$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa File: 5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa (raw, json) Hash identifier: vzBn1x6smaCCDw7uTKQ6kYj8PYbqgDjjNQCZZC0eAdg= Subject key identifier: 13:D6:A6:62:01:62:0C:F7:E9:4A:18:91:93:78:B4:7D:12:C9:4E:B9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480ADD92F98AA5EBB72AD580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.29.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:dd:92:f9:8a:a5:eb:b7:2a:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=fda8073d-82f1-4e14-b3da-fbfd53c0376f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:1f:70:d7:c0:dc:fa:42:05:91:80:05:66: 7d:29:80:e2:90:2b:c8:34:c9:9d:28:87:52:f4:57: 98:88:1f:2e:8c:58:8c:c0:29:e7:d7:da:c6:2f:5d: 6c:5b:50:f5:d7:2b:c9:5a:0a:7d:78:f4:d9:70:46: a0:40:26:2f:83:86:71:14:5d:60:54:75:12:45:9b: cd:c9:88:40:67:fc:49:44:d8:43:59:8b:67:0e:74: d0:95:d8:18:d9:f6:0b:b8:12:0b:03:16:1c:2c:4b: 71:68:98:0e:8b:1b:33:16:e9:5a:8d:79:29:63:bb: 28:59:13:b2:05:ad:a2:da:e9:d5:59:db:ba:01:15: 45:3f:74:ea:39:7b:d0:21:5e:9d:4a:f0:50:3f:83: 76:c4:c8:e6:8f:6d:f7:f5:f1:0b:d9:e9:2f:ca:8d: 7a:9b:07:44:2e:f3:e2:2e:e7:3d:eb:e7:74:ed:32: a5:68:c4:d8:20:e4:c5:17:05:5c:93:f0:b4:52:e4: 76:dd:00:34:f9:b3:e2:97:cf:40:83:89:f8:c7:5a: fc:13:76:67:d7:54:a0:07:0f:45:9a:93:9a:6e:f4: ad:5c:b3:67:69:1e:4d:a4:b0:67:7a:da:c2:7d:29: b9:8e:b8:af:a0:b1:18:6b:3f:c2:7e:57:8e:0f:11: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D6:A6:62:01:62:0C:F7:E9:4A:18:91:93:78:B4:7D:12:C9:4E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c9dea27-6d26-3118-acec-ab3bdf3e12b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a1:d0:eb:22:1b:a5:20:d1:71:1d:0c:03:44:77:eb:12:7d: ac:0d:a5:db:0a:b1:6c:52:ac:57:3b:ed:37:d2:ff:4a:11:eb: 81:f7:9d:d4:74:25:2c:11:e6:ae:a4:35:78:37:14:b7:5f:40: 8c:4a:9d:1c:3f:65:ae:1c:37:89:4b:8e:f7:3d:82:dd:18:a2: 6d:a5:de:cb:0d:7a:62:51:45:f8:5f:a6:e4:55:27:d2:26:d2: c2:03:a2:e6:3a:29:f6:42:17:d0:6a:ad:38:5d:13:d3:7c:47: 32:f8:68:fa:09:e9:7b:ac:66:20:e6:d9:33:7b:36:89:a4:a8: 97:07:b9:53:f5:49:65:9f:0f:8f:60:27:5a:6b:29:7f:db:4e: 6d:77:cf:07:b8:44:d4:5e:f6:a5:18:1b:65:47:57:ca:d8:3e: cb:18:ce:bd:a9:78:78:11:b9:7f:d2:34:d8:4b:22:c5:b4:b5: 22:0c:ba:ca:3b:8b:26:50:1a:dd:73:4b:66:55:0a:d7:67:a3: 6f:c5:fd:80:2b:db:81:6c:eb:14:87:b9:fe:15:be:2c:77:8e: ff:4d:31:61:b0:50:48:90:14:d8:1b:d4:3e:aa:24:11:72:62: 09:1b:ce:ca:42:78:c5:5e:b6:0e:1e:be:cc:b6:f5:8d:77:dc: b5:f1:e8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICt2S+Yql67cq1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZmRhODA3M2QtODJmMS00ZTE0LWIzZGEtZmJmZDUzYzAzNzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj8fcNfA3PpCBZGABWZ9KYDikCvINMmdKIdS 9FeYiB8ujFiMwCnn19rGL11sW1D11yvJWgp9ePTZcEagQCYvg4ZxFF1gVHUSRZvN yYhAZ/xJRNhDWYtnDnTQldgY2fYLuBILAxYcLEtxaJgOixszFulajXkpY7soWROy Ba2i2unVWdu6ARVFP3TqOXvQIV6dSvBQP4N2xMjmj2339fEL2ekvyo16mwdELvPi Luc96+d07TKlaMTYIOTFFwVck/C0UuR23QA0+bPil89Ag4n4x1r8E3Zn11SgBw9F mpOabvStXLNnaR5NpLBnetrCfSm5jrivoLEYaz/CfleODxGiWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPWpmIBYgz36UoYkZN4tH0SyU65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM5ZGVhMjctNmQyNi0z MTE4LWFjZWMtYWIzYmRmM2UxMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSh0OsiG6Ug0XEdDANEd+sSfawNpdsKsWxSrFc77TfS/0oR64H3ndR0 JSwR5q6kNXg3FLdfQIxKnRw/Za4cN4lLjvc9gt0Yom2l3ssNemJRRfhfpuRVJ9Im 0sIDouY6KfZCF9BqrThdE9N8RzL4aPoJ6XusZiDm2TN7NomkqJcHuVP1SWWfD49g J1prKX/bTm13zwe4RNRe9qUYG2VHV8rYPssYzr2peHgRuX/SNNhLIsW0tSIMuso7 iyZQGt1zS2ZVCtdno2/F/YAr24Fs6xSHuf4Vvix3jv9NMWGwUEiQFNgb1D6qJBFy YgkbzspCeMVetg4evsy29Y133LXx6ME= -----END CERTIFICATE-----Generated at Sun Jun 29 01:47:24 2025 by rpki-client