$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa File: a9dceb2f-ad54-37d4-84bd-1ae263451441.roa (raw, json) Hash identifier: Cf1pQtHSYXfq8f2OnVoaapvy2xmSbGa8wmuERr2rurM= Subject key identifier: 88:51:A8:05:86:6F:84:E4:9C:8C:00:0B:88:EC:5F:65:2C:2E:5A:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11A20C00A3CBFE3DCA100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 71.31.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:20:c0:0a:3c:bf:e3:dc:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=8af87966-0dee-45a9-bafc-9c738a15857f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:9d:bf:df:bf:79:e6:ad:9c:26:4d:3e:0a: 83:f4:05:9e:c2:76:fe:1f:0b:97:31:09:fe:bc:14: 25:2a:87:3a:9a:b0:09:43:87:3c:a4:5f:b5:e4:70: dc:5d:f3:20:d9:d5:f0:97:96:c5:36:f4:a8:1b:af: a2:b5:ee:8a:17:eb:8f:bd:99:cb:aa:fe:0b:51:26: 55:18:e2:9c:a6:d8:5c:91:a3:8e:72:e0:7b:82:44: a6:b7:c1:f5:6f:a7:97:df:53:33:70:95:65:9c:6f: dc:90:60:33:87:1b:ff:1a:da:83:f9:de:8d:fc:7f: 85:22:cb:70:c4:01:b2:7d:72:45:57:fe:f1:9d:74: bc:63:f9:d4:ee:7e:2c:f4:2e:e8:30:a1:e3:53:20: 9b:5b:c3:a4:6a:c2:3b:07:2c:79:3b:46:3b:94:2a: 4a:e5:28:7a:bf:03:22:62:79:56:a2:ec:48:39:fb: a6:55:1b:a5:06:f8:9c:01:7b:1f:82:b4:d1:3c:dd: 95:04:af:78:e8:36:38:a8:af:f3:a1:38:33:ca:6b: 1c:e0:26:a6:5a:5f:39:06:3e:8a:83:bb:00:a2:00: 62:37:63:87:ca:d1:67:87:70:71:6a:58:df:84:47: d3:56:38:cd:2a:d7:69:ae:70:b7:1a:8f:0f:11:e3: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:51:A8:05:86:6F:84:E4:9C:8C:00:0B:88:EC:5F:65:2C:2E:5A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9dceb2f-ad54-37d4-84bd-1ae263451441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ad:c2:f1:14:4a:80:35:28:d9:0c:24:18:cc:10:d2:c8:9e: 76:b3:5d:30:6c:54:2f:6c:52:37:9b:29:2c:b1:72:c1:e4:da: a5:33:2e:67:c4:63:f3:5d:f4:4a:43:aa:3f:ac:2f:f7:d8:58: a5:04:e4:f7:cf:26:89:55:05:79:f3:08:3e:a8:ab:4a:cc:bf: 6d:55:b5:c5:b4:48:a7:dc:55:fb:53:d1:20:3a:c4:fc:25:b4: 3e:7c:ca:6a:ef:a6:2c:66:64:86:62:1e:51:8b:d3:82:b7:fd: 42:a4:c2:2d:9e:6a:a5:05:ed:3e:57:25:10:be:d5:4d:dc:60: 8a:34:20:ec:72:4c:d6:f8:a7:3a:83:12:ac:6a:81:50:a1:62: 3e:61:72:1f:da:d0:b3:37:a5:ab:db:09:00:94:16:7b:7b:64: 8e:08:0a:8e:e9:9b:b4:cc:a8:25:d0:52:2f:4d:d2:4a:86:69: d5:0a:2e:71:76:15:5b:90:3a:8b:79:7b:84:f7:25:4a:5c:9b: fa:95:b2:fc:a7:81:30:77:86:65:b6:e4:90:51:85:d3:07:9d: 76:1a:f0:d1:40:37:b9:e1:b3:d1:12:ad:95:61:9d:17:10:55: c6:11:f1:64:4e:3c:a6:41:89:96:2a:d0:c9:72:90:e7:df:f6: aa:dd:54:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RogwAo8v+PcoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OGFmODc5NjYtMGRlZS00NWE5LWJhZmMtOWM3MzhhMTU4NTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOdv9+/eeatnCZNPgqD9AWewnb+HwuXMQn+ vBQlKoc6mrAJQ4c8pF+15HDcXfMg2dXwl5bFNvSoG6+ite6KF+uPvZnLqv4LUSZV GOKcpthckaOOcuB7gkSmt8H1b6eX31MzcJVlnG/ckGAzhxv/GtqD+d6N/H+FIstw xAGyfXJFV/7xnXS8Y/nU7n4s9C7oMKHjUyCbW8OkasI7Byx5O0Y7lCpK5Sh6vwMi YnlWouxIOfumVRulBvicAXsfgrTRPN2VBK946DY4qK/zoTgzymsc4CamWl85Bj6K g7sAogBiN2OHytFnh3BxaljfhEfTVjjNKtdprnC3Go8PEeOWXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhRqAWGb4TknIwAC4jsX2UsLlrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTlkY2ViMmYtYWQ1NC0z N2Q0LTg0YmQtMWFlMjYzNDUxNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFitwvEUSoA1KNkMJBjMENLInnazXTBsVC9sUjebKSyxcsHk2qUzLmfE Y/Nd9EpDqj+sL/fYWKUE5PfPJolVBXnzCD6oq0rMv21VtcW0SKfcVftT0SA6xPwl tD58ymrvpixmZIZiHlGL04K3/UKkwi2eaqUF7T5XJRC+1U3cYIo0IOxyTNb4pzqD EqxqgVChYj5hch/a0LM3pavbCQCUFnt7ZI4ICo7pm7TMqCXQUi9N0kqGadUKLnF2 FVuQOot5e4T3JUpcm/qVsvyngTB3hmW25JBRhdMHnXYa8NFAN7nhs9ESrZVhnRcQ VcYR8WROPKZBiZYq0MlykOff9qrdVGQ= -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:46 2025 by rpki-client