$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa File: 8fe10703-6f23-359f-98b0-f95f4892cde6.roa (raw, json) Hash identifier: a68FO2pkhxc4Qvlh5PQtVvKq8fWNBb9uIU7enxE7bK4= Subject key identifier: 7B:55:0E:05:72:99:17:B4:98:3D:2E:E3:9D:31:1A:37:4E:38:58:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DC2EC158BA5642837100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.28.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:dc:2e:c1:58:ba:56:42:83:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=c9a7b685-4f39-44dc-9068-da0c86e1790c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0e:f2:3b:8e:2b:41:79:ca:19:f8:27:3b:64: fb:6e:14:3a:e6:1c:5b:23:eb:83:e7:45:c3:65:47: 02:0f:4a:9d:f3:ff:81:2f:21:50:0e:3c:6f:0c:f3: 03:71:61:57:f9:3f:56:59:a8:55:43:bf:5e:3f:2c: 97:b1:d9:02:b5:cf:06:5e:61:44:9d:f6:d5:2a:ab: 8d:66:d5:ac:47:7a:0e:c7:ab:8c:ea:e7:8a:89:62: e3:ae:02:55:3c:e7:2b:06:24:3b:d3:d0:32:8d:67: 51:41:5a:68:71:b2:9f:16:c0:2f:7f:94:12:d5:3a: 1b:82:bb:12:b2:34:39:18:19:6d:1b:cf:b4:ec:74: d9:23:ce:4f:58:38:55:62:69:85:73:94:16:6a:08: dc:05:3e:35:79:9c:86:56:b4:b0:36:0f:82:14:b1: bb:c7:06:b4:fa:b8:cf:4d:45:f1:d1:49:3f:f6:6b: 11:76:d9:b8:94:e4:e7:b3:52:00:c0:33:99:ab:57: dd:28:a8:da:bf:3d:b6:fe:21:8c:79:f7:ab:2a:09: 6a:a1:d6:65:17:e0:3f:da:6f:c3:cd:0a:1c:54:1a: 1c:4a:f7:17:30:7f:c8:d6:b7:ef:48:8b:12:c5:06: b3:13:5f:9d:33:83:7b:cb:18:21:c5:a0:75:e0:74: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:55:0E:05:72:99:17:B4:98:3D:2E:E3:9D:31:1A:37:4E:38:58:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fb:1b:c0:70:fc:00:56:01:b5:91:b0:e8:39:7a:f0:11:87: 95:3a:d2:ec:92:77:44:a0:04:8c:79:33:2c:81:13:59:60:4b: 12:8d:51:71:bc:84:7b:4c:fd:34:3b:27:c1:61:a4:58:e1:c8: d8:3d:e0:09:34:bb:62:57:e8:6b:fd:ac:02:86:86:46:a4:ad: c2:01:88:d8:35:d7:8f:ee:48:ae:11:e2:60:0c:6a:55:3b:8c: 2f:67:db:cb:57:14:86:5e:f0:ae:4e:db:b8:70:f8:0b:32:ee: 48:5e:f7:4f:90:d9:ae:0e:a9:95:66:73:e7:50:d5:95:36:09: b3:03:b6:49:52:34:b1:77:b0:7f:4f:96:72:09:c2:f6:b9:c3: db:e9:e4:a9:bc:76:43:95:50:aa:c9:0a:82:26:6d:0b:41:1d: c6:23:b1:cb:2b:89:a1:36:58:a9:da:12:a0:38:2c:e3:3c:99: 8c:78:b8:62:d8:3a:15:cb:c6:1f:30:f5:16:87:c0:67:0c:c6: b9:a0:83:d4:bd:4b:23:9e:0a:31:e3:69:77:9e:b4:23:d8:d9: b0:e2:7d:2b:e8:1e:85:13:f2:e2:56:97:45:c9:a8:88:c7:94: 8f:d0:d3:99:c6:d8:cb:bf:ad:b6:b0:25:8c:97:f2:8f:26:d6: df:55:da:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNwuwVi6VkKDcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YzlhN2I2ODUtNGYzOS00NGRjLTkwNjgtZGEwYzg2ZTE3OTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg7yO44rQXnKGfgnO2T7bhQ65hxbI+uD50XD ZUcCD0qd8/+BLyFQDjxvDPMDcWFX+T9WWahVQ79ePyyXsdkCtc8GXmFEnfbVKquN ZtWsR3oOx6uM6ueKiWLjrgJVPOcrBiQ709AyjWdRQVpocbKfFsAvf5QS1TobgrsS sjQ5GBltG8+07HTZI85PWDhVYmmFc5QWagjcBT41eZyGVrSwNg+CFLG7xwa0+rjP TUXx0Uk/9msRdtm4lOTns1IAwDOZq1fdKKjavz22/iGMeferKglqodZlF+A/2m/D zQocVBocSvcXMH/I1rfvSIsSxQazE1+dM4N7yxghxaB14HSGfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtVDgVymRe0mD0u450xGjdOOFjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZlMTA3MDMtNmYyMy0z NTlmLTk4YjAtZjk1ZjQ4OTJjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL7G8Bw/ABWAbWRsOg5evARh5U60uySd0SgBIx5MyyBE1lgSxKNUXG8 hHtM/TQ7J8FhpFjhyNg94Ak0u2JX6Gv9rAKGhkakrcIBiNg114/uSK4R4mAMalU7 jC9n28tXFIZe8K5O27hw+Asy7khe90+Q2a4OqZVmc+dQ1ZU2CbMDtklSNLF3sH9P lnIJwva5w9vp5Km8dkOVUKrJCoImbQtBHcYjscsriaE2WKnaEqA4LOM8mYx4uGLY OhXLxh8w9RaHwGcMxrmgg9S9SyOeCjHjaXeetCPY2bDifSvoHoUT8uJWl0XJqIjH lI/Q05nG2Mu/rbawJYyX8o8m1t9V2p4= -----END CERTIFICATE-----Generated at Wed Aug 6 05:14:21 2025 by rpki-client