$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa File: bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa (raw, json) Hash identifier: DnbWhUcyv1qaR/0MP/cZ7GM+v7nTC0ks+SEOBlQi1j4= Subject key identifier: 03:EB:5D:19:06:3E:CF:EA:89:0C:FF:50:2A:E2:EE:5C:71:9A:E1:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B5753B6B46D3FA81724E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.28.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:57:53:b6:b4:6d:3f:a8:17:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=adb7bbce-7c15-4ad7-93e5-61c4e9e43d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:2f:5f:d1:c1:70:f4:3e:20:3f:23:f0:9a: 22:c3:0b:ff:c6:7f:66:a0:5d:3c:06:2e:e9:e2:bb: 18:33:0f:e7:fb:bc:df:d2:96:1d:4c:81:73:e6:17: d7:52:96:ac:f6:18:d5:76:65:0b:03:04:af:93:8d: 8f:f3:4c:1e:c1:83:b5:1c:eb:61:12:43:50:c8:84: e0:62:31:5f:b1:53:59:af:b9:8e:d0:4e:da:94:0f: 61:9b:85:55:b8:cb:62:b0:6e:57:69:7f:a0:ad:51: aa:e7:03:9b:19:59:a0:14:bd:a3:40:4f:0f:25:6c: 0c:9d:52:dd:68:ab:e4:36:9b:cd:7e:7a:63:11:e5: ee:9a:47:41:c4:f5:25:e6:61:b9:da:63:f5:6c:31: c5:bc:ed:18:df:21:f6:18:ed:2c:56:6c:da:f8:17: 2c:a5:dd:ed:73:d7:a2:b0:fd:d0:4c:5f:09:d6:b8: e3:e3:2f:df:30:53:4f:ce:5d:99:84:f4:0b:98:57: 33:b1:f2:8d:20:f0:e5:44:9c:3d:ef:38:cc:c6:da: fe:2c:01:a6:47:74:2a:a7:2a:bb:dc:6a:0b:51:17: 7d:1e:3d:86:22:1d:9b:fc:67:63:f4:67:a4:6b:b5: 1f:ba:29:0a:7e:51:72:93:5b:be:ed:ea:35:2d:06: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EB:5D:19:06:3E:CF:EA:89:0C:FF:50:2A:E2:EE:5C:71:9A:E1:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:bd:44:53:89:e7:06:6c:94:cd:88:06:2b:00:c0:05:35:32: 6f:11:ef:1d:58:41:10:a7:5f:90:44:76:b1:62:d7:40:41:94: 7b:1f:c9:52:82:c1:5a:60:b5:0f:02:ab:b7:f5:da:50:00:60: 38:e4:1f:a2:17:6f:a1:13:b2:a6:71:49:79:75:6e:ac:ae:5b: 31:54:10:55:72:0b:47:51:28:88:8d:b2:f3:0b:e3:83:2a:bf: 31:6b:bf:42:bd:64:bf:6e:2d:58:59:b3:7f:d2:67:15:9e:25: f4:5e:57:04:68:2a:b6:c0:43:7d:2b:81:01:e7:9f:95:19:12: 53:4c:bd:39:e7:7d:26:73:cb:96:56:85:2d:4d:49:02:57:76: 1b:87:d3:71:28:66:80:72:7a:3a:ef:2d:2b:9f:b2:f7:4e:3a: 43:c4:a6:00:22:c8:89:91:a1:b5:f9:4e:38:4a:d1:d4:63:c8: 41:4e:b0:2f:ed:94:35:5a:ae:79:e1:11:c2:cc:13:75:86:f0: 99:68:d3:30:10:94:74:07:0f:66:4b:cb:48:ed:ee:ed:d7:a5: 72:7b:d5:41:45:ce:9c:36:7d:40:86:c7:8a:e6:85:d9:46:ab: 64:31:4a:72:de:b6:db:51:56:50:d4:c6:de:43:29:37:e9:b9: f6:a6:dc:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1dTtrRtP6gXJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YWRiN2JiY2UtN2MxNS00YWQ3LTkzZTUtNjFjNGU5ZTQzZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn8vX9HBcPQ+ID8j8Joiwwv/xn9moF08Bi7p 4rsYMw/n+7zf0pYdTIFz5hfXUpas9hjVdmULAwSvk42P80wewYO1HOthEkNQyITg YjFfsVNZr7mO0E7alA9hm4VVuMtisG5XaX+grVGq5wObGVmgFL2jQE8PJWwMnVLd aKvkNpvNfnpjEeXumkdBxPUl5mG52mP1bDHFvO0Y3yH2GO0sVmza+Bcspd3tc9ei sP3QTF8J1rjj4y/fMFNPzl2ZhPQLmFczsfKNIPDlRJw97zjMxtr+LAGmR3Qqpyq7 3GoLURd9Hj2GIh2b/Gdj9Geka7UfuikKflFyk1u+7eo1LQb3bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPrXRkGPs/qiQz/UCri7lxxmuHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQyZDlmNmItOGRiYy0z NzcxLTg5MDctOTliNWU3YmYxYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIi9RFOJ5wZslM2IBisAwAU1Mm8R7x1YQRCnX5BEdrFi10BBlHsfyVKC wVpgtQ8Cq7f12lAAYDjkH6IXb6ETsqZxSXl1bqyuWzFUEFVyC0dRKIiNsvML44Mq vzFrv0K9ZL9uLVhZs3/SZxWeJfReVwRoKrbAQ30rgQHnn5UZElNMvTnnfSZzy5ZW hS1NSQJXdhuH03EoZoByejrvLSufsvdOOkPEpgAiyImRobX5TjhK0dRjyEFOsC/t lDVarnnhEcLME3WG8Jlo0zAQlHQHD2ZLy0jt7u3XpXJ71UFFzpw2fUCGx4rmhdlG q2QxSnLetttRVlDUxt5DKTfpufam3Nc= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:53 2025 by rpki-client