$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa File: 1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa (raw, json) Hash identifier: VVnJWdUDjA8DB7FNjCeG3XPuwR0ry18vJRYm9biKb2s= Subject key identifier: B1:56:7D:42:E4:85:3D:6B:AD:A8:DC:24:5C:73:4F:68:AA:17:74:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB2217238E99A3AAAA20F2880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 71.28.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:38:e9:9a:3a:aa:a2:0f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=c016458f-0f3a-404a-b785-e1def94c2e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8b:eb:54:c7:f3:98:3a:22:05:f3:4a:fd:b1: b0:bb:79:ad:96:4c:18:d6:ff:a2:da:1b:98:2f:98: 54:3a:80:bf:75:13:7f:50:48:85:8f:60:e1:f0:f2: 8a:56:c3:b5:2e:c2:6b:93:09:61:50:d6:d1:42:64: 32:92:a5:89:50:23:36:e2:2e:1c:1b:cd:7e:ab:eb: d8:e1:6b:61:59:e4:c8:de:5f:b6:1f:91:14:e7:f1: 71:59:60:6e:30:e1:93:18:51:d5:02:b9:16:88:4b: 1c:5a:6c:52:5d:fb:03:63:7c:61:43:b2:8e:46:50: 6d:f3:23:c3:c6:31:d4:50:19:d1:24:fa:a3:59:98: 73:ab:71:c6:01:33:b2:2e:e4:3f:09:9b:17:57:3b: 36:21:ac:99:a5:17:e1:dc:8f:69:0f:6e:c7:b4:40: 90:e8:62:9e:c2:b6:7f:78:1f:96:9b:f0:7e:d4:09: de:30:98:e4:03:2d:74:15:9f:54:6c:ec:90:5a:54: 62:ad:80:49:07:96:91:8f:71:5c:66:a7:95:e7:3f: 84:c6:16:b0:87:27:cb:8c:ce:c9:b2:c9:42:8b:6d: 7d:7b:c7:57:22:96:dc:0b:c8:d9:05:f8:87:b2:e1: 98:24:c0:53:fc:ba:a1:7b:70:f7:65:d7:10:3b:73: 75:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:56:7D:42:E4:85:3D:6B:AD:A8:DC:24:5C:73:4F:68:AA:17:74:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e49a2f9-08ae-38d5-aacc-58106fc9e3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:52:03:ca:50:a2:bd:56:39:97:d2:8a:3a:69:c2:d2:b9:f5: 3a:92:df:01:a0:18:a1:dd:29:cf:c8:0e:9c:2e:fa:c1:9f:6b: 89:15:8e:74:2e:c4:fa:ab:38:f6:c9:3f:be:a9:21:29:9e:0f: 47:b1:80:ca:2e:7f:d0:bf:ef:2f:36:2a:7e:76:f1:e7:36:dc: af:7e:93:21:7b:ee:c0:79:ed:d7:97:d9:b7:70:9e:9c:45:56: 2f:0f:46:6a:da:33:73:3c:10:50:45:d0:f8:cf:78:fa:bc:b6: 6c:69:64:68:99:e8:ba:09:90:a8:92:4c:72:71:39:18:ca:a6: f7:06:f8:ef:ac:7e:4f:95:7d:47:6d:65:19:57:a0:18:4b:9d: e0:19:96:83:78:1a:85:2a:7d:15:bf:5c:d6:3a:76:c3:13:84: 41:02:00:4a:b2:6a:48:6e:04:05:ab:f1:22:8a:53:93:1d:ad: 52:75:a5:25:a4:c9:f6:14:6f:4d:d3:bc:9a:79:3e:a6:74:e9: 59:15:a0:6a:e8:0e:45:b2:fb:7b:15:cc:6e:65:80:a7:d2:1b: aa:c0:dd:54:96:bf:32:23:0d:34:79:fb:06:97:25:df:28:4d: b5:57:d4:e6:2a:ca:be:11:22:60:78:09:9e:40:75:34:c0:4b: d1:0c:83:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXI46Zo6qqIPKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk YzAxNjQ1OGYtMGYzYS00MDRhLWI3ODUtZTFkZWY5NGMyZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIvrVMfzmDoiBfNK/bGwu3mtlkwY1v+i2huY L5hUOoC/dRN/UEiFj2Dh8PKKVsO1LsJrkwlhUNbRQmQykqWJUCM24i4cG81+q+vY 4WthWeTI3l+2H5EU5/FxWWBuMOGTGFHVArkWiEscWmxSXfsDY3xhQ7KORlBt8yPD xjHUUBnRJPqjWZhzq3HGATOyLuQ/CZsXVzs2IayZpRfh3I9pD27HtECQ6GKewrZ/ eB+Wm/B+1AneMJjkAy10FZ9UbOyQWlRirYBJB5aRj3FcZqeV5z+ExhawhyfLjM7J sslCi219e8dXIpbcC8jZBfiHsuGYJMBT/Lqhe3D3ZdcQO3N1owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFWfULkhT1rrajcJFxzT2iqF3SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWU0OWEyZjktMDhhZS0z OGQ1LWFhY2MtNTgxMDZmYzllM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhSA8pQor1WOZfSijppwtK59TqS3wGgGKHdKc/IDpwu+sGfa4kVjnQu xPqrOPbJP76pISmeD0exgMouf9C/7y82Kn528ec23K9+kyF77sB57deX2bdwnpxF Vi8PRmraM3M8EFBF0PjPePq8tmxpZGiZ6LoJkKiSTHJxORjKpvcG+O+sfk+VfUdt ZRlXoBhLneAZloN4GoUqfRW/XNY6dsMThEECAEqyakhuBAWr8SKKU5MdrVJ1pSWk yfYUb03TvJp5PqZ06VkVoGroDkWy+3sVzG5lgKfSG6rA3VSWvzIjDTR5+waXJd8o TbVX1OYqyr4RImB4CZ5AdTTAS9EMg9M= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:44 2025 by rpki-client