$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa File: ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa (raw, json) Hash identifier: vGXK9epYu+LxN3Rz2/UOU7U4HcwEYCCLXSMknY6ChS8= Subject key identifier: 0C:7E:64:BD:54:C7:CE:CA:4C:44:8F:49:67:9D:A9:AA:4F:82:B8:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858495F93726382124DA5F8A51680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa Signing time: Mon 31 Mar 2025 18:32:42 +0000 ROA not before: Mon 31 Mar 2025 18:32:42 +0000 ROA not after: Sun 29 Jun 2025 18:32:42 +0000 asID: 7029 IP address blocks: 71.28.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5f:93:72:63:82:12:4d:a5:f8:a5:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 31 18:32:42 2025 GMT Not After : Jun 29 18:32:42 2025 GMT Subject: CN=4ae98c8a-febb-44d2-bf19-fe4c7e7ea0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7b:51:0e:d8:b8:7c:19:c0:9a:5a:13:b4:a7: 89:4e:ff:2e:bb:be:9f:18:62:86:44:db:a5:76:e0: 4a:a1:20:f0:39:1e:03:4e:01:b8:16:d5:47:51:67: 42:6e:49:1d:71:f1:c0:bc:a5:ab:81:16:ac:30:e8: d3:14:72:9b:b8:1f:bb:a3:cb:b9:ad:45:5a:1b:68: 86:b9:3c:a2:e1:b2:ef:f1:61:11:5b:04:33:8f:5c: 9e:15:a0:e1:07:2a:e8:5e:63:2b:5e:04:bc:11:c1: 48:33:c6:42:27:f6:e2:ab:77:82:30:4c:a2:47:86: b2:01:ff:5d:86:f3:69:53:18:9b:cb:59:62:1c:4d: 60:aa:f7:6c:cf:41:04:23:d4:f8:14:4e:52:2e:36: e7:e2:cd:5c:ac:1a:8c:8c:53:18:65:e4:a9:c6:b4: 2d:f4:03:42:d1:2c:40:ae:66:1f:27:64:99:30:47: 8e:0a:86:08:5e:bb:60:da:8c:70:11:88:a7:93:61: 5c:66:c7:e2:4a:25:98:0f:a0:8d:37:6b:73:a7:a7: 81:6d:4a:1e:55:8a:3c:6e:d6:b9:dd:87:01:64:2e: ec:ef:f6:74:e2:1d:e8:cd:55:a5:7f:2e:e5:b6:5e: c3:67:a2:e5:e4:c7:a7:43:79:a9:c0:2f:6f:d8:54: 0f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7E:64:BD:54:C7:CE:CA:4C:44:8F:49:67:9D:A9:AA:4F:82:B8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d0:56:eb:b2:82:dd:0d:d3:e9:18:3b:ad:0e:db:99:41:f8: bf:31:3c:f3:e1:ac:bc:61:e5:6f:40:08:98:82:d1:73:d3:24: 27:75:cf:81:2a:ec:93:84:ca:7d:46:69:01:11:a8:40:ae:68: 85:d6:0a:18:7f:44:f5:18:ec:cf:e8:02:55:ff:16:5f:d6:b7: fd:0c:59:06:d2:0a:17:c3:71:e1:2f:f4:86:42:34:9d:6c:00: df:bd:36:09:48:cb:07:e6:44:35:24:99:1b:3a:4c:a3:22:60: fa:b3:95:01:4c:cd:60:0f:6c:4b:97:fb:d0:85:1d:00:75:b6: 9e:24:3a:74:a2:9e:ee:d5:9a:19:31:1e:29:8b:3d:67:6a:44: be:7c:53:a2:1c:ef:bd:07:b1:f3:94:8c:8b:64:55:73:2e:93: 73:f1:fd:18:e9:14:a6:6e:7e:c6:50:d6:2c:44:6b:92:ac:81: 36:e2:7a:43:7f:09:79:ee:c7:6a:1f:04:e9:21:8d:f9:08:4c: c7:20:21:61:94:89:06:da:90:fe:e3:c5:8a:8b:91:75:7c:9c: f7:8b:63:c1:03:3c:4a:20:7f:00:80:d3:73:46:08:46:56:2c: fc:8c:db:ec:54:8f:7a:38:26:0e:56:8b:e0:ec:f4:d0:f7:cf: 8f:41:5b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElfk3JjghJNpfilFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMzMTE4MzI0MloXDTI1MDYyOTE4MzI0MlowLzEtMCsGA1UEAxMk NGFlOThjOGEtZmViYi00NGQyLWJmMTktZmU0YzdlN2VhMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93tRDti4fBnAmloTtKeJTv8uu76fGGKGRNul duBKoSDwOR4DTgG4FtVHUWdCbkkdcfHAvKWrgRasMOjTFHKbuB+7o8u5rUVaG2iG uTyi4bLv8WERWwQzj1yeFaDhByroXmMrXgS8EcFIM8ZCJ/biq3eCMEyiR4ayAf9d hvNpUxiby1liHE1gqvdsz0EEI9T4FE5SLjbn4s1crBqMjFMYZeSpxrQt9ANC0SxA rmYfJ2SZMEeOCoYIXrtg2oxwEYink2FcZsfiSiWYD6CNN2tzp6eBbUoeVYo8bta5 3YcBZC7s7/Z04h3ozVWlfy7ltl7DZ6Ll5MenQ3mpwC9v2FQPEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx+ZL1Ux87KTESPSWedqapPgriIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWJmM2IzYTktNWUzNC0z Y2M2LTlkNjMtNzY5Nzk5MDUzNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjQVuuygt0N0+kYO60O25lB+L8xPPPhrLxh5W9ACJiC0XPTJCd1z4Eq 7JOEyn1GaQERqECuaIXWChh/RPUY7M/oAlX/Fl/Wt/0MWQbSChfDceEv9IZCNJ1s AN+9NglIywfmRDUkmRs6TKMiYPqzlQFMzWAPbEuX+9CFHQB1tp4kOnSinu7Vmhkx HimLPWdqRL58U6Ic770HsfOUjItkVXMuk3Px/RjpFKZufsZQ1ixEa5KsgTbiekN/ CXnux2ofBOkhjfkITMcgIWGUiQbakP7jxYqLkXV8nPeLY8EDPEogfwCA03NGCEZW LPyM2+xUj3o4Jg5Wi+Ds9ND3z49BW68= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:54 2025 by rpki-client