$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa File: ba82d23e-e34a-3aad-972f-27e59e917e29.roa (raw, json) Hash identifier: gTV54DkcuvMq5NJiaqlrGDP7/fpFyxMuUjF4yLkTITw= Subject key identifier: 2F:42:8F:3D:02:A9:3D:75:D1:07:70:05:AF:6A:00:4C:2B:B2:F1:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB6261530D96768BFB52FAB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa Signing time: Fri 01 Aug 2025 11:34:37 +0000 ROA not before: Fri 01 Aug 2025 11:34:37 +0000 ROA not after: Thu 30 Oct 2025 11:34:37 +0000 asID: 7029 IP address blocks: 71.29.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:26:15:30:d9:67:68:bf:b5:2f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 1 11:34:37 2025 GMT Not After : Oct 30 11:34:37 2025 GMT Subject: CN=4c2af590-9265-443d-a2da-6d8abecb283d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0c:96:b3:8c:69:6d:8f:86:1a:19:91:4a:7a: ac:ed:de:eb:1d:83:98:a5:59:a9:88:ad:42:a8:9c: 29:cc:c5:50:27:c0:80:7f:8b:9f:98:81:72:aa:2f: 1c:39:70:82:ee:51:d7:9a:3b:8d:16:28:8e:a1:7a: 99:9c:5f:04:c2:22:6b:98:3b:59:e9:06:e8:e0:38: 90:e4:30:50:dc:0d:cc:f5:9f:4a:03:63:5d:9c:80: 71:eb:bf:4e:7e:fc:79:e9:5e:5f:de:11:74:76:fb: e4:f4:d5:d6:88:69:e2:52:cc:26:65:17:c8:1c:e1: 54:ac:9e:93:7f:ef:62:22:0a:fa:3f:5f:7c:a6:2d: d9:89:f9:b1:43:fe:e4:e8:f9:c8:9d:6d:b0:19:3c: 5e:63:26:0f:06:73:0a:24:27:91:c7:d7:7c:e9:77: b6:00:6d:fc:1c:7d:79:d3:f9:f5:f8:13:64:64:94: 8e:11:9e:8b:d9:df:bc:43:43:5a:a8:be:fc:65:67: 72:38:80:f9:2f:b4:ef:de:b8:66:0e:3a:42:49:8e: 6e:f8:0d:91:2b:66:c2:c6:dc:cf:bd:8f:65:1f:65: 02:38:0e:c8:8f:9d:ac:7f:71:14:2b:5f:97:cd:1f: e4:5b:c5:bc:e8:de:b1:16:74:1a:b1:e1:b8:4e:c0: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:42:8F:3D:02:A9:3D:75:D1:07:70:05:AF:6A:00:4C:2B:B2:F1:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba82d23e-e34a-3aad-972f-27e59e917e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:ee:b4:ae:a8:2f:8a:84:70:5f:ed:97:12:07:53:ec:e6: c2:d2:7f:0a:24:bc:5e:98:44:73:69:33:ee:1b:b7:f0:97:b2: cd:35:93:b4:c7:fe:58:a5:23:e4:7b:94:76:7b:52:47:ce:8b: a2:1e:a5:e2:4d:3c:f6:55:26:7e:de:44:c0:a0:f6:70:c4:de: e2:c9:a1:fc:49:aa:87:9a:20:9e:61:15:44:f5:4d:17:8e:2a: 41:2a:e9:40:c9:8c:bb:a4:90:b0:3e:df:4d:52:04:94:a8:39: 11:6b:8d:e1:36:6f:67:ef:a9:c9:b1:1f:1c:75:5c:e7:69:47: db:3e:d9:1d:16:cf:c3:e0:2c:95:e1:62:fe:2b:0f:3f:02:20: 1b:13:9b:86:58:22:19:fc:48:c1:6f:48:8a:d4:1b:96:95:21: e1:59:7d:fb:b2:d6:a3:52:0b:3c:7a:8e:39:55:23:34:87:57: ec:3e:69:2f:ba:9d:bc:ef:9a:fd:00:67:7c:3d:f3:e1:85:7e: ea:a5:4b:e5:7e:47:bf:0e:d0:8d:03:69:fb:9b:7b:06:2b:45: 6e:c0:1a:87:c9:01:7b:e9:03:96:82:63:39:08:98:c2:3d:69: 5d:b6:ff:62:ae:ae:50:2b:a1:b1:64:5a:96:bf:27:45:c0:48: 42:05:e8:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2JhUw2Wdov7Uvq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgwMTExMzQzN1oXDTI1MTAzMDExMzQzN1owLzEtMCsGA1UEAxMk NGMyYWY1OTAtOTI2NS00NDNkLWEyZGEtNmQ4YWJlY2IyODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwyWs4xpbY+GGhmRSnqs7d7rHYOYpVmpiK1C qJwpzMVQJ8CAf4ufmIFyqi8cOXCC7lHXmjuNFiiOoXqZnF8EwiJrmDtZ6Qbo4DiQ 5DBQ3A3M9Z9KA2NdnIBx679Ofvx56V5f3hF0dvvk9NXWiGniUswmZRfIHOFUrJ6T f+9iIgr6P198pi3ZifmxQ/7k6PnInW2wGTxeYyYPBnMKJCeRx9d86Xe2AG38HH15 0/n1+BNkZJSOEZ6L2d+8Q0NaqL78ZWdyOID5L7Tv3rhmDjpCSY5u+A2RK2bCxtzP vY9lH2UCOA7Ij52sf3EUK1+XzR/kW8W86N6xFnQaseG4TsA7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9Cjz0CqT110QdwBa9qAEwrsvHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE4MmQyM2UtZTM0YS0z YWFkLTk3MmYtMjdlNTllOTE3ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbX7rSuqC+KhHBf7ZcSB1Ps5sLSfwokvF6YRHNpM+4bt/CXss01k7TH /lilI+R7lHZ7UkfOi6IepeJNPPZVJn7eRMCg9nDE3uLJofxJqoeaIJ5hFUT1TReO KkEq6UDJjLukkLA+301SBJSoORFrjeE2b2fvqcmxHxx1XOdpR9s+2R0Wz8PgLJXh Yv4rDz8CIBsTm4ZYIhn8SMFvSIrUG5aVIeFZffuy1qNSCzx6jjlVIzSHV+w+aS+6 nbzvmv0AZ3w98+GFfuqlS+V+R78O0I0DafubewYrRW7AGofJAXvpA5aCYzkImMI9 aV22/2KurlArobFkWpa/J0XASEIF6C4= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:48 2025 by rpki-client