$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa File: c77f3968-1e5e-334f-96fa-e76652c76e3c.roa (raw, json) Hash identifier: joGOXGt/xTeEeVP2DyDttfrY+ynqqw1qz62InrvFK3o= Subject key identifier: B3:01:10:20:25:66:60:27:51:29:93:3B:57:B1:63:5E:ED:D2:8B:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A2C200E029AFE98A9A70E9E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa Signing time: Fri 13 Jun 2025 01:00:51 +0000 ROA not before: Fri 13 Jun 2025 01:00:51 +0000 ROA not after: Thu 11 Sep 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.28.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:20:0e:02:9a:fe:98:a9:a7:0e:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 13 01:00:51 2025 GMT Not After : Sep 11 01:00:51 2025 GMT Subject: CN=01667090-2239-4064-96ae-65d35b8688f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:59:5e:d3:a0:9c:07:f5:5a:97:8f:3a:95: 08:bc:af:71:1a:25:54:9e:d6:6e:db:81:7c:4e:7e: cc:31:9d:ff:6d:85:a0:7c:43:de:70:b5:42:77:82: 99:ff:cc:24:8d:ae:ff:7d:8a:40:07:c1:f3:69:0a: 58:5f:65:4a:c9:24:00:42:8e:22:8d:b4:01:22:4a: f5:a8:55:5d:a1:d2:b3:ec:ef:5c:33:b9:1b:24:4c: 20:ef:e6:5d:f0:b0:ff:76:03:a5:3d:53:45:fd:1f: d8:d5:92:51:02:4f:f0:92:bd:27:62:72:53:56:e1: 43:25:dc:c8:db:b4:cc:3d:82:e3:9f:c9:4a:d2:d9: 81:2c:c1:fb:be:e5:be:33:3b:6a:e6:02:53:da:1d: c1:d0:4a:6a:96:a2:4f:32:ad:50:e2:fe:df:c3:7e: 7f:05:51:83:8b:de:af:83:3c:22:94:4f:7a:6e:4f: c3:95:19:f6:7c:b4:a5:ec:5a:8d:d6:97:bc:e6:5e: cb:e8:b8:ae:16:e2:e9:ab:cb:a0:64:bf:4a:c8:11: 35:9b:f9:b3:c5:10:05:f0:e1:48:c5:5c:76:9b:07: 1f:dc:89:45:e1:6c:14:4b:c6:ff:5e:82:64:d0:92: 59:1a:69:9d:f2:4e:53:35:80:42:f1:d8:81:cd:d0: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:01:10:20:25:66:60:27:51:29:93:3B:57:B1:63:5E:ED:D2:8B:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c77f3968-1e5e-334f-96fa-e76652c76e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2d:7e:6e:8d:57:cd:81:2c:85:ec:18:95:bc:bc:0c:d7:6e: 27:6f:73:a1:00:e3:18:8b:1d:a6:68:15:03:85:7d:5e:85:a7: 2d:24:a7:e3:26:62:90:a1:13:3d:01:13:e8:db:46:f0:50:b7: ec:90:e0:c8:e8:a0:08:e0:56:02:41:bd:43:0f:af:53:9c:e4: f7:dc:3e:07:6b:60:00:f6:84:c6:d0:6b:eb:8a:4b:b7:c9:f2: f0:08:ac:df:91:69:eb:f6:e2:9a:d3:84:2a:8e:0f:29:b7:3d: df:92:ec:e4:98:ca:de:4d:12:93:95:d2:3c:d5:a4:57:f7:9c: 93:7c:96:e6:eb:63:d8:ee:b7:e4:43:44:35:20:a8:56:12:2e: f9:60:49:c7:23:d9:4a:f1:73:60:e6:ac:3e:4a:89:dc:4d:2a: e5:88:73:b0:b6:37:b6:92:1c:43:22:da:9a:5c:b1:73:ed:ce: 64:7a:69:41:91:e8:91:ca:11:cc:47:80:89:06:48:a3:bd:96: 11:f0:9b:3b:9d:9d:36:1f:3e:2e:0e:3c:6b:65:7e:52:a9:c9: 91:2e:69:8c:19:df:f8:ee:70:1b:47:eb:ac:97:f3:a5:9e:4e: 55:f6:a6:05:8d:5a:a6:4d:58:f4:4d:59:bc:0b:53:54:b4:a5: 56:e9:fb:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIA4Cmv6YqacOnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk MDE2NjcwOTAtMjIzOS00MDY0LTk2YWUtNjVkMzViODY4OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJZXtOgnAf1WpePOpUIvK9xGiVUntZu24F8 Tn7MMZ3/bYWgfEPecLVCd4KZ/8wkja7/fYpAB8HzaQpYX2VKySQAQo4ijbQBIkr1 qFVdodKz7O9cM7kbJEwg7+Zd8LD/dgOlPVNF/R/Y1ZJRAk/wkr0nYnJTVuFDJdzI 27TMPYLjn8lK0tmBLMH7vuW+Mztq5gJT2h3B0EpqlqJPMq1Q4v7fw35/BVGDi96v gzwilE96bk/DlRn2fLSl7FqN1pe85l7L6LiuFuLpq8ugZL9KyBE1m/mzxRAF8OFI xVx2mwcf3IlF4WwUS8b/XoJk0JJZGmmd8k5TNYBC8diBzdCbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMBECAlZmAnUSmTO1exY17t0otgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc3ZjM5NjgtMWU1ZS0z MzRmLTk2ZmEtZTc2NjUyYzc2ZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEtfm6NV82BLIXsGJW8vAzXbidvc6EA4xiLHaZoFQOFfV6Fpy0kp+Mm YpChEz0BE+jbRvBQt+yQ4MjooAjgVgJBvUMPr1Oc5PfcPgdrYAD2hMbQa+uKS7fJ 8vAIrN+Raev24prThCqODym3Pd+S7OSYyt5NEpOV0jzVpFf3nJN8lubrY9jut+RD RDUgqFYSLvlgSccj2Urxc2DmrD5KidxNKuWIc7C2N7aSHEMi2ppcsXPtzmR6aUGR 6JHKEcxHgIkGSKO9lhHwmzudnTYfPi4OPGtlflKpyZEuaYwZ3/jucBtH66yX86We TlX2pgWNWqZNWPRNWbwLU1S0pVbp+80= -----END CERTIFICATE-----Generated at Sun Jun 15 11:26:43 2025 by rpki-client