$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa File: 8b432e27-f978-3a71-b9d3-3a44510323be.roa (raw, json) Hash identifier: DjCpDxt6SPLSZpXDAVRcBv4dHMB92m4bXkAa7BJ0OIs= Subject key identifier: 49:3F:58:F2:CF:C4:16:5F:7E:3D:0D:2C:2C:A3:7A:8A:7A:8C:38:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A58CAFB38AABE7B41E40468D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.29.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:fb:38:aa:be:7b:41:e4:04:68:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=bfc2a76b-efb2-47f2-9d2a-64099f041c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ff:15:5d:e3:4b:ce:0a:a2:a0:28:14:0c:05: 0a:40:da:e4:d9:9b:e6:cc:0e:ee:09:2a:c8:1c:a9: ce:9b:82:8f:9f:70:4c:07:70:18:22:30:3f:5a:3d: 67:87:6b:bf:76:dd:ad:74:ed:c1:74:37:77:63:d2: d8:d6:ac:02:79:59:6d:db:eb:a6:4d:3d:c6:1c:eb: 00:17:d6:24:4c:11:3d:1c:c1:a7:0a:46:7b:f9:4e: ad:08:d7:b7:86:23:e6:fe:cc:ce:4b:0f:b8:81:b8: 18:83:89:f9:cc:ba:da:0b:51:f3:5b:dd:7a:8e:48: 35:1b:c3:9e:b1:61:1b:e4:26:60:f8:dd:16:eb:09: 2d:9d:43:29:66:1a:cb:90:e4:02:da:57:e8:d3:bf: 21:f7:2e:38:18:2f:17:ac:c9:c4:91:bf:d2:53:12: 4d:e9:22:a9:10:f5:40:4b:45:3e:00:3a:10:77:be: 94:76:8e:49:6a:de:5c:b8:37:e2:c7:b3:77:21:01: 2b:be:7b:92:80:ae:f8:d6:0a:41:2f:c5:3b:cf:1d: 24:9a:af:e1:7c:55:07:84:99:27:8b:8e:e0:ff:13: 60:52:35:5e:ea:36:9c:93:e0:45:0e:fc:25:1f:29: a1:c2:d8:31:ea:d1:06:5a:e2:7d:3b:37:9d:7a:99: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3F:58:F2:CF:C4:16:5F:7E:3D:0D:2C:2C:A3:7A:8A:7A:8C:38:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8b432e27-f978-3a71-b9d3-3a44510323be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:2e:2a:76:e5:7f:2a:4c:78:44:71:61:22:48:db:a8:96:1e: 96:33:bf:f4:0b:e1:12:85:2c:bb:fe:7f:5a:87:72:7f:4f:f0: 80:86:23:70:4f:a2:39:e5:db:99:db:96:ab:82:4a:30:13:19: 41:cc:b8:ef:4f:12:69:40:d1:52:82:75:a4:6e:b7:88:7a:73: 9f:e9:74:10:30:0d:df:3d:89:80:74:0d:f1:56:91:e7:64:39: a1:6e:66:fc:a0:bb:3c:44:dd:b5:7e:af:25:28:3c:e8:e7:00: ce:dd:94:e3:6a:43:56:a1:b2:e2:65:2b:69:a8:77:89:89:ff: 92:ea:c4:d2:96:81:b4:d7:4b:92:3b:88:00:84:41:dd:7c:cf: f9:97:85:87:d6:b5:67:16:be:99:93:2e:df:ff:05:93:8c:fb: a7:e7:2b:a7:c3:3b:18:04:38:ab:0b:ad:9d:c8:95:f9:5f:f7: fa:9c:dd:cd:5a:b2:e8:fb:14:92:51:c6:55:3f:4d:03:87:7d: 8d:ad:83:50:79:42:d6:3f:33:13:b1:30:36:85:28:2c:38:38: 61:cd:71:47:e6:e6:61:27:75:35:12:6b:75:b3:5b:d6:0e:81: a6:03:0e:49:26:46:3b:6e:d9:6a:d0:cf:ad:56:de:ab:9f:df: 9d:4c:99:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyvs4qr57QeQEaNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk YmZjMmE3NmItZWZiMi00N2YyLTlkMmEtNjQwOTlmMDQxYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf8VXeNLzgqioCgUDAUKQNrk2ZvmzA7uCSrI HKnOm4KPn3BMB3AYIjA/Wj1nh2u/dt2tdO3BdDd3Y9LY1qwCeVlt2+umTT3GHOsA F9YkTBE9HMGnCkZ7+U6tCNe3hiPm/szOSw+4gbgYg4n5zLraC1HzW916jkg1G8Oe sWEb5CZg+N0W6wktnUMpZhrLkOQC2lfo078h9y44GC8XrMnEkb/SUxJN6SKpEPVA S0U+ADoQd76Udo5Jat5cuDfix7N3IQErvnuSgK741gpBL8U7zx0kmq/hfFUHhJkn i47g/xNgUjVe6jack+BFDvwlHymhwtgx6tEGWuJ9OzedepnMzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk/WPLPxBZffj0NLCyjeop6jDg5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGI0MzJlMjctZjk3OC0z YTcxLWI5ZDMtM2E0NDUxMDMyM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcuKnblfypMeERxYSJI26iWHpYzv/QL4RKFLLv+f1qHcn9P8ICGI3BP ojnl25nblquCSjATGUHMuO9PEmlA0VKCdaRut4h6c5/pdBAwDd89iYB0DfFWkedk OaFuZvyguzxE3bV+ryUoPOjnAM7dlONqQ1ahsuJlK2mod4mJ/5LqxNKWgbTXS5I7 iACEQd18z/mXhYfWtWcWvpmTLt//BZOM+6fnK6fDOxgEOKsLrZ3Ilflf9/qc3c1a suj7FJJRxlU/TQOHfY2tg1B5QtY/MxOxMDaFKCw4OGHNcUfm5mEndTUSa3WzW9YO gaYDDkkmRjtu2WrQz61W3quf351MmdU= -----END CERTIFICATE-----Generated at Tue Jul 1 00:13:50 2025 by rpki-client