$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa File: ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa (raw, json) Hash identifier: VzJTW11HtjtSNtScCzVtaULRsXH7y4ZOjCEXulKodog= Subject key identifier: 0F:02:C1:CC:B5:5C:54:B5:47:89:54:AA:0E:10:A2:78:EA:94:4F:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D715F8A976B3281D772CE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:5f:8a:97:6b:32:81:d7:72:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=6e784295-16f6-4c36-bf42-35e0c317fe38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:63:da:ad:b6:b3:d6:1b:27:2b:35:c3:87: 17:3f:7e:9b:be:d2:e4:44:d0:6b:02:88:cd:61:b3: da:66:b3:5f:5b:1f:39:8c:13:29:60:a0:75:d5:07: 2b:dc:ce:c0:7c:b1:01:a9:60:8b:71:78:cd:41:09: 72:6a:b8:58:22:33:55:ea:26:03:d8:1a:2a:94:ce: 4a:75:a3:2a:f9:d0:91:9b:1f:3d:24:ba:cf:2f:68: da:f1:b3:22:a5:ab:f4:a8:0b:bd:0e:ae:0d:81:0a: 46:ba:db:5c:22:32:ea:e9:07:e5:58:2e:00:ca:c9: 6a:17:ee:1f:eb:e0:3c:ca:27:cb:2f:26:10:ca:71: 01:3e:10:2e:b5:4a:c1:6d:79:db:91:4a:cc:33:2f: 08:e0:22:4c:4f:15:be:62:1b:88:89:cc:e9:57:2a: 6a:c7:61:ef:33:f6:e3:30:4e:c9:35:96:90:43:96: 41:4c:55:0b:25:55:d2:cb:bb:c6:af:7d:ab:7c:2f: 90:28:36:a5:50:2a:38:ad:20:35:a6:cf:e3:f2:96: 5f:a5:b3:d9:74:ef:38:56:4f:4f:91:9f:7a:41:4d: 09:0a:f6:da:e9:1d:08:16:66:71:0f:ed:f6:5f:62: a3:c7:96:e3:9d:36:d0:6d:ff:bb:67:f4:74:9f:af: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:02:C1:CC:B5:5C:54:B5:47:89:54:AA:0E:10:A2:78:EA:94:4F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ac:e2:71:e1:8c:ef:a9:f9:1c:97:53:94:9f:21:3f:79:3c: 2f:55:2f:31:14:a2:53:ef:7f:04:48:32:ce:21:77:73:92:b7: 13:9e:ea:cc:4b:40:4d:53:12:65:67:71:bb:73:a5:bb:ee:82: 20:4f:65:af:ea:4e:6b:2d:e6:0c:7b:39:fe:0f:c3:b5:bd:21: 4c:c9:bd:a1:ef:58:ec:c3:39:3e:04:af:cb:ec:41:ee:49:2f: 12:7e:19:d9:29:ca:f8:14:6e:0b:13:d3:86:61:01:c3:13:fd: 07:71:c8:cb:8d:20:7b:41:84:62:9d:58:5f:33:65:5f:4b:c5: 20:ec:09:d7:76:28:bf:4b:e1:f4:06:a7:09:0c:0c:cc:ca:28: ef:57:69:0e:9d:34:d4:39:64:f0:1c:3e:cd:e9:08:24:7d:a9: 02:91:55:f3:d8:8c:d9:ed:06:2c:5b:3a:33:8b:f6:14:2b:eb: 22:b8:b6:59:83:0d:3a:b0:31:1e:6a:60:0e:72:6f:d8:b2:fb: 7f:44:59:4c:0c:e5:12:da:dc:89:82:66:50:d9:02:29:93:1b: 6e:57:a6:ff:54:a8:8e:be:1c:8b:31:17:4f:04:14:4f:df:46: b8:23:f4:ab:9b:61:21:2e:7d:5a:ff:f7:1c:56:10:29:c3:91: b5:58:ae:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcV+Kl2sygddyzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NmU3ODQyOTUtMTZmNi00YzM2LWJmNDItMzVlMGMzMTdmZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5j2q22s9YbJys1w4cXP36bvtLkRNBrAojN YbPaZrNfWx85jBMpYKB11Qcr3M7AfLEBqWCLcXjNQQlyarhYIjNV6iYD2BoqlM5K daMq+dCRmx89JLrPL2ja8bMipav0qAu9Dq4NgQpGuttcIjLq6QflWC4AyslqF+4f 6+A8yifLLyYQynEBPhAutUrBbXnbkUrMMy8I4CJMTxW+YhuIiczpVypqx2HvM/bj ME7JNZaQQ5ZBTFULJVXSy7vGr32rfC+QKDalUCo4rSA1ps/j8pZfpbPZdO84Vk9P kZ96QU0JCvba6R0IFmZxD+32X2Kjx5bjnTbQbf+7Z/R0n68rlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8Cwcy1XFS1R4lUqg4QonjqlE/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYwNjE2NGYtMGUzYS0z NzFiLWFkNDktNDQyMmJhM2Q2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqs4nHhjO+p+RyXU5SfIT95PC9VLzEUolPvfwRIMs4hd3OStxOe6sxL QE1TEmVncbtzpbvugiBPZa/qTmst5gx7Of4Pw7W9IUzJvaHvWOzDOT4Er8vsQe5J LxJ+GdkpyvgUbgsT04ZhAcMT/QdxyMuNIHtBhGKdWF8zZV9LxSDsCdd2KL9L4fQG pwkMDMzKKO9XaQ6dNNQ5ZPAcPs3pCCR9qQKRVfPYjNntBixbOjOL9hQr6yK4tlmD DTqwMR5qYA5yb9iy+39EWUwM5RLa3ImCZlDZAimTG25Xpv9UqI6+HIsxF08EFE/f Rrgj9KubYSEufVr/9xxWECnDkbVYrqo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:48 2025 by rpki-client