8rC+WdF/lgmZrvm wwKp0kgFJPoz+agcHa0JCbmmn20HTFgo+GdxpfGUnaD8N1yr1FC42DM50U/jjh70 ffx/ZKmpr2aDRLMlr5BqUzjl82GJZbrY5bUvEd/MD9p9B2AabW+WVPACMxqjXvle UQycko2e0OyMAQrotP67BpsB7t2PkVoNckspfKfc+zsRnovE53ID0q/XqXzlkvX+ +JghztbKS1Iw8S+oKc9FS/oCarlXUr/ODJTxq0iMjW98q2HnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASUYQzN9Oe8XKWmZRjnM0/YW3giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY2MWFmOWMtODBlYS0z NDRjLWFjMDUtOTRlNDUxMTczMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJTvo31dGdsr6lZY7PGYHOxytBsmJrb8mEI0xgN/BOz4f1BAInFZnL3 PbSgKk1O6YSxX/l6TAp8r/DG6NfayJM8X4V0RdublmPBG4U59BfZkNRcJL7nQ8JJ FC2oNDExAYU+gvar0mQcd4GbLFxV75qGPeYlbrUSDawn9WbtjDjS1UJU5ik0ReK1 UK4s9OVimteB4vRR4OpEj1jrvsbGg8NfTkbDjlHzFYH3faKS4h9PkGesGUUmZwIT Dcf4LzaVSYoXiHZbBP78a7OmjzGm1ngbXbZKqLv2Lz7NsqCoONznpvvlmyrNwy+g ZGpI9FnwVqy1J3B0S+/M9WMSm2Epy2M= -----END CERTIFICATE-----Generated at Sat Apr 5 20:16:24 2025 by rpki-client