$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa File: d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa (raw, json) Hash identifier: TVPgK/ZzkwGA3RWjIZkKQADCPbB8tjZtC8QyF9GEki0= Subject key identifier: 76:31:EB:5F:89:38:37:5C:CD:40:5F:4D:DB:44:F1:5A:98:8B:C0:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CA4ABA4DB2CE013E0240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ca:4a:ba:4d:b2:ce:01:3e:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=17aeef62-4f3f-400c-842f-d887f1c11242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:b2:1d:67:a0:c8:64:f4:c9:79:99:2a:80: 5e:f8:e7:12:b6:6a:67:3f:25:09:dd:c9:dd:10:98: 71:73:0c:4f:0e:d5:a8:12:40:8b:cd:33:cb:20:69: 70:71:0c:7f:ee:92:f4:b8:a9:64:61:48:23:df:d5: 04:83:3f:0c:a8:de:61:e2:0b:f0:b6:f4:f3:04:bc: 3d:0f:41:d7:53:07:60:51:aa:d3:7c:de:19:d2:32: 88:0b:da:91:ad:f3:43:dd:79:2f:73:51:d0:62:da: 10:85:86:cf:a3:4b:30:51:91:ca:86:80:c0:03:94: 92:51:c0:71:fc:c8:4a:6e:6c:a0:52:0a:2d:f1:c3: 74:5f:b5:76:62:cc:2b:a1:9f:b1:0f:5b:2b:9f:e7: 15:92:42:45:44:2d:2b:49:60:fe:58:a7:3a:da:9b: f8:97:f7:a2:b4:7d:5f:97:1b:a3:46:f6:40:f0:2a: ff:03:8e:76:a9:c8:d2:33:a3:13:0b:08:ab:95:ae: 1a:7c:9a:39:f4:ed:fb:75:eb:35:ff:d2:be:09:f3: 49:87:73:59:c1:25:71:e4:42:44:03:64:5e:04:b3: ea:00:47:17:f0:2f:72:6d:58:dc:1e:06:78:fd:f7: ed:ae:8e:1a:f8:09:cc:83:62:d9:61:b9:c8:ba:14: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:EB:5F:89:38:37:5C:CD:40:5F:4D:DB:44:F1:5A:98:8B:C0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3b:0d:e2:03:d9:fe:bd:70:fc:95:03:e7:0c:b9:d9:b3:73: d6:26:4f:8e:6e:92:d3:1b:08:7f:bf:03:c6:94:49:78:24:bb: f9:35:eb:a3:4d:4c:7c:66:71:60:4f:f0:81:b9:53:ac:92:f1: 34:2a:4c:03:80:5f:62:67:15:e8:a4:8b:f3:02:44:47:53:24: c0:3e:87:04:c2:aa:6c:ff:13:bf:ae:e3:a9:b6:81:7a:e8:cd: a6:db:bc:51:1d:51:e0:74:e7:a3:c6:09:01:bb:9d:94:8d:9a: 98:76:2b:f1:55:6b:58:79:65:4a:d7:e0:49:ea:cd:b9:e7:e8: 12:3a:6d:51:6e:9a:ae:d1:da:30:7c:c6:c6:b6:71:aa:d3:a3: e0:84:02:6a:24:e5:d6:c3:fe:7c:7b:38:4f:53:4c:2b:ca:f0: 9d:d7:b4:10:51:31:77:0e:22:1f:81:53:cc:0a:e9:74:9a:12: 19:2b:8f:28:92:1e:81:4e:b2:8c:17:da:41:06:ee:f4:15:21: e4:84:32:77:fd:4f:9a:ea:5a:73:5b:8d:87:ac:6e:fd:e6:40: 89:45:2b:3c:9c:7c:c2:d3:25:28:4b:18:78:c1:77:df:db:ff: 94:77:c5:89:11:fd:2e:43:21:02:88:ed:c9:e4:1a:b7:48:bc: 4c:cb:b6:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMpKuk2yzgE+AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MTdhZWVmNjItNGYzZi00MDBjLTg0MmYtZDg4N2YxYzExMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSayHWegyGT0yXmZKoBe+OcStmpnPyUJ3cnd EJhxcwxPDtWoEkCLzTPLIGlwcQx/7pL0uKlkYUgj39UEgz8MqN5h4gvwtvTzBLw9 D0HXUwdgUarTfN4Z0jKIC9qRrfND3Xkvc1HQYtoQhYbPo0swUZHKhoDAA5SSUcBx /MhKbmygUgot8cN0X7V2YswroZ+xD1srn+cVkkJFRC0rSWD+WKc62pv4l/eitH1f lxujRvZA8Cr/A452qcjSM6MTCwirla4afJo59O37des1/9K+CfNJh3NZwSVx5EJE A2ReBLPqAEcX8C9ybVjcHgZ4/fftro4a+AnMg2LZYbnIuhRubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYx61+JODdczUBfTdtE8VqYi8CpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkY2M1YTQtNmExNS0z MjhmLWEzMjMtOTlhMWQxMjA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ7DeID2f69cPyVA+cMudmzc9YmT45uktMbCH+/A8aUSXgku/k166NN THxmcWBP8IG5U6yS8TQqTAOAX2JnFeiki/MCREdTJMA+hwTCqmz/E7+u46m2gXro zabbvFEdUeB056PGCQG7nZSNmph2K/FVa1h5ZUrX4Enqzbnn6BI6bVFumq7R2jB8 xsa2carTo+CEAmok5dbD/nx7OE9TTCvK8J3XtBBRMXcOIh+BU8wK6XSaEhkrjyiS HoFOsowX2kEG7vQVIeSEMnf9T5rqWnNbjYesbv3mQIlFKzycfMLTJShLGHjBd9/b /5R3xYkR/S5DIQKI7cnkGrdIvEzLtvs= -----END CERTIFICATE-----Generated at Wed Aug 6 05:57:11 2025 by rpki-client