$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa File: 1abac9eb-df64-3e5a-a248-a5543e84384e.roa (raw, json) Hash identifier: RT8YVISHtajxUV93HGmBVJuyc8GUl72N+0t6N9h0idY= Subject key identifier: E1:C8:1F:A2:FA:24:2F:E0:BC:95:95:F7:BF:DF:9F:38:B2:E5:19:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6689482DA22EC8405B4B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:48:2d:a2:2e:c8:40:5b:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=ab160c89-b934-463a-9bc5-f26be9b8c3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:85:8b:16:88:74:5a:15:74:b8:74:d9:88: 36:29:c0:05:b9:cd:f6:d3:23:a5:74:b5:d2:ea:c8: 4e:08:6e:57:44:f3:55:8f:e2:63:ba:3b:e0:fa:2a: e6:1a:d9:f8:71:5c:2d:e5:24:8d:5a:98:23:9b:74: 6b:20:3d:82:cb:95:cd:78:2d:50:a3:aa:d5:a2:df: 07:87:83:ab:e1:62:47:3b:ab:f6:f8:60:20:88:3d: e8:02:10:69:5a:9f:7d:48:fa:50:db:7b:89:d7:bd: cd:08:91:fb:d2:2a:72:12:8b:5d:33:80:f9:87:70: d4:23:35:40:7f:dd:ef:23:9b:06:8e:94:d5:92:29: c2:93:3c:b0:b3:1e:48:3a:4d:c5:91:05:fa:67:23: 01:45:2a:1a:4c:f5:25:b4:7c:a0:44:aa:48:53:83: 1b:39:5a:ee:84:ae:87:20:87:10:b8:3b:c3:c4:ba: 95:dd:11:8d:4f:cc:40:64:03:88:67:19:65:45:dc: b0:12:ca:f4:cd:c5:54:33:af:38:cb:be:d1:09:f0: 31:2a:f4:23:c3:31:5d:3a:43:52:b0:06:c7:d5:09: e2:88:c2:b4:1c:ad:25:c3:83:b8:53:fa:c5:42:c4: 49:03:23:dd:74:05:44:80:3d:50:10:b0:e3:7b:18: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C8:1F:A2:FA:24:2F:E0:BC:95:95:F7:BF:DF:9F:38:B2:E5:19:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1abac9eb-df64-3e5a-a248-a5543e84384e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:1b:4a:33:6b:18:2d:9a:70:80:41:d3:93:3b:d2:63:0d:30: 50:2c:2f:1e:59:65:21:8d:1e:95:7f:62:78:85:e0:24:6b:56: ea:fa:83:c8:24:c3:36:62:17:c3:b7:7d:18:a6:06:42:a1:5d: 99:c5:cf:6f:6c:fe:e6:29:ca:6a:ae:a4:8d:a6:09:9b:1a:e4: ac:7b:b1:e4:65:8f:75:8d:ff:83:71:d9:95:5d:ee:df:2c:d2: 26:50:aa:44:dd:73:26:7d:23:1a:8e:1d:5c:40:ad:e2:31:c1: 30:d0:06:4a:fd:64:1b:39:c3:a9:b0:57:2f:f1:90:0c:3f:cb: cd:fb:d9:62:34:c6:f2:5f:76:e2:25:b0:eb:e2:c1:9c:5d:23: f4:a3:3c:77:54:c8:91:6b:1a:c4:86:58:ee:19:ca:ec:c6:fe: f3:61:f0:ae:9e:87:1c:2d:d3:21:18:89:f5:3f:ea:02:3b:2a: 90:04:e8:bc:2e:0e:49:e4:52:cb:79:68:85:1e:20:a5:f0:11: a8:bf:36:6e:5f:f2:55:19:fb:e5:54:8e:b3:50:c5:25:aa:aa: 3f:69:cf:38:11:85:19:13:49:41:67:27:98:d2:cf:d8:25:01: 69:7e:c5:d9:3f:4e:8f:65:87:36:6e:2b:f7:f5:cb:44:89:1f: a3:cf:c7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZolILaIuyEBbSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YWIxNjBjODktYjkzNC00NjNhLTliYzUtZjI2YmU5YjhjM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO2FixaIdFoVdLh02Yg2KcAFuc320yOldLXS 6shOCG5XRPNVj+Jjujvg+irmGtn4cVwt5SSNWpgjm3RrID2Cy5XNeC1Qo6rVot8H h4Or4WJHO6v2+GAgiD3oAhBpWp99SPpQ23uJ173NCJH70ipyEotdM4D5h3DUIzVA f93vI5sGjpTVkinCkzywsx5IOk3FkQX6ZyMBRSoaTPUltHygRKpIU4MbOVruhK6H IIcQuDvDxLqV3RGNT8xAZAOIZxllRdywEsr0zcVUM684y77RCfAxKvQjwzFdOkNS sAbH1QniiMK0HK0lw4O4U/rFQsRJAyPddAVEgD1QELDjexi3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHIH6L6JC/gvJWV97/fnziy5RkeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiYWM5ZWItZGY2NC0z ZTVhLWEyNDgtYTU1NDNlODQzODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwbSjNrGC2acIBB05M70mMNMFAsLx5ZZSGNHpV/YniF4CRrVur6g8gk wzZiF8O3fRimBkKhXZnFz29s/uYpymqupI2mCZsa5Kx7seRlj3WN/4Nx2ZVd7t8s 0iZQqkTdcyZ9IxqOHVxAreIxwTDQBkr9ZBs5w6mwVy/xkAw/y8372WI0xvJfduIl sOviwZxdI/SjPHdUyJFrGsSGWO4ZyuzG/vNh8K6ehxwt0yEYifU/6gI7KpAE6Lwu DknkUst5aIUeIKXwEai/Nm5f8lUZ++VUjrNQxSWqqj9pzzgRhRkTSUFnJ5jSz9gl AWl+xdk/To9lhzZuK/f1y0SJH6PPx6o= -----END CERTIFICATE-----Generated at Sat Aug 23 17:58:24 2025 by rpki-client