$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa File: 568233e0-8076-307e-941b-cf901e9814cd.roa (raw, json) Hash identifier: O3oQWLhYDE3YmbLILcEHQTiSgqXFAvO72vidweEIi70= Subject key identifier: DF:47:8A:63:B4:42:72:BD:6D:9A:ED:F2:4C:9D:CA:99:B3:43:32:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A3FAAD432EF96966EA4A718C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.29.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d4:32:ef:96:96:6e:a4:a7:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=9f6bf854-55b4-4dde-9fcd-eef6f24bb126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4e:99:61:38:9a:43:ac:ef:b2:1c:fe:10:b4: ac:6f:0f:7f:95:e3:52:19:94:8b:d9:da:c4:f3:4e: d5:cd:20:2f:a6:cf:fa:9d:b9:6e:c2:33:02:77:01: d8:2e:f9:51:63:8a:d8:2b:d4:83:6e:b4:7a:d0:9a: 98:92:bd:a7:a1:17:15:26:dc:be:bc:b6:a1:03:8a: 3f:b2:c2:77:f1:9a:dd:50:37:bb:34:8d:a3:a1:e6: e4:e9:ce:10:c6:ce:eb:d2:30:81:e9:d6:76:be:78: bc:6e:ce:1f:99:cd:2d:71:64:dc:ce:91:69:fd:86: 6a:70:c5:60:0a:36:9d:43:f8:d6:b8:34:7d:a2:3b: 78:88:b7:4e:d6:33:2c:87:3d:92:13:4c:64:61:14: d5:f1:80:29:57:16:38:71:ff:38:d0:0d:af:b9:8e: 84:eb:bd:5c:6d:89:fd:b5:03:1b:89:42:16:28:f0: f4:7e:f1:ae:0d:0f:59:5b:d2:c2:a2:3e:d9:3f:ef: d0:1b:b8:5f:45:e5:9a:25:86:d8:46:eb:12:af:ad: c4:36:d9:7b:a5:82:b4:df:e0:3b:f6:c7:92:5b:31: 0d:d3:8d:a9:84:d8:ad:26:ad:9c:72:bc:f4:af:92: f5:f9:91:bc:ae:52:ff:cc:10:05:46:d9:5f:a6:b6: d3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:8A:63:B4:42:72:BD:6D:9A:ED:F2:4C:9D:CA:99:B3:43:32:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c5:29:09:1c:51:69:d4:2c:a0:c6:20:e9:3a:21:03:a1:7e: 46:05:24:16:d2:3e:99:f9:65:d4:e7:2b:78:d6:be:5a:fc:be: ca:08:72:e1:d6:9d:23:f3:57:08:92:71:da:74:91:43:ff:44: 3d:78:ee:50:75:30:95:8e:d6:a3:f6:32:69:24:ff:4f:1a:84: 51:da:22:3a:14:1b:d1:04:ab:47:89:fe:3d:7c:d8:87:61:48: a9:a2:0b:1c:a4:b7:85:22:eb:f2:d5:1b:c2:8c:de:11:21:5d: 62:f3:fb:38:37:6e:6c:5f:d5:5a:22:bc:9f:7a:93:dc:f7:4e: 50:16:26:a7:05:ac:49:01:8b:52:11:de:ea:cf:b7:7e:cc:07: e2:94:a2:4a:a7:0a:7c:8f:12:56:84:0e:2e:b4:9f:5b:b1:6d: 5e:6f:1b:66:37:96:cf:44:36:bc:38:fc:22:af:f5:c6:99:5d: f1:38:c6:52:3b:17:2b:f3:00:4e:58:bb:b9:18:64:ea:84:b4: 11:72:1f:a6:d1:cb:6b:fe:8f:22:51:f8:8f:68:31:43:87:84: 93:3e:ea:0a:e9:ad:dd:1d:88:f5:f9:ee:7b:e3:83:0e:3e:37: 1a:88:a6:2d:f5:71:ec:84:9e:57:43:1e:39:6c:b2:59:93:c2: db:9f:e0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtQy75aWbqSnGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk OWY2YmY4NTQtNTViNC00ZGRlLTlmY2QtZWVmNmYyNGJiMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE6ZYTiaQ6zvshz+ELSsbw9/leNSGZSL2drE 807VzSAvps/6nbluwjMCdwHYLvlRY4rYK9SDbrR60JqYkr2noRcVJty+vLahA4o/ ssJ38ZrdUDe7NI2joebk6c4Qxs7r0jCB6dZ2vni8bs4fmc0tcWTczpFp/YZqcMVg CjadQ/jWuDR9ojt4iLdO1jMshz2SE0xkYRTV8YApVxY4cf840A2vuY6E671cbYn9 tQMbiUIWKPD0fvGuDQ9ZW9LCoj7ZP+/QG7hfReWaJYbYRusSr63ENtl7pYK03+A7 9seSWzEN042phNitJq2ccrz0r5L1+ZG8rlL/zBAFRtlfprbTiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9HimO0QnK9bZrt8kydypmzQzIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MjMzZTAtODA3Ni0z MDdlLTk0MWItY2Y5MDFlOTgxNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXFKQkcUWnULKDGIOk6IQOhfkYFJBbSPpn5ZdTnK3jWvlr8vsoIcuHW nSPzVwiScdp0kUP/RD147lB1MJWO1qP2Mmkk/08ahFHaIjoUG9EEq0eJ/j182Idh SKmiCxykt4Ui6/LVG8KM3hEhXWLz+zg3bmxf1VoivJ96k9z3TlAWJqcFrEkBi1IR 3urPt37MB+KUokqnCnyPElaEDi60n1uxbV5vG2Y3ls9ENrw4/CKv9caZXfE4xlI7 FyvzAE5Yu7kYZOqEtBFyH6bRy2v+jyJR+I9oMUOHhJM+6grprd0diPX57nvjgw4+ NxqIpi31ceyEnldDHjlsslmTwtuf4PA= -----END CERTIFICATE-----Generated at Tue Jul 1 11:02:52 2025 by rpki-client