$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa File: 3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa (raw, json) Hash identifier: VkSgNlBpLaOOXjcc4fvVO9/XaZR055cN0n8oifLLBac= Subject key identifier: 9C:2B:B5:F8:2A:2F:63:5A:31:94:B9:A1:8C:6C:73:4C:40:E1:65:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0CB7AB527CE735372ACC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.28.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:cb:7a:b5:27:ce:73:53:72:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a74d5141-7867-4e90-a5b1-457b9c696cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:c5:85:49:c1:94:ae:ed:19:eb:a1:72:0b: 72:bf:f4:3c:6b:a5:17:34:0a:6e:75:be:b9:db:87: a3:98:38:06:36:f0:e8:56:c3:eb:30:50:54:b9:df: 92:99:32:ac:a3:9a:20:96:59:a1:88:b1:bc:87:a5: eb:00:b9:4e:62:e9:83:bc:c6:ac:e7:47:b0:f2:cc: 78:ce:ff:4d:a0:19:f7:0c:87:f8:40:3f:bd:b0:cc: ef:c8:6f:1e:07:f2:d7:3f:b9:75:e7:d9:8e:0e:78: 49:5e:10:da:b6:d6:23:dc:cf:a0:83:e8:64:b4:a4: ec:f7:9f:91:44:2e:f2:06:7e:73:11:dd:da:70:47: 9b:03:21:3f:9e:bc:3b:83:29:2c:08:2e:cd:56:2a: 64:c3:d0:5f:12:f7:e3:02:28:da:6a:e4:71:cf:de: c4:01:b7:c0:10:c1:a7:6c:5c:54:20:96:39:42:af: af:b7:5c:0c:09:d7:98:91:d6:ee:d9:9e:01:ac:5e: 69:65:e9:9b:6d:46:47:e0:00:e0:cf:a6:39:0b:6b: dc:2b:f7:5f:d1:ba:b1:e3:23:dc:84:7b:15:89:47: 3f:c8:ff:96:98:55:52:d1:55:ec:30:77:de:1c:13: 4d:f1:d9:49:82:26:40:26:da:e7:e2:9f:80:a1:3f: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:B5:F8:2A:2F:63:5A:31:94:B9:A1:8C:6C:73:4C:40:E1:65:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8c:60:b1:65:ca:d9:23:50:8c:12:26:3f:ed:d2:3b:2c:ea: ec:bd:d7:11:18:33:48:aa:ec:5f:bc:19:2a:de:78:e1:1d:e6: 76:68:a0:c3:a3:4a:bf:c7:22:e0:ea:71:d7:79:a1:56:74:13: c9:af:c9:7a:68:06:de:88:97:dc:4a:20:d7:31:a7:78:8b:cb: 0f:d8:bb:0d:c5:6c:6a:a4:6d:95:e5:94:63:57:7b:dd:51:0c: 51:5c:e4:34:9d:82:6e:57:81:15:9e:44:e8:cd:29:07:11:46: 02:90:38:ff:98:5e:9c:b9:8b:85:82:49:15:16:e7:e0:48:c5: 2c:1f:62:ce:60:c1:15:fa:9a:68:a1:74:61:21:0f:38:84:0f: c8:f4:c4:ec:1f:69:8c:13:57:81:c8:ed:38:f6:17:6c:a5:ca: b4:fb:58:ab:82:c2:dc:ec:13:9e:ea:a6:8e:46:d4:1e:62:7d: 80:ff:c0:80:65:fd:fa:25:36:24:b0:66:dd:28:6b:df:03:93: 50:3c:01:90:da:7f:4e:fc:c6:79:17:33:91:32:ff:0f:62:3e: a4:9e:a3:fa:03:09:b7:1b:83:09:73:9c:00:bf:ef:ba:68:49: 04:56:c2:f5:06:e2:ae:a4:bf:9d:d0:95:42:a5:ee:f0:f9:35: 38:da:2e:3d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqQoMt6tSfOc1NyrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTc0ZDUxNDEtNzg2Ny00ZTkwLWE1YjEtNDU3YjljNjk2Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm93FhUnBlK7tGeuhcgtyv/Q8a6UXNApudb65 24ejmDgGNvDoVsPrMFBUud+SmTKso5ogllmhiLG8h6XrALlOYumDvMas50ew8sx4 zv9NoBn3DIf4QD+9sMzvyG8eB/LXP7l159mODnhJXhDattYj3M+gg+hktKTs95+R RC7yBn5zEd3acEebAyE/nrw7gyksCC7NVipkw9BfEvfjAijaauRxz97EAbfAEMGn bFxUIJY5Qq+vt1wMCdeYkdbu2Z4BrF5pZembbUZH4ADgz6Y5C2vcK/df0bqx4yPc hHsViUc/yP+WmFVS0VXsMHfeHBNN8dlJgiZAJtrn4p+AoT9U4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJwrtfgqL2NaMZS5oYxsc0xA4WVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYxMWFlMTQtYzM2Ny0z ZjAyLTgzZjUtZTk5OTZlYjFlMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGoxgsWXK2SNQjBImP+3SOyzq7L3XERgzSKrsX7wZKt544R3mdmigw6NK v8ci4Opx13mhVnQTya/JemgG3oiX3Eog1zGneIvLD9i7DcVsaqRtleWUY1d73VEM UVzkNJ2CbleBFZ5E6M0pBxFGApA4/5henLmLhYJJFRbn4EjFLB9izmDBFfqaaKF0 YSEPOIQPyPTE7B9pjBNXgcjtOPYXbKXKtPtYq4LC3OwTnuqmjkbUHmJ9gP/AgGX9 +iU2JLBm3Shr3wOTUDwBkNp/TvzGeRczkTL/D2I+pJ6j+gMJtxuDCXOcAL/vumhJ BFbC9QbirqS/ndCVQqXu8Pk1ONouPQ== -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:07 2025 by rpki-client