$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa File: 68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa (raw, json) Hash identifier: E1qX29Ke2g/7tAHO1O2h08HpsjrSlL56NmOalPbKYRg= Subject key identifier: 93:EF:AC:53:EE:60:9D:97:BC:C3:0F:5C:3F:FF:45:77:EE:30:34:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22171A11DC0606FE1506200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 71.28.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:71:a1:1d:c0:60:6f:e1:50:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=64936e7f-aed1-4bc8-a6f7-b85e8022503e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:92:6d:f4:74:96:ca:5c:d7:b2:72:70:55: 8d:eb:f1:69:30:bc:8e:ba:b6:ae:86:60:20:0a:a6: 40:cf:4f:7d:98:53:c2:d3:e1:e4:e7:6e:9b:2e:a4: 9a:5c:ac:b4:52:4c:0e:51:40:9e:fe:88:69:a5:b4: eb:1a:f5:bb:27:da:49:6e:da:31:dd:66:7a:f4:29: c8:e4:ed:66:47:5f:fd:fe:77:69:40:ce:94:ff:f1: 10:4b:7c:48:26:96:a7:a3:82:a5:48:b5:0c:c4:29: 44:c3:cb:6e:6e:45:6b:3d:66:f7:b9:0b:89:2e:22: c2:9e:5d:dc:4b:47:f1:29:72:17:22:73:ad:2f:42: ed:2b:40:7f:9c:21:04:2f:97:2d:1a:d3:80:4b:35: b4:c6:cc:48:93:bd:e4:51:84:25:bc:c1:54:7c:af: af:64:27:98:c1:3f:76:49:0f:44:4f:e1:da:64:17: a6:c1:49:72:78:3b:1d:ba:9f:20:66:2b:d1:09:20: c2:43:ce:d6:3d:22:a7:72:98:b2:cb:72:51:e3:a0: fd:a1:48:51:dc:f2:a6:ab:f9:d3:b5:d3:81:7a:7d: b1:22:7d:fa:19:bf:cf:72:5b:11:b6:a9:6f:ab:be: f5:66:b3:b8:80:87:74:78:9e:6e:f6:41:df:33:38: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:AC:53:EE:60:9D:97:BC:C3:0F:5C:3F:FF:45:77:EE:30:34:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:58:1b:3c:92:ee:0f:4e:6d:7b:80:28:25:14:1a:63:9c:d7: 2e:97:5f:3f:d8:8b:49:9c:d6:c0:f5:f6:b5:2d:c0:d3:fe:42: 35:e9:28:10:9b:74:11:4d:37:8d:4f:b2:09:5a:29:63:fa:e4: c2:28:86:53:50:db:57:b2:8f:6f:f6:6e:c5:0a:dd:d0:a6:26: 22:98:6a:20:56:bd:5d:46:dc:14:73:ff:58:42:1e:f7:48:44: e0:58:fd:4e:cd:6e:29:dd:85:d2:de:43:ba:09:55:e4:65:54: 2c:f2:33:61:a7:a1:f6:39:35:7f:02:dd:3f:72:7c:d0:93:f4: ea:26:c1:36:2b:8e:63:18:36:aa:f3:89:59:8a:df:2c:0d:f0: d3:e6:82:c5:a6:67:f7:98:c6:9b:45:a0:0f:b5:49:d7:fb:aa: 7f:8c:82:e0:55:38:01:6a:34:b8:a9:0e:01:c9:26:db:eb:19: 47:f6:0c:a1:d0:e1:ab:b7:4e:1c:42:83:1f:95:81:12:32:90: 18:7a:70:8c:41:96:d7:1a:15:6b:47:50:04:f2:0f:6a:7f:9a: 3b:84:8c:56:8f:f2:09:64:fb:0f:4f:28:ca:5e:69:32:60:ab: 62:e4:d8:b1:da:10:8c:89:d5:24:2e:f5:40:04:ba:cf:8f:33: 53:7a:de:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXGhHcBgb+FQYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NjQ5MzZlN2YtYWVkMS00YmM4LWE2ZjctYjg1ZTgwMjI1MDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOiSbfR0lspc17JycFWN6/FpMLyOurauhmAg CqZAz099mFPC0+Hk526bLqSaXKy0UkwOUUCe/ohppbTrGvW7J9pJbtox3WZ69CnI 5O1mR1/9/ndpQM6U//EQS3xIJpano4KlSLUMxClEw8tubkVrPWb3uQuJLiLCnl3c S0fxKXIXInOtL0LtK0B/nCEEL5ctGtOASzW0xsxIk73kUYQlvMFUfK+vZCeYwT92 SQ9ET+HaZBemwUlyeDsdup8gZivRCSDCQ87WPSKncpiyy3JR46D9oUhR3PKmq/nT tdOBen2xIn36Gb/PclsRtqlvq771ZrO4gId0eJ5u9kHfMzhwXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPvrFPuYJ2XvMMPXD//RXfuMDQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg4NTBjMTUtYWE1Ni0z ZWNkLWJhOGQtMDdlNGY2OWZjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApYGzyS7g9ObXuAKCUUGmOc1y6XXz/Yi0mc1sD19rUtwNP+QjXpKBCb dBFNN41PsglaKWP65MIohlNQ21eyj2/2bsUK3dCmJiKYaiBWvV1G3BRz/1hCHvdI ROBY/U7NbindhdLeQ7oJVeRlVCzyM2GnofY5NX8C3T9yfNCT9OomwTYrjmMYNqrz iVmK3ywN8NPmgsWmZ/eYxptFoA+1Sdf7qn+MguBVOAFqNLipDgHJJtvrGUf2DKHQ 4au3ThxCgx+VgRIykBh6cIxBltcaFWtHUATyD2p/mjuEjFaP8glk+w9PKMpeaTJg q2Lk2LHaEIyJ1SQu9UAEus+PM1N63lU= -----END CERTIFICATE-----Generated at Fri Aug 8 00:11:29 2025 by rpki-client