$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa File: 9df77081-57fb-39ce-9dd0-1a902633477f.roa (raw, json) Hash identifier: c7s+idih1hIBTP3n2syh098Tu03vVUQDPKOVJt+HJdE= Subject key identifier: 71:27:F5:EF:E8:48:8E:CC:7B:C7:05:22:89:0C:E4:AE:DF:F9:B1:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AA3304DF08EC73153BE180C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa Signing time: Fri 25 Jul 2025 16:34:51 +0000 ROA not before: Fri 25 Jul 2025 16:34:51 +0000 ROA not after: Thu 23 Oct 2025 16:34:51 +0000 asID: 7029 IP address blocks: 71.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a3:30:4d:f0:8e:c7:31:53:be:18:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 25 16:34:51 2025 GMT Not After : Oct 23 16:34:51 2025 GMT Subject: CN=cfd2ab78-4499-4fc2-9e19-a50376276f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f7:01:69:4d:df:ad:b6:a1:7e:d1:bd:76:b6: 62:78:d5:5a:3a:ba:fb:01:8c:48:14:ab:10:1a:33: 87:be:15:a9:86:bd:ac:56:6e:cc:66:3e:6e:64:ba: 8d:c6:e4:03:10:c2:8e:f6:a6:5b:1d:5f:2c:9b:59: c1:00:12:ea:91:eb:b3:11:2e:a6:af:5e:29:cd:ed: 1b:13:07:12:c6:9c:9d:01:d4:63:99:ca:94:30:5d: 7c:ca:d4:85:e6:63:69:da:2f:41:5e:1e:88:ff:9e: 62:1b:63:08:8d:15:12:73:76:ae:f3:7f:02:b3:e6: 44:fd:c6:86:96:3d:1c:9d:2e:2e:53:ea:b1:07:91: 05:40:f5:b9:b5:1f:eb:e5:1a:2c:a8:f4:fa:9c:d5: 8c:6b:5e:5c:2a:1a:15:00:47:34:db:25:af:06:25: 50:1e:72:e9:65:65:55:d6:92:8b:75:21:e6:59:8f: 6d:6f:45:a2:ef:e8:55:7a:2f:e7:eb:8a:da:0f:15: f4:e1:0e:14:b6:a7:1d:d1:6a:77:25:9a:c4:c9:e3: d8:97:e8:32:99:41:0c:bd:f3:2c:13:aa:f0:a3:87: 61:a1:d1:1d:f0:68:45:b7:fb:f3:aa:d1:7d:77:75: 0d:21:01:9f:a4:a2:67:b8:8b:c8:77:39:89:1b:a7: 5f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:F5:EF:E8:48:8E:CC:7B:C7:05:22:89:0C:E4:AE:DF:F9:B1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:92:57:bf:07:85:46:25:9b:b6:e2:e6:62:14:65:b3:61:d0: cf:04:98:6f:ea:35:4d:1b:4c:6b:32:53:f8:59:fb:b8:83:05: 41:7e:41:c0:1d:53:fc:15:ed:fe:8f:52:8b:ab:60:a6:0f:64: 23:0f:dd:61:a7:87:3a:b1:aa:b1:36:7b:50:7c:65:8b:27:a4: 9c:54:31:06:31:5b:e1:cd:d5:2f:10:a7:1d:fb:ed:09:6e:05: 58:ea:13:36:18:8f:79:70:5e:d1:e4:b8:e2:4e:8e:d8:2a:c3: 29:0a:23:32:39:89:b7:87:2d:25:99:f7:0c:75:22:d0:c4:a1: b0:bf:bf:a9:a5:5e:68:20:29:93:c2:68:ba:4e:58:5a:24:e6: 43:94:09:4e:52:48:fd:df:98:12:1b:81:45:89:d9:ba:11:d8: eb:d1:16:11:24:fd:6f:c1:4c:f4:d7:57:0f:9b:9a:d0:71:41: d4:81:51:10:46:7d:49:da:e7:b2:f0:09:af:48:fc:49:6a:f9: 0e:d1:1b:49:20:b9:a9:ff:f7:53:95:f8:2b:d9:5b:ca:bc:10: e1:a2:69:91:2f:68:31:2c:ff:68:39:ad:fc:ec:6c:6f:5b:58: 33:27:3a:7b:f4:cb:de:e3:0f:fb:43:30:5f:52:42:a9:f1:ce: 27:82:42:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqjME3wjscxU74YDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNTE2MzQ1MVoXDTI1MTAyMzE2MzQ1MVowLzEtMCsGA1UEAxMk Y2ZkMmFiNzgtNDQ5OS00ZmMyLTllMTktYTUwMzc2Mjc2ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivcBaU3frbahftG9drZieNVaOrr7AYxIFKsQ GjOHvhWphr2sVm7MZj5uZLqNxuQDEMKO9qZbHV8sm1nBABLqkeuzES6mr14pze0b EwcSxpydAdRjmcqUMF18ytSF5mNp2i9BXh6I/55iG2MIjRUSc3au838Cs+ZE/caG lj0cnS4uU+qxB5EFQPW5tR/r5RosqPT6nNWMa15cKhoVAEc02yWvBiVQHnLpZWVV 1pKLdSHmWY9tb0Wi7+hVei/n64raDxX04Q4Utqcd0Wp3JZrEyePYl+gymUEMvfMs E6rwo4dhodEd8GhFt/vzqtF9d3UNIQGfpKJnuIvIdzmJG6dfjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEn9e/oSI7Me8cFIokM5K7f+bFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRmNzcwODEtNTdmYi0z OWNlLTlkZDAtMWE5MDI2MzM0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeSV78HhUYlm7bi5mIUZbNh0M8EmG/qNU0bTGsyU/hZ+7iDBUF+QcAd U/wV7f6PUourYKYPZCMP3WGnhzqxqrE2e1B8ZYsnpJxUMQYxW+HN1S8Qpx377Qlu BVjqEzYYj3lwXtHkuOJOjtgqwykKIzI5ibeHLSWZ9wx1ItDEobC/v6mlXmggKZPC aLpOWFok5kOUCU5SSP3fmBIbgUWJ2boR2OvRFhEk/W/BTPTXVw+bmtBxQdSBURBG fUna57LwCa9I/Elq+Q7RG0kguan/91OV+CvZW8q8EOGiaZEvaDEs/2g5rfzsbG9b WDMnOnv0y97jD/tDMF9SQqnxzieCQmY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:27:20 2025 by rpki-client