$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa File: 4f94a629-79eb-368a-9b8f-56715d70c771.roa (raw, json) Hash identifier: XsY5yDW7f9V66dMP9HcvVAqZHyS4uqXOACk+ZVIq9ME= Subject key identifier: 93:A9:73:84:D2:72:7B:20:40:61:10:32:34:75:14:E1:75:9C:C2:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A374AC25F66C4C79207766680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 7029 IP address blocks: 71.28.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:c2:5f:66:c4:c7:92:07:76:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=83fe53bb-9da4-4360-9351-3292af22aebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f9:57:c2:11:a6:ea:03:20:4f:96:10:7f:a0: 7f:96:62:7a:31:10:f6:3a:fc:4b:c4:15:46:e9:cc: 86:2b:31:a2:bf:7c:51:fd:16:7a:80:99:19:0f:a3: de:19:6a:bc:7a:ba:b8:93:bd:03:8f:aa:46:01:d1: 60:c9:89:26:cc:e6:ba:b5:29:09:8c:9a:27:89:9a: b8:62:81:8b:dd:65:5e:5b:23:6e:3e:39:ae:47:68: 64:91:58:67:5e:4d:f6:40:47:cb:51:65:01:d7:5e: 9d:ed:51:f1:71:af:f3:61:d1:06:bb:29:8d:89:a4: 38:e4:4a:f7:33:d6:79:02:37:82:20:6c:8d:c4:a6: 83:e4:56:b2:94:51:84:08:cf:01:14:0a:06:0b:e2: 89:c0:d2:ca:59:75:2f:69:71:5b:13:02:64:15:13: 48:a7:87:d1:41:e2:08:c3:75:2d:4c:28:91:a3:00: 95:14:5b:c5:69:03:ea:06:bc:53:35:24:9a:a0:01: c2:e3:e3:52:f8:b3:b6:9b:9b:e4:6f:2d:12:82:3b: 3e:be:51:19:6a:18:2e:67:2f:78:35:dc:12:71:a1: 0f:b2:c0:61:cd:30:5d:b4:2a:dd:62:94:e3:2b:7f: 9f:54:38:23:ec:a8:df:60:02:f2:cc:97:42:b4:7f: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A9:73:84:D2:72:7B:20:40:61:10:32:34:75:14:E1:75:9C:C2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f94a629-79eb-368a-9b8f-56715d70c771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e8:2b:dc:ba:73:9a:a2:b2:f1:cc:06:ef:6c:de:98:c0:e9: 03:31:0a:ec:fd:5a:17:fc:62:ad:0b:90:b4:24:84:15:e6:9a: 1d:30:59:5b:18:20:c2:9c:44:dc:14:95:45:fe:71:8a:b1:00: d1:4b:fc:48:b6:b5:f2:13:6c:6f:ed:ba:45:2b:79:26:b8:2d: 16:b3:e0:63:74:2f:ea:c5:24:48:9b:fc:a4:06:b7:79:e7:b0: c9:18:c2:cc:91:1f:88:b3:b5:d6:9c:90:f7:51:69:0b:a5:ad: 2e:1b:b5:11:cc:e0:9b:0c:34:79:2b:66:f0:8e:0c:8e:2a:76: 68:61:32:b0:20:44:7e:25:5f:94:60:8a:60:3e:c5:82:fb:c2: 9f:a6:ec:06:79:ec:78:4d:b8:38:34:86:34:05:9c:05:1b:e0: 32:71:9a:b0:70:d5:db:b2:d2:93:15:4a:dd:91:af:fe:18:24: 65:59:51:6e:14:29:42:80:fb:e5:67:13:7a:d1:df:29:17:d9: d1:cb:d0:d2:c4:31:a6:91:23:a7:1a:61:e9:ac:b1:9a:e7:e0: f4:c0:3c:2a:d2:06:56:9b:8c:ca:47:7b:1b:b1:2d:65:c8:42: d5:ca:1d:1f:ca:da:68:ed:86:ac:a1:01:94:1e:90:8c:fc:f0: ba:1b:be:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SsJfZsTHkgd2ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ODNmZTUzYmItOWRhNC00MzYwLTkzNTEtMzI5MmFmMjJhZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPlXwhGm6gMgT5YQf6B/lmJ6MRD2OvxLxBVG 6cyGKzGiv3xR/RZ6gJkZD6PeGWq8erq4k70Dj6pGAdFgyYkmzOa6tSkJjJoniZq4 YoGL3WVeWyNuPjmuR2hkkVhnXk32QEfLUWUB116d7VHxca/zYdEGuymNiaQ45Er3 M9Z5AjeCIGyNxKaD5FaylFGECM8BFAoGC+KJwNLKWXUvaXFbEwJkFRNIp4fRQeII w3UtTCiRowCVFFvFaQPqBrxTNSSaoAHC4+NS+LO2m5vkby0Sgjs+vlEZahguZy94 NdwScaEPssBhzTBdtCrdYpTjK3+fVDgj7KjfYALyzJdCtH9E6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOpc4TScnsgQGEQMjR1FOF1nMKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGY5NGE2MjktNzllYi0z NjhhLTliOGYtNTY3MTVkNzBjNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/oK9y6c5qisvHMBu9s3pjA6QMxCuz9Whf8Yq0LkLQkhBXmmh0wWVsY IMKcRNwUlUX+cYqxANFL/Ei2tfITbG/tukUreSa4LRaz4GN0L+rFJEib/KQGt3nn sMkYwsyRH4iztdackPdRaQulrS4btRHM4JsMNHkrZvCODI4qdmhhMrAgRH4lX5Rg imA+xYL7wp+m7AZ57HhNuDg0hjQFnAUb4DJxmrBw1duy0pMVSt2Rr/4YJGVZUW4U KUKA++VnE3rR3ykX2dHL0NLEMaaRI6caYemssZrn4PTAPCrSBlabjMpHexuxLWXI QtXKHR/K2mjthqyhAZQekIz88LobvpM= -----END CERTIFICATE-----Generated at Tue Jun 17 04:32:58 2025 by rpki-client