$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa File: 736dd3da-b7fc-332b-a64b-9670e8707f23.roa (raw, json) Hash identifier: 4v9zvF25+jwvXg8QdPCVFs8h8dCiHheqkP2OFSQZShI= Subject key identifier: 34:6D:9A:BE:D2:C6:2C:EC:90:64:35:3E:FF:B9:10:F5:54:CC:D6:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E9646D60FC4B7711F70C2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.29.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:46:d6:0f:c4:b7:71:1f:70:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=26b61b79-b6cd-4294-a1cb-ccdc5fa771be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:0e:3a:fe:ed:88:b5:54:4a:32:94:27:3c: 48:b4:08:65:bd:ce:13:d6:28:6e:c2:5d:66:0d:d5: 3d:ce:14:8e:01:cb:db:ab:d1:a8:9c:22:21:53:13: d2:96:e7:f8:9a:87:06:72:7a:c5:33:fd:da:30:82: 19:3c:7f:bc:e8:51:15:fa:28:79:4b:7e:73:b0:eb: 8b:1b:39:fa:9b:e2:38:0d:e5:3b:e8:19:50:0a:1a: ad:28:cf:9b:a0:b6:cd:11:9d:f4:fc:22:b0:e0:a6: 09:45:1d:4d:3e:d9:c1:3e:88:56:43:c5:77:14:43: 82:d1:11:54:9a:ca:7c:22:1e:bc:d2:8f:61:2c:32: 4a:02:27:42:a9:c8:b2:7c:1c:c2:60:46:13:f6:1c: 6c:96:80:14:9c:29:7c:e5:32:c6:9c:10:ce:98:42: 96:ea:2e:f2:04:42:ce:7e:d4:fb:3e:6e:30:15:43: 51:c5:b1:a6:01:cf:42:39:c9:df:55:61:9d:b2:a9: d6:3e:0a:38:9f:d9:8d:6d:10:4a:a6:61:aa:2e:67: ec:33:24:7f:9e:c6:d1:e7:99:e1:3a:f7:c3:24:c0: 97:21:45:77:45:d5:d8:ac:83:8e:3a:05:6e:cc:81: 8b:00:6a:af:50:38:50:21:8c:31:ca:b2:f3:23:99: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6D:9A:BE:D2:C6:2C:EC:90:64:35:3E:FF:B9:10:F5:54:CC:D6:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/736dd3da-b7fc-332b-a64b-9670e8707f23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c6:2c:d9:f5:f9:a4:27:c9:5b:f4:70:73:ad:8f:d3:8c:5f: a3:b1:7f:d6:89:a7:ea:b3:dc:65:19:14:17:f5:85:ad:0d:6c: a2:1c:c4:21:5a:76:6c:1d:30:0f:39:e4:6d:af:c0:a7:f3:36: f0:76:26:ac:c6:ca:16:62:45:30:79:da:c1:87:70:91:5f:39: b7:26:91:5b:49:31:dd:57:52:3f:4a:c6:6a:99:83:f2:9c:94: e9:21:ed:89:77:b9:14:56:c5:df:9f:6b:31:a7:f2:9d:60:2b: eb:e0:0c:ba:87:83:c9:47:aa:ab:f2:ed:25:e2:f8:8c:c9:88: 97:bc:fd:26:bc:39:5f:5c:88:d1:b4:81:50:1a:d4:3b:d4:5c: 55:ca:73:af:00:56:31:fe:06:9d:f4:5a:d5:67:f3:90:99:9e: 1b:da:ef:54:c3:22:7e:8a:74:d7:e2:58:c9:90:e4:94:36:47: d8:49:e6:d7:cd:c4:1a:1a:aa:44:55:e6:5f:09:e1:73:9b:07: f4:05:42:3b:82:8a:cf:c3:ad:58:09:e1:55:51:f9:e3:22:8d: 47:ef:cf:e3:73:3b:2a:50:07:4e:dc:ec:11:1c:57:68:cb:7e: 79:e6:10:ad:d3:bd:37:03:f9:c0:22:93:6a:31:8a:05:5b:79: 28:23:82:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelkbWD8S3cR9wwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjZiNjFiNzktYjZjZC00Mjk0LWExY2ItY2NkYzVmYTc3MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzcOOv7tiLVUSjKUJzxItAhlvc4T1ihuwl1m DdU9zhSOAcvbq9GonCIhUxPSluf4mocGcnrFM/3aMIIZPH+86FEV+ih5S35zsOuL Gzn6m+I4DeU76BlQChqtKM+boLbNEZ30/CKw4KYJRR1NPtnBPohWQ8V3FEOC0RFU msp8Ih680o9hLDJKAidCqciyfBzCYEYT9hxsloAUnCl85TLGnBDOmEKW6i7yBELO ftT7Pm4wFUNRxbGmAc9COcnfVWGdsqnWPgo4n9mNbRBKpmGqLmfsMyR/nsbR55nh OvfDJMCXIUV3RdXYrIOOOgVuzIGLAGqvUDhQIYwxyrLzI5npNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRtmr7SxizskGQ1Pv+5EPVUzNbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2ZGQzZGEtYjdmYy0z MzJiLWE2NGItOTY3MGU4NzA3ZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7GLNn1+aQnyVv0cHOtj9OMX6Oxf9aJp+qz3GUZFBf1ha0NbKIcxCFa dmwdMA855G2vwKfzNvB2JqzGyhZiRTB52sGHcJFfObcmkVtJMd1XUj9KxmqZg/Kc lOkh7Yl3uRRWxd+fazGn8p1gK+vgDLqHg8lHqqvy7SXi+IzJiJe8/Sa8OV9ciNG0 gVAa1DvUXFXKc68AVjH+Bp30WtVn85CZnhva71TDIn6KdNfiWMmQ5JQ2R9hJ5tfN xBoaqkRV5l8J4XObB/QFQjuCis/DrVgJ4VVR+eMijUfvz+NzOypQB07c7BEcV2jL fnnmEK3TvTcD+cAik2oxigVbeSgjgg0= -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:00 2025 by rpki-client