$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa File: a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa (raw, json) Hash identifier: 3kmzMsuzFWxMKXqfNE3VeGyj9feNae5f+RXR6FmQSTk= Subject key identifier: 90:11:DA:11:F7:DE:E5:67:30:CB:8D:31:0C:B9:56:E5:8C:87:1A:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB38626A79B9E36C17DD43A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 71.28.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:26:a7:9b:9e:36:c1:7d:d4:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=11f02a7e-11c7-41be-9c70-7201331e5e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:4e:aa:68:96:7d:27:67:8e:40:96:c7:ca: 43:ac:d2:d9:18:e5:f7:0d:0a:79:b0:19:75:f6:dc: fc:b9:3d:49:dd:b7:d1:59:7c:0c:a6:70:e5:b2:fe: 49:b8:16:d1:af:20:d4:61:90:e1:e6:b3:86:51:65: 59:c7:3a:a1:a5:b0:74:19:a8:34:6e:d8:54:7b:03: ca:c6:0a:3a:5e:2c:a6:92:45:a2:d7:43:d7:ed:c9: e6:8a:38:8e:c2:a8:70:72:e1:6c:c4:06:f6:55:ad: b8:e3:f3:35:40:08:9a:84:a4:53:7e:98:45:81:e4: 22:b7:19:89:cb:0e:0f:55:d5:65:3a:2f:3c:39:da: 38:43:7c:c5:3d:b4:91:cf:b4:62:ca:9c:39:01:e7: 52:66:36:f6:f9:a1:9c:52:b4:d0:1d:20:d1:16:ba: 2a:81:8b:1d:64:60:7b:fb:29:3f:eb:d1:95:45:cb: 3a:1c:0a:68:62:70:bd:cb:ac:3d:6a:3b:1d:ac:4a: d9:a1:2d:7e:9c:e9:26:93:b4:67:bd:c8:b2:20:eb: 6d:d4:6d:34:f9:61:ff:1c:2b:31:8f:42:d0:6d:a1: 0d:2f:e3:4c:85:63:46:76:8d:4a:38:d1:53:8b:f0: 0b:52:33:14:70:f1:38:e4:70:81:3b:87:70:b5:72: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:DA:11:F7:DE:E5:67:30:CB:8D:31:0C:B9:56:E5:8C:87:1A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3334c8f-3a03-37dd-af86-ce48ec5bf8a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:93:61:2e:d2:8f:96:4f:55:62:46:9d:38:0f:f2:4b:e8:35: c6:e1:88:91:76:23:78:d9:a8:8c:b7:1b:38:0e:d5:d6:8e:2d: f0:fd:d2:75:3c:ab:64:5d:8a:70:02:1d:ab:8a:b4:95:d3:92: 76:d9:e7:68:a9:cd:0b:08:80:9a:38:f2:22:5b:2a:cc:43:3f: a9:42:83:ec:58:65:59:65:2a:ad:bd:74:ab:43:a1:9b:f8:ee: f4:d7:86:78:b7:dd:02:97:b5:1f:5e:9d:86:91:12:29:a0:3f: 22:f9:41:46:d7:b7:49:c9:3b:69:44:b7:6f:1f:b9:eb:72:e2: 86:fc:c6:e6:6f:60:ad:d2:c8:94:80:1c:98:7d:68:32:e7:fa: 28:75:14:59:eb:66:eb:e7:b2:66:d3:d2:2f:ea:73:2e:90:50: b7:96:5a:88:28:e8:91:9e:20:b7:f5:7e:3f:8c:45:34:ce:eb: 33:2f:e8:43:a9:7d:d6:38:d4:c3:d8:b4:44:ed:55:9d:9b:90: b4:23:1f:d7:d2:6e:af:d0:3f:b9:1d:80:15:ee:9c:bc:70:27: d2:f8:e8:57:37:44:af:cc:94:cf:8b:ce:ab:64:d1:67:d6:8b: 42:ce:7d:e0:7e:5c:f1:c9:7c:ec:f3:d2:25:40:b3:e4:14:c0: 5c:c1:2b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhianm542wX3UOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MTFmMDJhN2UtMTFjNy00MWJlLTljNzAtNzIwMTMzMWU1ZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/NOqmiWfSdnjkCWx8pDrNLZGOX3DQp5sBl1 9tz8uT1J3bfRWXwMpnDlsv5JuBbRryDUYZDh5rOGUWVZxzqhpbB0Gag0bthUewPK xgo6XiymkkWi10PX7cnmijiOwqhwcuFsxAb2Va244/M1QAiahKRTfphFgeQitxmJ yw4PVdVlOi88Odo4Q3zFPbSRz7Riypw5AedSZjb2+aGcUrTQHSDRFroqgYsdZGB7 +yk/69GVRcs6HApoYnC9y6w9ajsdrErZoS1+nOkmk7RnvciyIOtt1G00+WH/HCsx j0LQbaENL+NMhWNGdo1KONFTi/ALUjMUcPE45HCBO4dwtXJVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAR2hH33uVnMMuNMQy5VuWMhxpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTMzMzRjOGYtM2EwMy0z N2RkLWFmODYtY2U0OGVjNWJmOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqTYS7Sj5ZPVWJGnTgP8kvoNcbhiJF2I3jZqIy3GzgO1daOLfD90nU8 q2RdinACHauKtJXTknbZ52ipzQsIgJo48iJbKsxDP6lCg+xYZVllKq29dKtDoZv4 7vTXhni33QKXtR9enYaREimgPyL5QUbXt0nJO2lEt28fuety4ob8xuZvYK3SyJSA HJh9aDLn+ih1FFnrZuvnsmbT0i/qcy6QULeWWogo6JGeILf1fj+MRTTO6zMv6EOp fdY41MPYtETtVZ2bkLQjH9fSbq/QP7kdgBXunLxwJ9L46Fc3RK/MlM+Lzqtk0WfW i0LOfeB+XPHJfOzz0iVAs+QUwFzBK4c= -----END CERTIFICATE-----Generated at Tue Aug 5 17:23:39 2025 by rpki-client