$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa File: b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa (raw, json) Hash identifier: xRfrS1fxu0k0WiQnjlMQBYmhH9nGRrjzsStv0mIMJqQ= Subject key identifier: 8C:9B:EE:F0:40:70:68:88:B6:CD:08:4F:AB:0F:AB:B6:52:64:01:15 Certificate issuer: /CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272 Certificate serial: 010D0C9F4328584AB9CB7D7C6C4E2EB0E97273C0 Authority key identifier: 2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa Signing time: Sat 02 Aug 2025 18:55:19 +0000 ROA not before: Sat 02 Aug 2025 18:55:19 +0000 ROA not after: Fri 31 Oct 2025 18:55:19 +0000 asID: 7925 IP address blocks: 129.71.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:cb:7d:7c:6c:4e:2e:b0:e9:72:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272 Validity Not Before: Aug 2 18:55:19 2025 GMT Not After : Oct 31 18:55:19 2025 GMT Subject: CN=97c23806-43e3-40d3-b715-58eed54ca6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:7f:6e:cc:41:52:a5:0e:44:f5:d1:3d:05: b7:f7:28:6a:b3:d9:04:aa:05:dc:8b:20:74:a5:8d: 88:4b:58:fc:23:0c:2b:03:9d:fd:8b:34:a3:6b:34: a2:ad:06:93:f8:e9:37:18:ff:36:35:aa:42:4e:17: 0b:2c:02:d5:83:15:95:f2:a5:66:04:6d:e8:6c:1c: 2b:ca:b2:82:89:34:94:16:11:1d:fc:2d:0b:84:20: 1c:8e:37:0d:97:db:cb:b9:30:43:ce:b1:ea:68:35: 89:f4:00:1e:92:fa:5b:71:bb:a2:61:42:bf:bf:b7: bf:d3:22:c2:9a:e6:42:24:e4:d5:28:79:3a:e3:eb: ab:a8:c5:b5:dc:51:98:8d:41:8f:df:e5:92:62:4b: 8b:9e:ae:fa:6b:6d:f6:2b:9e:b9:79:07:7a:cf:50: 4d:bc:02:2d:4c:01:f7:02:45:d1:d1:49:b8:e6:37: a3:42:0c:63:26:3b:70:4d:91:86:77:16:b1:a5:01: 99:07:3b:fc:c4:0f:32:cc:d5:aa:c3:e9:9a:de:9e: 30:49:0d:50:7b:73:7c:b5:6f:c0:81:f0:9f:d3:65: df:e8:14:ee:d3:9e:6e:5c:eb:f8:d5:6e:02:7c:9b: 9d:6a:07:19:4f:77:65:16:4b:14:40:c6:8a:03:df: ee:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:EE:F0:40:70:68:88:B6:CD:08:4F:AB:0F:AB:B6:52:64:01:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl X509v3 Authority Key Identifier: keyid:2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer sbgp-ipAddrBlock: critical IPv4: 129.71.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bf:38:82:26:16:ca:9b:23:07:3f:cc:04:f2:79:ce:81:46: a1:1b:7b:cd:c8:41:8d:de:13:f7:ad:cd:6b:d7:43:77:78:ab: 96:95:7b:7c:a7:76:87:53:78:c7:c0:72:4e:3c:da:c8:b2:5b: b3:fe:c9:de:e1:ec:f4:c4:ca:9e:e2:36:c6:7d:4f:fc:48:9e: 2d:ab:66:d7:94:49:78:67:79:c5:f9:98:8d:e1:8e:44:64:fd: 6c:ab:fa:21:b3:bd:61:fb:ae:e8:1e:bb:60:fd:8d:1c:5d:28: 91:d1:14:00:9c:ef:4d:a0:9c:ae:50:d4:76:a9:4f:eb:60:4d: e2:3a:9a:05:1a:55:3c:c3:b0:e8:2c:a7:54:ce:3a:ff:dc:bb: bf:4d:75:91:c5:dc:d2:11:19:2d:fe:27:eb:94:1e:9b:f3:cd: 99:2b:c7:b6:a0:c1:fa:f3:d5:e5:cd:93:93:88:8e:68:5b:ba: 35:17:70:61:b3:e9:d1:f1:e7:75:0a:b6:9a:b4:86:01:af:fc: 38:49:88:c0:ca:d3:f7:90:ca:8b:50:cf:5e:f8:9e:21:8e:b3: 44:8f:c4:64:c9:a0:73:3c:06:50:b0:0f:83:01:e9:36:a0:9e: e0:2c:ff:80:e5:2a:81:8f:30:d5:6d:23:bc:a2:3a:a3:98:49: 6d:3b:69:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEq5y318bE4usOlyc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JkZDNjMTEtNjU4My00ZGM0LWEwNWItYmJkY2RmZGNk MjcyMB4XDTI1MDgwMjE4NTUxOVoXDTI1MTAzMTE4NTUxOVowLzEtMCsGA1UEAxMk OTdjMjM4MDYtNDNlMy00MGQzLWI3MTUtNThlZWQ1NGNhNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoZ/bsxBUqUORPXRPQW39yhqs9kEqgXciyB0 pY2IS1j8IwwrA539izSjazSirQaT+Ok3GP82NapCThcLLALVgxWV8qVmBG3obBwr yrKCiTSUFhEd/C0LhCAcjjcNl9vLuTBDzrHqaDWJ9AAekvpbcbuiYUK/v7e/0yLC muZCJOTVKHk64+urqMW13FGYjUGP3+WSYkuLnq76a232K565eQd6z1BNvAItTAH3 AkXR0Um45jejQgxjJjtwTZGGdxaxpQGZBzv8xA8yzNWqw+ma3p4wSQ1Qe3N8tW/A gfCf02Xf6BTu055uXOv41W4CfJudagcZT3dlFksUQMaKA9/uUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIyb7vBAcGiIts0IT6sPq7ZSZAEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YmRk M2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRjZGZkY2QyNzIvYjQ5ZDFiOTMtYzJiNS0z NjkxLTg2YWUtMzNjN2I5ZjZlNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2JkZDNjMTEtNjU4My00ZGM0LWEw NWItYmJkY2RmZGNkMjcyLzdiZGQzYzExLTY1ODMtNGRjNC1hMDViLWJiZGNkZmRj ZDI3Mi5jcmwwHwYDVR0jBBgwFoAUKgO0AaVRLL/DGy6Az4RDX0qAOyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YmRkM2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRj ZGZkY2QyNzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgUcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAa784giYWypsjBz/MBPJ5zoFGoRt7zchBjd4T963Na9dDd3irlpV7fKd2 h1N4x8ByTjzayLJbs/7J3uHs9MTKnuI2xn1P/EieLatm15RJeGd5xfmYjeGORGT9 bKv6IbO9Yfuu6B67YP2NHF0okdEUAJzvTaCcrlDUdqlP62BN4jqaBRpVPMOw6Cyn VM46/9y7v011kcXc0hEZLf4n65Qem/PNmSvHtqDB+vPV5c2Tk4iOaFu6NRdwYbPp 0fHndQq2mrSGAa/8OEmIwMrT95DKi1DPXvieIY6zRI/EZMmgczwGULAPgwHpNqCe 4Cz/gOUqgY8w1W0jvKI6o5hJbTtpNA== -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:29 2025 by rpki-client