$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa File: 5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa (raw, json) Hash identifier: 9ACQKiOgEO78gcs9vYol2XFv8Eo44E/qfISku5wvBBI= Subject key identifier: 7B:9B:7D:26:B3:BC:44:18:E3:70:03:CA:38:2A:17:93:A7:7E:5E:9C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8880559A0938DB24CFA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.28.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:80:55:9a:09:38:db:24:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=355f2d73-be17-432c-ab93-fa949ec16deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:26:a0:37:07:14:19:ed:44:44:ba:37:59:ef: cd:5e:79:43:6f:d2:12:0a:9a:28:1a:61:76:16:a4: 50:6b:ce:9f:88:af:f8:4e:09:90:81:71:e8:3a:43: a4:dc:c5:a0:7b:4f:cc:aa:49:c5:99:66:8d:98:13: de:9c:34:38:f3:a3:12:be:25:1a:ac:4a:f4:4c:1b: d2:29:f5:88:fc:0c:4d:6d:21:0c:f3:02:35:46:47: 17:5d:ec:87:b7:54:96:a8:01:98:a0:8b:5a:47:0b: 0f:cb:f9:ab:1f:df:67:47:3f:62:90:60:f6:fd:33: 58:ee:49:ac:fb:7a:08:08:56:0e:03:55:c4:7f:73: fe:c9:68:7b:95:08:b8:a0:f6:95:6f:46:65:d7:f1: 7a:77:c7:ce:4e:93:1c:10:f7:8e:4d:d5:0a:88:a9: ae:b0:64:ec:a0:ae:00:bb:f4:fb:1e:86:98:e9:37: 1b:89:15:2d:76:1b:bd:23:b0:d5:9e:8c:6e:35:f2: 32:ed:f3:c7:28:4c:7f:ce:00:fe:47:61:4a:a5:f9: 0b:22:d7:67:73:e6:b4:79:f7:22:b3:d0:d2:8f:b5: ce:87:0b:4d:33:5a:cf:4a:bd:14:7b:5c:2f:c8:bc: 57:b8:45:a1:ad:63:58:48:7a:c5:33:f7:19:d3:d1: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:7D:26:B3:BC:44:18:E3:70:03:CA:38:2A:17:93:A7:7E:5E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c6:d9:ec:62:7b:ff:86:dd:dc:0e:5d:d2:6c:3a:e9:e5:a7: 66:97:dd:64:ad:d3:bd:8e:43:41:91:4e:7d:17:44:36:80:13: 5d:46:0a:8a:93:9f:f3:2f:a5:93:53:18:94:b4:5a:1d:3a:4e: 23:51:c4:b9:66:3f:a1:e2:98:af:bf:55:59:05:69:1e:a2:73: 23:51:71:3a:0a:89:3d:b1:25:b9:98:4a:c8:1f:9a:2e:41:07: 3e:e7:29:c5:a8:8c:f1:a0:d2:34:f0:12:2e:3e:87:de:92:dc: 8d:75:b0:e0:92:14:de:d7:d9:30:af:a1:56:51:cc:18:04:cf: ff:e0:9e:db:f6:6d:1e:cb:fd:51:b2:1f:91:f9:b5:0e:22:05: c1:46:71:b9:ff:22:59:cc:bb:e9:7a:ea:dd:fd:b5:d2:4d:68: 02:18:7b:eb:01:93:4b:20:10:ed:48:f8:e4:b2:0a:e0:7f:4f: 21:57:88:e1:23:36:fe:97:ef:75:73:56:03:fd:0a:7d:e1:0a: 19:90:b0:4d:d6:c5:84:9a:5d:83:9b:7b:41:38:c0:6a:2b:ab: e0:70:2c:4a:9c:ca:f8:bf:a7:c5:08:cc:e3:f4:76:5d:12:05: c7:a6:00:74:31:f7:4c:44:d1:ff:39:25:b1:5d:7d:81:34:a2: 28:31:07:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoiAVZoJONskz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzU1ZjJkNzMtYmUxNy00MzJjLWFiOTMtZmE5NDllYzE2ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCagNwcUGe1ERLo3We/NXnlDb9ISCpooGmF2 FqRQa86fiK/4TgmQgXHoOkOk3MWge0/MqknFmWaNmBPenDQ486MSviUarEr0TBvS KfWI/AxNbSEM8wI1RkcXXeyHt1SWqAGYoItaRwsPy/mrH99nRz9ikGD2/TNY7kms +3oICFYOA1XEf3P+yWh7lQi4oPaVb0Zl1/F6d8fOTpMcEPeOTdUKiKmusGTsoK4A u/T7HoaY6TcbiRUtdhu9I7DVnoxuNfIy7fPHKEx/zgD+R2FKpfkLItdnc+a0efci s9DSj7XOhwtNM1rPSr0Ue1wvyLxXuEWhrWNYSHrFM/cZ09FEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHubfSazvEQY43ADyjgqF5Onfl6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYxOWI5OGUtZTc5Yy0z MTViLWE3MmYtZmQ3MDIzZWI2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPG2exie/+G3dwOXdJsOunlp2aX3WSt072OQ0GRTn0XRDaAE11GCoqT n/MvpZNTGJS0Wh06TiNRxLlmP6HimK+/VVkFaR6icyNRcToKiT2xJbmYSsgfmi5B Bz7nKcWojPGg0jTwEi4+h96S3I11sOCSFN7X2TCvoVZRzBgEz//gntv2bR7L/VGy H5H5tQ4iBcFGcbn/IlnMu+l66t39tdJNaAIYe+sBk0sgEO1I+OSyCuB/TyFXiOEj Nv6X73VzVgP9Cn3hChmQsE3WxYSaXYObe0E4wGorq+BwLEqcyvi/p8UIzOP0dl0S BcemAHQx90xE0f85JbFdfYE0oigxB/M= -----END CERTIFICATE-----Generated at Sun Jun 15 18:53:00 2025 by rpki-client