$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa File: 722f3704-d798-3059-b812-9e050f41dc24.roa (raw, json) Hash identifier: K4YUfkZwm/Imnxxrhdf4GulMlyNj3EyJcofhuZZogAM= Subject key identifier: 8F:4B:05:66:02:29:0D:CA:8A:29:EB:3C:17:61:BF:71:44:CD:78:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66896E21BD6C68E6B0F800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:6e:21:bd:6c:68:e6:b0:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=c69347af-7061-47c7-9e58-b7db28858f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:1a:2d:0f:f5:64:61:9c:a9:9f:9d:16:ff: f7:36:df:ea:db:1f:ed:d8:4f:cd:4d:ff:cb:06:c8: 53:0c:d9:b4:02:12:dd:96:f2:fc:28:c9:e4:a1:96: e4:98:4b:8b:0e:6b:1c:d3:22:77:95:49:51:e0:91: cb:3d:d0:b9:e7:f7:7d:83:61:22:f1:ee:71:5b:dc: 76:0f:56:0c:30:17:39:60:b1:6c:4b:4a:04:9a:55: 9d:d2:ef:72:5f:f2:bf:b0:19:c3:b9:f8:33:56:cf: a4:9a:80:1b:60:db:ff:e3:0c:4c:93:44:24:c6:20: f0:c1:7d:db:8b:aa:e4:10:fe:88:f0:7a:2e:1a:66: cb:c1:ff:10:4c:05:cb:91:3c:3e:08:a5:76:30:13: d0:e8:52:db:7f:77:aa:90:12:2e:65:66:5a:ff:3f: 5d:43:a2:88:09:37:fc:be:54:0a:36:e5:f8:31:5e: a1:31:65:95:2e:c1:39:ad:21:96:ff:d6:96:0d:2b: 8a:99:81:df:31:d6:f8:39:4b:e3:b2:2c:c2:f2:b3: 69:c1:cd:1a:04:f2:41:16:31:a6:56:9e:1a:f0:6e: b0:c1:95:95:7e:95:66:a5:43:48:60:ed:76:d9:4a: 82:8b:d4:3e:cf:84:9e:0c:df:09:f5:9c:ee:3b:2f: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:05:66:02:29:0D:CA:8A:29:EB:3C:17:61:BF:71:44:CD:78:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/722f3704-d798-3059-b812-9e050f41dc24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a0:b1:f6:ef:b8:11:6d:b0:fb:1c:3f:a3:d3:7d:83:c2:26: e6:11:14:8d:2b:5c:2d:a2:17:8d:6d:0d:3e:f0:a8:52:ab:a2: 32:a7:48:fe:86:4a:1e:80:84:c1:d0:ee:e9:6c:a2:72:4c:23: df:17:41:57:97:38:fe:d7:f1:3f:50:2e:80:5b:12:39:6d:f7: 0d:79:7a:19:05:c3:dd:e0:83:7b:ff:c3:ed:89:79:ed:b8:89: 9a:a5:98:8c:3f:6f:c3:b1:46:e5:1a:ea:ae:ff:00:4d:43:a6: f8:e7:ef:aa:0b:46:e0:56:0c:b5:38:2e:92:15:87:c8:73:01: 29:73:22:a0:d8:3e:25:33:00:de:60:58:17:c6:6f:a9:52:0a: dd:e1:fe:57:ac:ef:5a:e3:35:28:4b:07:dc:2f:51:6c:0f:20: 94:94:cf:42:9e:e4:b0:15:9c:08:f9:69:a1:55:20:1a:b9:d7: 0d:e0:b8:e3:31:cb:9f:e5:99:bb:3a:f8:60:a4:90:e6:27:9d: 71:27:d4:c4:16:03:9c:ca:40:47:0d:09:5d:d4:95:58:df:29: 22:29:24:b8:d6:f3:10:95:9e:a0:71:5f:01:71:be:16:d9:78: 21:da:ce:6d:78:83:40:0d:84:68:59:44:6e:1d:58:d8:23:b4: 6d:df:14:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoluIb1saOaw+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YzY5MzQ3YWYtNzA2MS00N2M3LTllNTgtYjdkYjI4ODU4ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRcaLQ/1ZGGcqZ+dFv/3Nt/q2x/t2E/NTf/L BshTDNm0AhLdlvL8KMnkoZbkmEuLDmsc0yJ3lUlR4JHLPdC55/d9g2Ei8e5xW9x2 D1YMMBc5YLFsS0oEmlWd0u9yX/K/sBnDufgzVs+kmoAbYNv/4wxMk0QkxiDwwX3b i6rkEP6I8HouGmbLwf8QTAXLkTw+CKV2MBPQ6FLbf3eqkBIuZWZa/z9dQ6KICTf8 vlQKNuX4MV6hMWWVLsE5rSGW/9aWDSuKmYHfMdb4OUvjsizC8rNpwc0aBPJBFjGm Vp4a8G6wwZWVfpVmpUNIYO122UqCi9Q+z4SeDN8J9ZzuOy8SdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9LBWYCKQ3KiinrPBdhv3FEzXglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzIyZjM3MDQtZDc5OC0z MDU5LWI4MTItOWUwNTBmNDFkYzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSgsfbvuBFtsPscP6PTfYPCJuYRFI0rXC2iF41tDT7wqFKrojKnSP6G Sh6AhMHQ7ulsonJMI98XQVeXOP7X8T9QLoBbEjlt9w15ehkFw93gg3v/w+2Jee24 iZqlmIw/b8OxRuUa6q7/AE1Dpvjn76oLRuBWDLU4LpIVh8hzASlzIqDYPiUzAN5g WBfGb6lSCt3h/les71rjNShLB9wvUWwPIJSUz0Ke5LAVnAj5aaFVIBq51w3guOMx y5/lmbs6+GCkkOYnnXEn1MQWA5zKQEcNCV3UlVjfKSIpJLjW8xCVnqBxXwFxvhbZ eCHazm14g0ANhGhZRG4dWNgjtG3fFCk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:15 2025 by rpki-client