$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa File: 34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa (raw, json) Hash identifier: JaQYlXvU3AKOV3lYQ71YauWfuPvqektl1Bhm8Zh5hqM= Subject key identifier: E7:3D:28:63:3D:DD:8F:A7:4C:7A:ED:32:B3:AD:96:17:9D:AC:2B:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A52AF527BAED63E60E38B0FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa Signing time: Thu 26 Jun 2025 20:30:18 +0000 ROA not before: Thu 26 Jun 2025 20:30:18 +0000 ROA not after: Wed 24 Sep 2025 20:30:18 +0000 asID: 7029 IP address blocks: 71.28.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:af:52:7b:ae:d6:3e:60:e3:8b:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 26 20:30:18 2025 GMT Not After : Sep 24 20:30:18 2025 GMT Subject: CN=2adc18b4-78e9-4437-bb37-11b3643d0eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:23:a0:f6:b9:e1:ab:82:97:6c:92:37:bf: 75:11:53:f8:63:d5:81:58:2c:4a:2d:fd:9d:92:40: fb:ef:db:a8:c3:cb:4e:f8:d6:1e:d6:a7:4e:82:14: 64:48:11:0f:d0:9c:15:85:16:25:9f:ee:71:d3:1d: d4:28:12:51:36:5d:d0:c1:b0:40:af:ce:7c:1b:04: b5:79:e9:53:13:2e:6b:58:b9:6e:7e:16:fd:71:d4: 98:ed:72:ac:57:72:f2:be:ce:ed:4e:24:cb:a9:e4: de:81:19:78:06:54:3e:84:c6:4a:a4:cd:db:ec:dd: a5:c5:83:0a:db:57:c7:15:7e:bc:44:37:a5:3d:c9: 6b:fd:28:51:54:47:bc:b2:f5:6d:8b:e3:bf:48:de: 60:c6:bb:9a:79:46:dc:56:16:94:ec:4b:63:ff:21: 9f:d1:33:ff:aa:9d:b0:7c:63:4a:65:55:b9:6f:7a: 05:a6:51:95:da:e9:a6:57:19:fc:c2:cf:29:35:b7: 75:04:a8:51:ab:95:d7:70:c8:3f:38:11:0b:d9:45: 2c:fb:bc:9c:de:72:49:b5:80:8e:28:a0:75:84:fb: b7:09:e2:a2:13:ec:d0:e2:b9:a6:85:4a:98:82:02: 86:3e:70:3e:d9:ba:b3:d9:89:e0:9d:63:fc:3d:6d: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3D:28:63:3D:DD:8F:A7:4C:7A:ED:32:B3:AD:96:17:9D:AC:2B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34bfe1cb-de97-313d-9d84-0cdfa6306dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8a:59:e1:c6:f8:ef:6f:12:28:40:80:61:24:30:8f:b1:50: d4:46:be:58:d0:ee:0b:6a:ec:56:28:a4:cd:65:36:2e:42:b3: 17:ca:b5:0b:f7:a2:53:f8:3c:91:e7:67:a6:e0:27:f3:32:3d: b4:d2:6d:8b:a2:ad:a5:4d:fa:d4:52:79:0d:65:72:d3:00:41: 76:9c:12:d4:d4:d1:56:48:a6:a2:20:4e:4d:cf:e2:40:5c:ae: 7e:dd:f0:3c:ba:f1:bc:a3:a3:8b:dc:ee:42:83:b6:ec:04:37: 59:a8:02:c1:a8:2b:24:9b:4f:7a:71:4d:3b:2a:45:28:b9:3a: f4:61:1b:d6:16:37:04:ca:6c:3b:35:d7:37:84:ec:28:01:ea: 10:d2:42:fb:ba:18:9f:0d:71:d6:14:4b:ac:d0:ad:7f:b9:4b: c3:bd:bf:51:e6:95:4d:6e:7c:31:85:f3:93:05:25:05:5d:c5: 26:56:59:17:e2:01:2f:e1:d1:08:9d:c6:b1:53:d1:d0:63:8c: 1f:f7:22:2a:da:7d:99:0f:f8:43:c4:de:a0:62:fe:74:44:db: 30:9a:a9:b9:41:ea:af:78:b5:2b:21:e7:c3:a3:92:b4:0c:53: f5:8d:82:b3:95:f1:7f:7c:32:8c:ea:d6:51:c0:a3:74:da:8f: c8:2a:da:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSr1J7rtY+YOOLD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNjIwMzAxOFoXDTI1MDkyNDIwMzAxOFowLzEtMCsGA1UEAxMk MmFkYzE4YjQtNzhlOS00NDM3LWJiMzctMTFiMzY0M2QwZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzgjoPa54auCl2ySN791EVP4Y9WBWCxKLf2d kkD779uow8tO+NYe1qdOghRkSBEP0JwVhRYln+5x0x3UKBJRNl3QwbBAr858GwS1 eelTEy5rWLlufhb9cdSY7XKsV3Lyvs7tTiTLqeTegRl4BlQ+hMZKpM3b7N2lxYMK 21fHFX68RDelPclr/ShRVEe8svVti+O/SN5gxruaeUbcVhaU7Etj/yGf0TP/qp2w fGNKZVW5b3oFplGV2ummVxn8ws8pNbd1BKhRq5XXcMg/OBEL2UUs+7yc3nJJtYCO KKB1hPu3CeKiE+zQ4rmmhUqYggKGPnA+2bqz2YngnWP8PW2PnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc9KGM93Y+nTHrtMrOtlhedrCs2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRiZmUxY2ItZGU5Ny0z MTNkLTlkODQtMGNkZmE2MzA2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWKWeHG+O9vEihAgGEkMI+xUNRGvljQ7gtq7FYopM1lNi5CsxfKtQv3 olP4PJHnZ6bgJ/MyPbTSbYuiraVN+tRSeQ1lctMAQXacEtTU0VZIpqIgTk3P4kBc rn7d8Dy68byjo4vc7kKDtuwEN1moAsGoKySbT3pxTTsqRSi5OvRhG9YWNwTKbDs1 1zeE7CgB6hDSQvu6GJ8NcdYUS6zQrX+5S8O9v1HmlU1ufDGF85MFJQVdxSZWWRfi AS/h0QidxrFT0dBjjB/3IirafZkP+EPE3qBi/nRE2zCaqblB6q94tSsh58OjkrQM U/WNgrOV8X98Mozq1lHAo3Taj8gq2qQ= -----END CERTIFICATE-----Generated at Tue Jul 1 07:02:52 2025 by rpki-client