$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa File: 5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa (raw, json) Hash identifier: n0qRxI2E41JP/EjSajU5a6PClxwtaGD1WEVVg1R53yY= Subject key identifier: BE:CF:2E:DF:8C:99:37:6D:9E:0E:B5:3B:46:37:B3:10:7F:D4:C5:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66895A9E686433B7827480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:5a:9e:68:64:33:b7:82:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=786ddf29-703b-4bf2-8768-3c573b807227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:46:68:16:78:2b:b0:0f:c7:1b:46:b7:83: f6:16:ba:9f:11:8e:f2:0c:0a:c7:ff:57:d0:4c:9e: 1d:32:2e:5b:d3:4b:9e:52:2f:8a:2a:32:6b:66:e0: 13:c1:77:54:01:5f:7c:56:ca:29:fe:f3:33:32:8c: 5d:53:1b:ec:83:72:11:2f:4d:ea:4a:4d:d2:ff:c5: 24:8f:da:ab:d8:3e:32:d6:bb:83:75:00:aa:81:9a: 16:bc:32:9b:25:9f:3c:68:74:48:1f:3e:0b:11:fa: 42:52:99:4a:f8:0b:da:97:d0:df:a7:8c:20:37:e3: ec:28:2f:f1:a6:9c:87:ed:94:4d:bb:d4:25:1f:ec: 34:0b:29:02:e6:ef:61:10:12:cc:87:b0:f3:21:fb: 16:4b:5b:4c:aa:b0:89:0e:1a:62:07:54:ea:fe:c2: f6:a5:42:e1:55:c2:92:b9:59:e8:fb:13:20:da:5a: 7b:36:7a:8c:d6:7e:db:be:1b:8e:73:f4:64:d0:ce: b5:68:b8:5c:71:2f:77:e9:b3:73:03:75:b9:6d:09: 9d:29:de:fd:2f:d9:cb:1f:79:38:fa:9f:36:0e:85: 00:10:f9:af:df:1e:54:6b:0e:a3:57:f7:35:f1:7f: ce:67:31:43:9c:93:ae:98:ea:4d:49:b6:a9:87:fd: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CF:2E:DF:8C:99:37:6D:9E:0E:B5:3B:46:37:B3:10:7F:D4:C5:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0c:17:33:c4:68:49:71:9a:b3:f3:12:5d:d3:44:7e:49:42: 3f:cb:08:cc:31:9f:65:96:c5:66:53:05:e3:1f:ac:4a:5f:93: 63:e4:92:61:98:94:d1:2f:01:5d:6d:48:43:1d:e2:37:f3:04: fc:b6:2f:51:55:56:02:0d:a8:3b:51:90:d2:15:20:73:72:65: c7:2c:67:50:f2:81:b3:ec:f3:bd:72:49:9c:e3:83:f1:bb:38: f0:32:e1:22:fd:1f:c7:b1:f6:55:78:0d:ee:66:db:ff:ec:58: 0c:39:e4:94:4b:72:74:ee:b9:40:27:2e:53:33:36:20:b2:04: 20:4c:31:9c:ca:02:8b:01:60:bb:42:37:50:f3:ee:bb:18:fe: 79:1d:6e:a4:7c:83:e3:28:f0:8e:7a:fc:3c:9d:55:26:5f:50: 28:f0:7b:25:79:9d:25:8e:b6:07:de:b3:29:71:68:8f:5e:15: 2e:48:9d:83:35:6b:50:8e:24:ad:59:bc:c7:70:0e:2d:7d:f8: b4:25:1e:95:13:09:82:34:22:0c:72:24:6e:3a:d6:1b:b8:1d: d3:2d:4c:26:33:d6:1d:d4:f4:55:31:e0:0d:90:44:96:42:90: 8a:75:f1:18:c3:69:7a:95:59:f2:56:e8:c0:d9:5b:80:47:a1: d5:9d:aa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZolanmhkM7eCdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk Nzg2ZGRmMjktNzAzYi00YmYyLTg3NjgtM2M1NzNiODA3MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5RGaBZ4K7APxxtGt4P2FrqfEY7yDArH/1fQ TJ4dMi5b00ueUi+KKjJrZuATwXdUAV98Vsop/vMzMoxdUxvsg3IRL03qSk3S/8Uk j9qr2D4y1ruDdQCqgZoWvDKbJZ88aHRIHz4LEfpCUplK+Aval9Dfp4wgN+PsKC/x ppyH7ZRNu9QlH+w0CykC5u9hEBLMh7DzIfsWS1tMqrCJDhpiB1Tq/sL2pULhVcKS uVno+xMg2lp7NnqM1n7bvhuOc/Rk0M61aLhccS936bNzA3W5bQmdKd79L9nLH3k4 +p82DoUAEPmv3x5Uaw6jV/c18X/OZzFDnJOumOpNSbaph/23RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7PLt+MmTdtng61O0Y3sxB/1MXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYxOWI5OGUtZTc5Yy0z MTViLWE3MmYtZmQ3MDIzZWI2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMMFzPEaElxmrPzEl3TRH5JQj/LCMwxn2WWxWZTBeMfrEpfk2PkkmGY lNEvAV1tSEMd4jfzBPy2L1FVVgINqDtRkNIVIHNyZccsZ1DygbPs871ySZzjg/G7 OPAy4SL9H8ex9lV4De5m2//sWAw55JRLcnTuuUAnLlMzNiCyBCBMMZzKAosBYLtC N1Dz7rsY/nkdbqR8g+Mo8I56/DydVSZfUCjweyV5nSWOtgfesylxaI9eFS5InYM1 a1COJK1ZvMdwDi19+LQlHpUTCYI0IgxyJG461hu4HdMtTCYz1h3U9FUx4A2QRJZC kIp18RjDaXqVWfJW6MDZW4BHodWdqgs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:18:17 2025 by rpki-client