$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa File: 96754f7b-9547-3947-beca-f13dd9962e64.roa (raw, json) Hash identifier: liM/FiPJxQtLNOcgd1w2+BfZb+R2jQ7DTK/bF17/sM4= Subject key identifier: 3F:A7:C2:A5:DC:85:D0:C5:AA:15:07:23:FC:3D:AD:88:3B:8F:22:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA9068887FF55696990390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.28.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:90:68:88:7f:f5:56:96:99:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=5f2fa5b9-6f8c-4fd6-a070-7facfebd50ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:4f:30:7c:9b:58:d5:50:8b:cf:c0:45:4c: 03:fa:ca:ef:74:80:6a:24:c9:83:3d:bd:78:8c:18: 8f:60:56:d9:61:96:5c:83:c7:d5:a7:48:07:a8:aa: d8:fc:b3:46:42:9b:c4:05:76:f4:0f:e2:19:22:ba: 63:33:41:96:ca:a9:30:74:e3:0e:16:5f:61:ca:bb: 28:cd:5d:33:2c:2d:37:5a:10:c6:57:6d:7f:34:25: fd:58:0b:d4:3f:1a:82:61:71:94:4a:1a:c3:81:10: e8:07:41:41:09:b7:49:d8:e8:bc:a2:3a:00:98:8a: 1e:7a:99:f9:64:a5:83:7c:9b:46:2c:0f:9b:6c:e3: f7:d7:09:84:67:3e:12:73:3d:b2:cc:6c:a9:85:6c: b8:a6:29:61:b7:94:12:cc:0d:aa:8f:35:6b:06:e4: d9:7c:ab:18:67:d0:bc:a2:48:4f:fa:ef:ab:53:68: 31:71:cf:ee:54:27:22:f5:e2:8e:7b:59:16:e3:37: 85:53:55:07:a9:12:9d:81:7f:cc:e3:c9:57:90:76: ab:04:54:2f:49:58:14:a9:f3:19:13:10:fa:3e:bf: 5a:94:c8:fd:a5:22:e3:62:61:11:63:25:1d:dd:72: 6a:52:ad:0b:6b:ad:61:b9:c3:63:e5:af:20:55:8a: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:C2:A5:DC:85:D0:C5:AA:15:07:23:FC:3D:AD:88:3B:8F:22:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96754f7b-9547-3947-beca-f13dd9962e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d1:d1:a5:95:25:09:55:77:15:36:3e:74:5d:1c:cc:23:6f: 8d:2b:13:02:5d:d2:eb:12:bd:13:2f:e2:0c:d2:7c:e4:e7:c6: 13:d0:99:41:49:ed:72:a6:3a:66:be:32:04:01:5c:5c:f4:d0: 6f:08:7e:5d:ff:75:37:5b:1b:f3:a6:fa:73:be:a3:c8:5b:80: a4:b8:4f:6e:34:c3:57:c8:20:53:b3:6c:bb:f7:a0:7a:56:84: 2e:3e:c2:f5:47:f6:30:71:2f:b1:c3:d1:17:5f:3e:5b:32:24: af:81:25:53:db:fa:6d:04:76:f0:18:0c:76:46:21:2a:8a:60: 18:94:bd:42:38:59:db:0e:71:00:de:b9:e2:68:69:73:5b:84: b6:69:05:11:d4:0e:b0:b7:4f:03:1e:36:4b:39:e9:01:07:81: dc:21:57:a4:22:f8:e4:9a:64:dd:a7:45:31:42:b2:b2:5e:85: 54:16:51:a9:0e:87:89:55:06:b3:71:c1:cd:90:e5:a2:1c:a8: a1:e0:e4:0b:36:10:46:2e:02:c9:4a:07:e9:06:21:d5:64:44: 82:36:8a:24:ef:c5:dd:a3:29:7e:6a:fc:33:fe:3d:40:fe:5c: 20:53:e9:1b:f4:f9:3d:4a:40:20:60:05:bd:c0:bd:80:d0:4d: a9:35:2c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpBoiH/1VpaZA5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NWYyZmE1YjktNmY4Yy00ZmQ2LWEwNzAtN2ZhY2ZlYmQ1MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhhPMHybWNVQi8/ARUwD+srvdIBqJMmDPb14 jBiPYFbZYZZcg8fVp0gHqKrY/LNGQpvEBXb0D+IZIrpjM0GWyqkwdOMOFl9hyrso zV0zLC03WhDGV21/NCX9WAvUPxqCYXGUShrDgRDoB0FBCbdJ2Oi8ojoAmIoeepn5 ZKWDfJtGLA+bbOP31wmEZz4Scz2yzGyphWy4pilht5QSzA2qjzVrBuTZfKsYZ9C8 okhP+u+rU2gxcc/uVCci9eKOe1kW4zeFU1UHqRKdgX/M48lXkHarBFQvSVgUqfMZ ExD6Pr9alMj9pSLjYmERYyUd3XJqUq0La61hucNj5a8gVYrWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+nwqXchdDFqhUHI/w9rYg7jyINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTY3NTRmN2ItOTU0Ny0z OTQ3LWJlY2EtZjEzZGQ5OTYyZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/R0aWVJQlVdxU2PnRdHMwjb40rEwJd0usSvRMv4gzSfOTnxhPQmUFJ 7XKmOma+MgQBXFz00G8Ifl3/dTdbG/Om+nO+o8hbgKS4T240w1fIIFOzbLv3oHpW hC4+wvVH9jBxL7HD0RdfPlsyJK+BJVPb+m0EdvAYDHZGISqKYBiUvUI4WdsOcQDe ueJoaXNbhLZpBRHUDrC3TwMeNks56QEHgdwhV6Qi+OSaZN2nRTFCsrJehVQWUakO h4lVBrNxwc2Q5aIcqKHg5As2EEYuAslKB+kGIdVkRII2iiTvxd2jKX5q/DP+PUD+ XCBT6Rv0+T1KQCBgBb3AvYDQTak1LEw= -----END CERTIFICATE-----Generated at Wed Jul 2 01:06:04 2025 by rpki-client