$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json) Hash identifier: H1aMdPvEI/g8r9wuOBqVKuGBKGHkf17YOV5OWOmStOc= Subject key identifier: C2:55:37:8C:4A:F1:D0:48:0B:1A:76:14:59:02:E1:14:E0:34:38:6F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66925E54BCCDA8BC91C500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:92:5e:54:bc:cd:a8:bc:91:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=8b36ee90-2576-4dfb-b6eb-32ec52c614ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:20:2e:e0:0b:2b:79:53:15:26:0b:60:f4: cf:81:ba:1b:d0:66:bc:58:aa:a7:8a:3e:92:ae:3e: 61:16:15:1b:4c:8f:36:75:48:17:81:1d:24:49:62: fa:9b:fe:d2:11:b8:32:93:00:85:01:cf:94:bd:47: 10:bc:9f:48:ac:c4:fa:b7:b9:2f:e5:24:d8:fa:11: bd:ce:5c:03:49:d0:fe:e6:81:7e:fc:fb:ca:38:7a: 53:fe:47:6f:52:e4:f5:fd:72:e0:bc:01:30:7c:48: 99:df:95:fa:6b:55:4f:9d:c6:39:0a:47:b8:15:9b: 42:fc:aa:60:eb:f7:bf:dc:f8:85:df:5c:db:d1:e1: 3b:52:89:5e:27:09:58:fa:5d:c4:29:32:dd:88:16: 3d:fc:aa:e8:b1:41:48:68:f6:fb:60:c5:1d:76:f2: 0b:a1:21:b3:55:4a:c8:1a:81:0a:f2:37:eb:66:d3: 7c:a6:a9:46:32:5b:5e:44:d0:a0:10:c3:60:f3:a0: e9:0e:26:cd:2c:da:de:48:e1:fb:84:8f:dc:36:81: d1:0d:1a:7d:18:fd:ca:4b:3f:d0:06:07:8a:72:4c: b7:fd:5b:da:b5:17:5c:a4:a7:4d:ab:23:60:2e:6e: 0c:8e:ad:05:1a:50:b3:e5:8f:40:cd:b6:59:71:17: 54:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:55:37:8C:4A:F1:D0:48:0B:1A:76:14:59:02:E1:14:E0:34:38:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:21:f0:be:1b:29:9a:34:66:9f:86:ca:81:45:0b:df:bc:cb: 1a:ef:0c:67:c2:5e:17:37:a5:1a:fe:df:10:3e:4a:3d:87:b3: 9f:19:99:a1:1d:83:ad:54:6a:8b:93:1e:7e:fa:5b:a3:9d:2c: 97:31:3b:a8:ff:02:ce:94:1f:3c:66:d0:e8:34:e4:47:46:35: d1:78:d2:37:e9:50:1f:76:28:43:47:a2:c2:8c:93:d2:4a:31: 06:7e:59:5c:61:41:d2:ac:5b:6c:81:f6:0e:44:67:26:06:29: 92:bf:a2:e0:12:e3:0d:c1:52:55:42:cd:ff:fd:2f:c1:c4:16: f2:cc:d8:81:30:15:70:77:48:63:90:b2:52:20:b2:4e:05:10: 09:d0:38:56:f7:bf:60:8b:8d:c5:78:be:69:d5:e5:f7:1f:ef: a7:ad:cb:90:ff:79:79:e6:c1:57:22:47:3f:9d:8a:cc:37:63: 54:13:fc:fb:eb:0a:bb:f7:d6:19:eb:0a:8d:0c:22:08:92:1d: 77:9f:84:63:15:6a:de:5a:a5:e1:1c:56:81:44:d9:6c:11:0f: 64:18:c6:df:48:95:4f:7f:2a:19:c5:81:19:6c:7b:b8:1f:e6: 4c:65:42:8c:e5:27:ab:83:6f:f9:f2:f3:80:3c:6d:65:f1:98: cf:b0:f9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpJeVLzNqLyRxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OGIzNmVlOTAtMjU3Ni00ZGZiLWI2ZWItMzJlYzUyYzYxNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkQgLuALK3lTFSYLYPTPgbob0Ga8WKqnij6S rj5hFhUbTI82dUgXgR0kSWL6m/7SEbgykwCFAc+UvUcQvJ9IrMT6t7kv5STY+hG9 zlwDSdD+5oF+/PvKOHpT/kdvUuT1/XLgvAEwfEiZ35X6a1VPncY5Cke4FZtC/Kpg 6/e/3PiF31zb0eE7UoleJwlY+l3EKTLdiBY9/KrosUFIaPb7YMUddvILoSGzVUrI GoEK8jfrZtN8pqlGMlteRNCgEMNg86DpDibNLNreSOH7hI/cNoHRDRp9GP3KSz/Q BgeKcky3/VvatRdcpKdNqyNgLm4Mjq0FGlCz5Y9AzbZZcRdUzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJVN4xK8dBICxp2FFkC4RTgNDhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY3NTRmN2ItOTU0Ny0z OTQ3LWJlY2EtZjEzZGQ5OTYyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUh8L4bKZo0Zp+GyoFFC9+8yxrvDGfCXhc3pRr+3xA+Sj2Hs58ZmaEd g61UaouTHn76W6OdLJcxO6j/As6UHzxm0Og05EdGNdF40jfpUB92KENHosKMk9JK MQZ+WVxhQdKsW2yB9g5EZyYGKZK/ouAS4w3BUlVCzf/9L8HEFvLM2IEwFXB3SGOQ slIgsk4FEAnQOFb3v2CLjcV4vmnV5fcf76ety5D/eXnmwVciRz+disw3Y1QT/Pvr Crv31hnrCo0MIgiSHXefhGMVat5apeEcVoFE2WwRD2QYxt9IlU9/KhnFgRlse7gf 5kxlQozlJ6uDb/ny84A8bWXxmM+w+fk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:50 2025 by rpki-client