$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa File: 1abac9eb-df64-3e5a-a248-a5543e84384e.roa (raw, json) Hash identifier: Wysb88YK7Cc+hKmuJAa2lJ+YdooJvPhH3hg890xF2sg= Subject key identifier: 08:0B:8B:C7:5A:E3:69:47:4B:D1:AC:9A:23:25:38:44:0D:4A:8C:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8871BD45E67CE9A5C880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.28.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:71:bd:45:e6:7c:e9:a5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=fdf6fbdf-5eee-49e4-88d8-a0e2982c41c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:b3:8d:a6:f8:9c:7a:f2:56:0d:08:7d:47: 98:89:32:9c:83:33:21:49:24:c2:77:86:ac:06:a3: e8:ae:15:15:81:b4:43:62:ad:34:f8:89:e4:1c:57: 1f:b9:30:84:99:f7:c7:b1:64:66:e5:61:f4:02:c8: e3:e5:85:88:19:e1:0f:cd:14:45:8b:e0:d6:01:d7: 60:51:49:1d:0b:07:15:ca:17:47:63:b1:2f:9a:28: 53:85:2c:8d:cb:78:4e:b8:31:4f:00:59:2f:e6:87: ad:f4:77:b6:14:74:61:c2:08:42:90:19:28:15:aa: 34:f3:14:e7:c5:2e:1c:01:31:6f:c9:e0:61:d3:57: 6a:df:e2:d3:67:44:40:54:fd:51:3b:28:b9:2c:8b: 47:9b:33:9b:62:fa:22:75:ff:cb:6b:78:0a:17:ad: bb:9a:25:c3:6e:37:fa:0f:79:a6:5d:70:b7:5d:e0: 36:ec:90:57:f0:5a:6d:cf:7b:b5:af:4f:8e:74:94: f6:48:00:95:58:06:55:21:a4:13:28:33:9f:18:66: 6c:8a:c4:c2:d0:18:37:64:e4:33:4b:50:e1:ed:24: d0:1e:d1:27:c0:5b:02:18:25:2c:6f:08:96:11:ab: fd:2c:00:8b:7b:c1:aa:a9:03:a1:b8:56:80:d8:64: 00:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0B:8B:C7:5A:E3:69:47:4B:D1:AC:9A:23:25:38:44:0D:4A:8C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b9:3e:7b:73:67:8f:a9:87:bc:a8:38:cc:9c:bb:d9:89:f9: 41:5c:f1:f6:06:ba:68:89:02:45:8a:7e:02:3b:7b:fa:2a:52: d5:df:66:17:59:0e:6c:37:d3:c7:fc:3b:7d:9d:63:3e:0c:66: f3:f6:ab:7b:a7:31:49:8e:b3:e2:33:b8:5e:97:80:75:e8:d7: 01:d0:fe:8e:80:ed:32:64:48:b1:b0:f4:df:77:97:1f:66:df: 6d:95:54:ea:28:27:07:91:51:0c:1c:47:5f:24:53:bd:fe:6a: 15:52:aa:61:09:3e:cc:d5:40:63:fa:6b:f9:68:43:ed:3b:f4: 17:53:31:2d:1f:4a:d7:4a:0e:72:fb:c4:e8:85:43:c4:6e:1e: fc:09:67:4b:04:b8:2e:55:04:c9:7b:7a:46:29:f7:fc:de:8a: a8:8c:dc:d4:08:10:4c:96:e1:03:a3:22:52:74:bc:13:2d:f5: b8:3b:cb:81:87:79:82:f0:4a:ee:dd:56:b7:74:b2:ec:02:3c: c8:a9:73:dc:1d:3a:e6:37:1e:fa:6c:1b:6e:1e:19:09:33:0b: d6:21:8e:37:1a:c8:94:cf:d1:a5:28:96:fb:68:8e:18:cc:49: ca:fa:47:af:ce:5e:25:f2:00:96:f3:b4:6c:0e:fa:e9:f6:62: 28:95:8d:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qohxvUXmfOmlyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZmRmNmZiZGYtNWVlZS00OWU0LTg4ZDgtYTBlMjk4MmM0MWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseWzjab4nHryVg0IfUeYiTKcgzMhSSTCd4as BqPorhUVgbRDYq00+InkHFcfuTCEmffHsWRm5WH0Asjj5YWIGeEPzRRFi+DWAddg UUkdCwcVyhdHY7EvmihThSyNy3hOuDFPAFkv5oet9He2FHRhwghCkBkoFao08xTn xS4cATFvyeBh01dq3+LTZ0RAVP1ROyi5LItHmzObYvoidf/La3gKF627miXDbjf6 D3mmXXC3XeA27JBX8Fptz3u1r0+OdJT2SACVWAZVIaQTKDOfGGZsisTC0Bg3ZOQz S1Dh7STQHtEnwFsCGCUsbwiWEav9LACLe8GqqQOhuFaA2GQAPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgLi8da42lHS9GsmiMlOEQNSoy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiYWM5ZWItZGY2NC0z ZTVhLWEyNDgtYTU1NDNlODQzODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE65PntzZ4+ph7yoOMycu9mJ+UFc8fYGumiJAkWKfgI7e/oqUtXfZhdZ Dmw308f8O32dYz4MZvP2q3unMUmOs+IzuF6XgHXo1wHQ/o6A7TJkSLGw9N93lx9m 322VVOooJweRUQwcR18kU73+ahVSqmEJPszVQGP6a/loQ+079BdTMS0fStdKDnL7 xOiFQ8RuHvwJZ0sEuC5VBMl7ekYp9/zeiqiM3NQIEEyW4QOjIlJ0vBMt9bg7y4GH eYLwSu7dVrd0suwCPMipc9wdOuY3HvpsG24eGQkzC9YhjjcayJTP0aUolvtojhjM Scr6R6/OXiXyAJbztGwO+un2YiiVjYw= -----END CERTIFICATE-----Generated at Sun Jun 15 11:48:41 2025 by rpki-client