$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa File: 1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa (raw, json) Hash identifier: ZYXk95PCqkHhhv7WTTe4LHm/ZiyaFmP3rw/vC77QCOc= Subject key identifier: 73:10:D4:80:69:29:A9:B3:89:E9:E5:ED:DE:F4:D9:7B:FD:12:32:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA206C6BE41A0481AF8B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.28.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:6c:6b:e4:1a:04:81:af:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=ac7684f3-7f54-4e31-b3db-dd33f6b17dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5f:ec:2a:0e:70:f2:db:59:e7:5a:2a:e0:03: 2b:c7:78:ef:26:64:0d:33:81:f2:90:cb:7b:f3:a6: 4f:05:bc:12:6d:0e:a9:a5:65:26:2d:11:7e:3b:db: fe:08:7c:5f:d1:a3:e0:72:57:2d:a1:11:4e:eb:3c: 1e:c1:79:50:cf:71:b7:f8:40:04:68:41:bf:03:7a: 54:63:d9:c4:84:fa:e1:7a:4c:b8:29:b2:ae:b2:50: 92:58:aa:2f:5a:ce:a7:51:6f:fe:3d:e9:87:35:57: 8c:71:d5:c6:d9:b6:1a:76:80:bd:6b:7a:bb:b2:fe: bd:e8:af:b6:76:cf:f1:d2:e7:1b:03:04:cd:69:a2: 2f:f4:be:63:d3:ed:2c:b5:4f:85:b3:21:23:84:94: bd:c2:86:88:e6:6d:62:11:62:54:7b:af:f2:1b:dd: 9d:d2:eb:69:96:33:71:79:83:5d:89:34:34:a8:fa: 58:75:a5:5e:c9:07:f2:53:8e:2b:af:de:c2:a5:ab: 85:e9:0d:a7:71:c9:83:94:a7:ea:8e:35:bd:b2:ac: 1d:6e:5d:b4:dc:ac:d2:54:1f:d7:87:45:3a:ae:77: 6a:a4:ab:62:60:39:97:9d:b5:ac:be:ef:fd:00:a1: 4c:eb:6b:6b:1a:3d:c7:00:db:c8:dd:48:31:99:53: 01:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:10:D4:80:69:29:A9:B3:89:E9:E5:ED:DE:F4:D9:7B:FD:12:32:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea406c7-cfc3-325a-8f42-ea4aa7998e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:31:40:d8:5f:ba:0d:eb:0f:ba:31:c2:3d:d0:de:d8:77:0c: 64:84:ca:27:ec:22:10:c1:b6:08:1f:ef:0d:fc:de:4a:f1:f0: 90:44:f5:58:5c:84:b6:ef:f2:0a:62:af:bc:d1:6e:93:bc:ae: 5f:63:69:5e:52:d0:39:19:5e:65:d2:98:8a:bd:3c:91:0e:1b: d9:d4:b1:5d:bd:25:a5:d6:33:66:21:a9:79:d1:69:d9:fb:70: bb:98:15:40:ba:81:7c:00:32:ca:2c:c2:89:42:b2:af:5e:01: 1a:a8:d1:90:77:ae:55:e3:b6:41:5b:62:aa:65:09:7b:50:1f: 6d:f1:8f:6f:ef:93:05:5a:d6:5c:51:32:f4:e8:72:19:80:e1: 75:10:bd:df:cf:5e:b3:38:90:bb:0f:ed:a5:5f:24:03:d0:eb: 7f:c5:cb:1e:00:23:4e:a1:4b:ee:13:74:16:f4:3e:5e:6f:62: af:98:c4:15:bb:48:a6:07:b4:fa:a6:54:d0:e7:ff:41:3b:a4: fe:8e:72:2d:86:2a:81:51:7f:8b:f4:a3:39:51:71:99:ff:7e: 45:11:78:c9:de:51:f6:26:fd:2e:10:54:aa:4b:16:a7:a8:b4: 3a:51:eb:1f:6c:cc:ff:d0:8d:68:a5:97:7f:31:6e:de:48:2f: a3:e2:fc:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiBsa+QaBIGviwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk YWM3Njg0ZjMtN2Y1NC00ZTMxLWIzZGItZGQzM2Y2YjE3ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV/sKg5w8ttZ51oq4AMrx3jvJmQNM4HykMt7 86ZPBbwSbQ6ppWUmLRF+O9v+CHxf0aPgclctoRFO6zwewXlQz3G3+EAEaEG/A3pU Y9nEhPrheky4KbKuslCSWKovWs6nUW/+PemHNVeMcdXG2bYadoC9a3q7sv696K+2 ds/x0ucbAwTNaaIv9L5j0+0stU+FsyEjhJS9woaI5m1iEWJUe6/yG92d0utpljNx eYNdiTQ0qPpYdaVeyQfyU44rr97CpauF6Q2nccmDlKfqjjW9sqwdbl203KzSVB/X h0U6rndqpKtiYDmXnbWsvu/9AKFM62trGj3HANvI3UgxmVMBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMQ1IBpKamzienl7d702Xv9EjLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVhNDA2YzctY2ZjMy0z MjVhLThmNDItZWE0YWE3OTk4ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUxQNhfug3rD7oxwj3Q3th3DGSEyifsIhDBtggf7w383krx8JBE9Vhc hLbv8gpir7zRbpO8rl9jaV5S0DkZXmXSmIq9PJEOG9nUsV29JaXWM2YhqXnRadn7 cLuYFUC6gXwAMsoswolCsq9eARqo0ZB3rlXjtkFbYqplCXtQH23xj2/vkwVa1lxR MvTochmA4XUQvd/PXrM4kLsP7aVfJAPQ63/Fyx4AI06hS+4TdBb0Pl5vYq+YxBW7 SKYHtPqmVNDn/0E7pP6Oci2GKoFRf4v0ozlRcZn/fkUReMneUfYm/S4QVKpLFqeo tDpR6x9szP/QjWill38xbt5IL6Pi/Ck= -----END CERTIFICATE-----Generated at Mon Jun 30 16:06:53 2025 by rpki-client