$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa File: da9e1e37-9312-396d-b8ef-bd83a74b0954.roa (raw, json) Hash identifier: wTnbpXOxG6xrjsaVtk2NsWN3+gGHdv9KvbdHkMR+ivw= Subject key identifier: 0C:EE:2D:1A:99:6C:B4:C1:5F:4A:76:AD:20:41:7E:E2:10:90:59:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EF6F82781A507D56A880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ef:6f:82:78:1a:50:7d:56:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1424a527-2652-4b9a-acff-6615c39de2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:96:0b:8b:9b:d3:7b:08:36:92:a4:88:89: f8:42:b9:cf:b0:3e:2e:c4:f4:48:3f:d7:ef:d2:3f: 9c:de:fd:bc:df:1d:e2:07:e8:35:94:21:85:8f:7c: 52:02:2a:cf:e7:b5:6d:b4:1c:8c:63:74:1d:eb:76: fa:b5:76:66:44:0b:8f:d6:17:85:21:9c:92:ad:e2: f4:68:26:bf:bc:e3:ba:cf:71:85:7a:80:85:f6:9c: 60:39:4b:00:6c:fa:4a:95:26:c8:ad:29:57:35:88: e1:0e:1d:74:65:4a:9d:64:ef:9b:85:0e:eb:4e:6d: eb:6f:d4:15:f8:d9:17:79:2b:2d:36:2a:3b:76:5d: 64:bf:e9:08:b9:e3:ca:ab:e6:c6:f1:5b:41:ae:7a: f2:9a:8e:8f:28:83:4c:45:ee:f5:7e:7a:d3:ed:5b: 1a:41:07:b1:f4:6d:8c:5d:a2:86:27:c2:ae:cb:69: cb:14:99:78:87:7d:64:6c:db:c3:84:a0:be:08:c0: 20:6a:20:45:8a:12:58:9d:b4:38:c1:95:83:62:73: 03:71:77:30:ab:52:c7:c5:0a:81:ca:0f:4a:1e:12: 18:b0:88:f9:bb:35:79:60:c4:9f:2c:c1:6c:69:e2: 14:9c:d7:11:e1:bf:c5:5d:8d:0b:b2:9f:c2:94:01: 24:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EE:2D:1A:99:6C:B4:C1:5F:4A:76:AD:20:41:7E:E2:10:90:59:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da9e1e37-9312-396d-b8ef-bd83a74b0954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:fa:3e:5e:1b:a8:d7:48:e3:55:9a:74:cb:5c:53:b4:52:c1: 67:c4:62:18:53:dc:4d:69:36:68:d1:63:bb:d5:24:7c:b3:5a: 23:c1:0c:f3:ba:71:7a:28:19:e4:0d:10:b4:c5:1a:c7:dd:a2: 31:40:7b:84:23:7f:64:8e:f1:61:8b:16:9c:eb:05:a6:14:4e: fe:c7:85:b9:d7:f4:9e:7c:fb:9c:7f:13:37:16:ff:30:16:a0: 86:86:d3:bb:aa:b9:4c:c8:69:59:c9:19:bb:34:ef:dd:15:a4: f4:85:df:12:50:6e:30:03:6e:9a:b5:61:c5:72:62:47:a0:82: cc:c2:24:52:c4:cf:c0:06:ea:7e:d3:8e:67:f0:46:02:f3:30: a0:c0:e4:c9:c1:be:c1:de:6e:aa:75:91:d5:7f:03:d6:69:09: 5c:da:ef:db:44:b4:d9:6c:f7:38:99:a5:b7:72:91:c6:ca:ae: 2a:b0:84:68:be:ef:f0:89:c7:c6:1c:e7:d7:31:84:29:e9:a5: cd:fd:2a:e8:7c:35:42:c2:86:33:0b:77:ce:3d:01:9d:1b:c0: 7f:f3:13:b9:72:21:83:35:7c:06:e7:9c:e3:e9:4c:43:ea:24: 6e:7f:93:c5:da:bf:e7:7d:9f:75:f9:a5:55:de:af:31:34:ec: 26:08:a7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO9vgngaUH1WqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MTQyNGE1MjctMjY1Mi00YjlhLWFjZmYtNjYxNWMzOWRlMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt2WC4ub03sINpKkiIn4QrnPsD4uxPRIP9fv 0j+c3v283x3iB+g1lCGFj3xSAirP57VttByMY3Qd63b6tXZmRAuP1heFIZySreL0 aCa/vOO6z3GFeoCF9pxgOUsAbPpKlSbIrSlXNYjhDh10ZUqdZO+bhQ7rTm3rb9QV +NkXeSstNio7dl1kv+kIuePKq+bG8VtBrnrymo6PKINMRe71fnrT7VsaQQex9G2M XaKGJ8Kuy2nLFJl4h31kbNvDhKC+CMAgaiBFihJYnbQ4wZWDYnMDcXcwq1LHxQqB yg9KHhIYsIj5uzV5YMSfLMFsaeIUnNcR4b/FXY0Lsp/ClAEk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzuLRqZbLTBX0p2rSBBfuIQkFnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE5ZTFlMzctOTMxMi0z OTZkLWI4ZWYtYmQ4M2E3NGIwOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD6Pl4bqNdI41WadMtcU7RSwWfEYhhT3E1pNmjRY7vVJHyzWiPBDPO6 cXooGeQNELTFGsfdojFAe4Qjf2SO8WGLFpzrBaYUTv7HhbnX9J58+5x/EzcW/zAW oIaG07uquUzIaVnJGbs0790VpPSF3xJQbjADbpq1YcVyYkeggszCJFLEz8AG6n7T jmfwRgLzMKDA5MnBvsHebqp1kdV/A9ZpCVza79tEtNls9ziZpbdykcbKriqwhGi+ 7/CJx8Yc59cxhCnppc39Kuh8NULChjMLd849AZ0bwH/zE7lyIYM1fAbnnOPpTEPq JG5/k8Xav+d9n3X5pVXerzE07CYIp98= -----END CERTIFICATE-----Generated at Fri Mar 14 08:33:43 2025 by rpki-client