$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16a575c0-2baa-3d5b-b7c9-4b8328f71a11.roa File: 16a575c0-2baa-3d5b-b7c9-4b8328f71a11.roa (raw, json) Hash identifier: +G6gC4qINwbXUjE0vWnVK+GdXUEnBFmbrfWRzo5Nsaw= Subject key identifier: 88:13:6E:3C:56:79:E8:CD:3E:9A:EE:93:42:38:37:C5:A3:9F:9D:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB221726B5416C84194599780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16a575c0-2baa-3d5b-b7c9-4b8328f71a11.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 71.29.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:6b:54:16:c8:41:94:59:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=8204d8fa-9eec-42e9-9309-5b07a90ae075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:71:9e:39:2a:7a:bb:33:b0:52:a2:68:16: f0:74:7c:b0:6a:a5:07:83:2a:fc:54:e1:30:a1:ee: bb:41:8b:23:7a:9c:dd:f2:22:4b:f8:db:42:4c:8c: d3:a1:9c:57:21:44:d1:ae:39:67:c6:d6:26:59:50: 29:cd:47:fe:9f:47:0e:42:98:98:69:6d:e0:92:a1: 21:41:d7:23:7e:74:41:c3:c0:8c:6a:61:6e:0b:ee: 8b:fd:19:57:f7:07:83:6e:00:dd:78:6c:47:59:37: 9f:0e:1f:56:98:59:2f:85:46:e1:ff:86:4f:e0:37: fb:cc:1f:d3:06:a1:bd:3a:1f:86:18:c9:41:51:42: c7:6c:a3:8c:28:4a:ce:dc:7d:58:2a:31:96:9d:e3: 24:7b:21:b5:fb:03:df:0e:a0:fb:71:79:e5:df:32: ad:f9:c5:be:74:11:11:1c:c6:d6:09:e0:08:be:79: db:67:9d:85:e2:eb:c0:26:39:4d:54:42:b9:d4:d2: 3b:43:d0:32:97:bb:44:fc:5a:b7:cf:c0:d0:53:7c: fc:c5:c9:d3:6c:ef:ae:20:86:5f:1f:75:64:8f:ee: 11:de:b4:78:16:8b:e3:4d:96:0d:dd:22:56:f7:42: 1f:4f:55:5b:86:71:0b:1d:12:6f:1d:e3:25:ef:67: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:13:6E:3C:56:79:E8:CD:3E:9A:EE:93:42:38:37:C5:A3:9F:9D:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/16a575c0-2baa-3d5b-b7c9-4b8328f71a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:62:3b:e7:e5:b1:01:5b:2e:c7:84:a1:44:07:90:bb:4e:37: 8d:a7:11:b1:d9:12:08:2c:66:22:6f:d1:20:10:a1:09:af:7f: fc:f8:ab:59:fd:bf:93:14:4d:5c:8c:99:55:df:52:de:2c:bd: 36:5f:7a:a7:84:5f:0b:24:75:29:c0:1b:f0:d9:c2:8a:1e:ac: 31:b0:ae:8f:0d:bf:a0:14:6c:6a:4b:bb:db:1a:01:75:4f:b2: 44:78:ab:b0:f2:2b:bb:cc:d2:55:08:74:5d:3d:9d:33:8c:ec: 69:dc:6f:d4:49:88:c4:c2:b3:d2:5a:34:55:39:86:ce:0d:05: 0c:c0:d3:fe:28:e7:ef:b6:ad:51:c3:05:2c:ae:b6:76:05:d9: 30:ce:6c:a2:a0:02:6d:6a:49:d2:67:86:ff:8f:32:6d:04:aa: ee:8a:8f:37:40:75:62:cb:0e:1c:bb:fc:fe:16:90:93:f3:86: 82:ef:90:af:f2:07:d6:66:93:9c:97:20:6f:55:a7:e9:26:f5: 72:49:0b:ad:cd:cf:69:fe:b7:94:00:cf:f7:ab:a1:d6:62:fb: 19:ab:e5:6f:a6:a7:ce:9b:ab:48:98:f3:7c:53:57:f8:ca:60: a8:74:15:1a:cb:27:e0:47:a4:95:e4:b6:c3:27:41:78:c9:23: f5:e7:e4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXJrVBbIQZRZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODIwNGQ4ZmEtOWVlYy00MmU5LTkzMDktNWIwN2E5MGFlMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug1xnjkqerszsFKiaBbwdHywaqUHgyr8VOEw oe67QYsjepzd8iJL+NtCTIzToZxXIUTRrjlnxtYmWVApzUf+n0cOQpiYaW3gkqEh QdcjfnRBw8CMamFuC+6L/RlX9weDbgDdeGxHWTefDh9WmFkvhUbh/4ZP4Df7zB/T BqG9Oh+GGMlBUULHbKOMKErO3H1YKjGWneMkeyG1+wPfDqD7cXnl3zKt+cW+dBER HMbWCeAIvnnbZ52F4uvAJjlNVEK51NI7Q9Ayl7tE/Fq3z8DQU3z8xcnTbO+uIIZf H3Vkj+4R3rR4FovjTZYN3SJW90IfT1VbhnELHRJvHeMl72eeGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgTbjxWeejNPpruk0I4N8Wjn51RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTZhNTc1YzAtMmJhYS0z ZDViLWI3YzktNGI4MzI4ZjcxYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFiO+flsQFbLseEoUQHkLtON42nEbHZEggsZiJv0SAQoQmvf/z4q1n9 v5MUTVyMmVXfUt4svTZfeqeEXwskdSnAG/DZwooerDGwro8Nv6AUbGpLu9saAXVP skR4q7DyK7vM0lUIdF09nTOM7Gncb9RJiMTCs9JaNFU5hs4NBQzA0/4o5++2rVHD BSyutnYF2TDObKKgAm1qSdJnhv+PMm0Equ6KjzdAdWLLDhy7/P4WkJPzhoLvkK/y B9Zmk5yXIG9Vp+km9XJJC63Nz2n+t5QAz/erodZi+xmr5W+mp86bq0iY83xTV/jK YKh0FRrLJ+BHpJXktsMnQXjJI/Xn5Lk= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:54 2025 by rpki-client