$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/612cee52-6cdb-347d-9034-6e529a562c12.roa File: 612cee52-6cdb-347d-9034-6e529a562c12.roa (raw, json) Hash identifier: PrX+p4KopW3UMP3MiQ5UBhaho5g85fQHB3cYD9gFwVI= Subject key identifier: 9D:BC:98:4C:19:EB:2E:72:5B:C7:A2:ED:96:83:5D:5C:32:08:04:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A52AAE1E575C3E13E0B1E8000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/612cee52-6cdb-347d-9034-6e529a562c12.roa Signing time: Thu 26 Jun 2025 20:21:21 +0000 ROA not before: Thu 26 Jun 2025 20:21:21 +0000 ROA not after: Wed 24 Sep 2025 20:21:21 +0000 asID: 7029 IP address blocks: 71.28.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:aa:e1:e5:75:c3:e1:3e:0b:1e:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 26 20:21:21 2025 GMT Not After : Sep 24 20:21:21 2025 GMT Subject: CN=cda9fc45-6aa9-4537-a29e-2cca43a9386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:aa:9a:e7:c6:f5:b1:d4:f1:09:87:08:ba: 7c:e4:9a:a4:20:27:cc:34:20:fc:1e:da:0b:75:de: 29:8e:c9:03:e0:c9:35:b7:5c:ff:65:70:4d:6c:ca: 1d:25:02:c0:9b:90:32:36:af:27:a5:ec:41:28:f2: 21:5b:c6:83:8e:76:38:9e:5b:87:15:06:93:18:22: 39:18:86:6a:22:9e:db:0b:26:cb:43:a9:68:07:4a: c0:a9:fe:35:57:cf:6b:66:82:35:0a:4c:af:5b:42: d4:9c:d5:2b:c1:c8:3d:30:05:3b:77:c2:03:48:c2: f7:30:9f:6b:60:9d:7e:9c:dd:de:6f:45:a4:b2:27: ff:bc:69:97:be:ac:ad:58:88:37:3f:9a:a7:a0:86: 4d:38:3c:33:55:0e:77:75:63:e5:94:7b:88:cb:4f: d6:49:c1:79:90:ca:7e:e3:af:d0:97:45:f6:03:9b: 55:75:93:b3:24:d2:d7:2c:76:8c:08:19:59:28:91: d3:7b:db:54:0c:9d:47:f2:72:a6:00:e4:b2:b9:0d: cf:a4:9d:04:1d:76:1d:83:f2:c3:84:b8:ce:66:06: 6d:ec:75:e4:9b:6b:27:09:3d:7e:da:2c:b2:a3:9d: b4:29:6c:29:0a:6b:bb:49:b8:30:25:51:33:67:0d: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BC:98:4C:19:EB:2E:72:5B:C7:A2:ED:96:83:5D:5C:32:08:04:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/612cee52-6cdb-347d-9034-6e529a562c12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:50:a2:f3:38:7e:ac:7a:c1:44:9e:b5:7b:9a:bb:94:1b:81: 90:e2:1c:a9:af:11:d1:38:4f:2a:75:1f:36:0f:30:70:2d:94: 7f:67:db:3d:d8:57:22:50:21:cf:9f:d8:f4:b8:40:ce:04:54: e5:79:9b:e3:98:a1:9a:6a:9e:5c:04:bc:1a:f6:40:82:02:e5: 3a:a5:3f:84:00:5b:ce:80:b8:01:fe:21:96:2b:38:5d:7e:b6: 64:27:66:42:98:40:55:ce:65:51:52:bd:07:f4:a5:3b:da:6b: b1:dd:3a:a4:05:7f:ad:90:df:e0:4d:e7:ee:ab:53:58:60:a2: 22:43:8f:9e:0d:6d:c5:fa:76:22:37:47:5d:e6:d3:50:80:26: b6:ba:2e:eb:de:1c:15:45:52:32:78:43:5b:64:e4:b6:b8:fe: f3:71:ca:fc:80:e1:5d:7c:b0:15:5c:dc:63:cb:aa:ab:d3:1e: 9f:8d:e9:03:b8:87:76:0f:73:cb:44:1e:bc:61:07:21:a9:de: f7:27:dc:19:67:41:72:64:02:31:d8:d8:cd:01:54:63:a7:43: db:9d:cc:2c:cb:7f:41:de:90:99:1c:db:56:8e:dd:40:bb:23: 44:08:20:67:cf:5e:e7:0a:74:b2:83:21:a0:a0:4e:c3:c6:b6: d1:23:9d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSquHldcPhPgsegAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNjIwMjEyMVoXDTI1MDkyNDIwMjEyMVowLzEtMCsGA1UEAxMk Y2RhOWZjNDUtNmFhOS00NTM3LWEyOWUtMmNjYTQzYTkzODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/6qmufG9bHU8QmHCLp85JqkICfMNCD8HtoL dd4pjskD4Mk1t1z/ZXBNbModJQLAm5AyNq8npexBKPIhW8aDjnY4nluHFQaTGCI5 GIZqIp7bCybLQ6loB0rAqf41V89rZoI1CkyvW0LUnNUrwcg9MAU7d8IDSML3MJ9r YJ1+nN3eb0Wksif/vGmXvqytWIg3P5qnoIZNODwzVQ53dWPllHuIy0/WScF5kMp+ 46/Ql0X2A5tVdZOzJNLXLHaMCBlZKJHTe9tUDJ1H8nKmAOSyuQ3PpJ0EHXYdg/LD hLjOZgZt7HXkm2snCT1+2iyyo520KWwpCmu7SbgwJVEzZw0JJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ28mEwZ6y5yW8ei7ZaDXVwyCAQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjEyY2VlNTItNmNkYi0z NDdkLTkwMzQtNmU1MjlhNTYyYzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNQovM4fqx6wUSetXuau5QbgZDiHKmvEdE4Typ1HzYPMHAtlH9n2z3Y VyJQIc+f2PS4QM4EVOV5m+OYoZpqnlwEvBr2QIIC5TqlP4QAW86AuAH+IZYrOF1+ tmQnZkKYQFXOZVFSvQf0pTvaa7HdOqQFf62Q3+BN5+6rU1hgoiJDj54NbcX6diI3 R13m01CAJra6LuveHBVFUjJ4Q1tk5La4/vNxyvyA4V18sBVc3GPLqqvTHp+N6QO4 h3YPc8tEHrxhByGp3vcn3BlnQXJkAjHY2M0BVGOnQ9udzCzLf0HekJkc21aO3UC7 I0QIIGfPXucKdLKDIaCgTsPGttEjnU0= -----END CERTIFICATE-----Generated at Tue Jul 1 12:39:20 2025 by rpki-client