$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa File: a5d84f8f-2d00-3697-baa6-eb05452b00de.roa (raw, json) Hash identifier: MOXfvT58D7J1enQ61r1KKjd3aPI5DADHiIiFM/kJuSI= Subject key identifier: BD:00:67:5E:B6:17:CA:C6:6D:EA:A5:76:B3:D7:C1:14:0C:0A:1C:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AD895C57784A2CF33FC054340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa Signing time: Wed 13 Aug 2025 19:37:08 +0000 ROA not before: Wed 13 Aug 2025 19:37:08 +0000 ROA not after: Tue 11 Nov 2025 20:37:08 +0000 asID: 7029 IP address blocks: 71.29.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d8:95:c5:77:84:a2:cf:33:fc:05:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 13 19:37:08 2025 GMT Not After : Nov 11 20:37:08 2025 GMT Subject: CN=e3a363c8-3315-4653-9361-39bd38590631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:55:60:52:81:37:8c:d0:2c:d6:57:a5:74:7b: c2:fb:6d:f0:7d:98:b3:5f:dc:8a:49:7a:5a:3c:e3: f7:d0:28:08:48:10:36:b5:36:dc:c5:a3:89:a0:12: 09:9b:16:d3:9c:8b:69:4a:4c:69:a8:67:42:41:da: 69:6d:c9:b5:26:b0:c7:26:9f:51:f5:37:5a:c9:89: a0:00:d7:de:f6:51:21:4b:6b:b5:dc:9e:35:48:f6: 7f:3c:7a:38:1e:93:5a:ad:fd:f5:d6:80:82:7d:eb: b3:4f:2e:94:82:dd:e9:cd:c9:24:44:e1:1e:c9:44: b0:28:2b:5a:c9:fd:42:b3:8d:2a:42:56:1f:1d:b5: aa:a4:52:2f:7b:d1:f3:19:d3:ac:77:d8:7e:13:5c: 95:71:23:73:a2:94:d4:8e:b4:c1:91:77:d7:6f:ce: 3f:54:3c:89:64:74:7c:cb:11:9a:ff:61:82:0d:a2: 9f:33:7e:94:1d:38:a3:a4:24:87:23:6e:fc:53:2f: 92:c6:d7:4f:4d:53:53:0e:4a:0e:fb:c1:2f:53:30: d5:f0:c5:bd:11:4a:ff:b4:30:f5:c1:53:24:c9:79: fc:09:46:0e:9c:55:a9:6b:a3:e6:5f:ca:9b:a5:84: 62:3c:c9:14:53:13:43:a3:2e:3a:9a:5f:0c:3a:ef: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:00:67:5E:B6:17:CA:C6:6D:EA:A5:76:B3:D7:C1:14:0C:0A:1C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d1:f3:31:42:67:e9:06:5b:e5:63:c0:ca:fe:6a:ab:d7:f0: 8d:33:8c:35:17:c0:2b:ec:7f:25:20:8a:04:a2:88:19:79:50: 32:04:2e:a3:9c:e8:66:51:70:81:d1:27:58:0a:97:c4:16:91: d6:4f:f5:6c:a1:f2:32:41:69:4a:13:b3:af:93:24:20:9c:3b: e6:47:59:b3:37:bb:b4:d5:86:fd:d0:b6:44:9c:51:89:52:ac: c7:0f:9c:de:69:32:15:3b:d9:89:24:92:53:2c:8b:88:a6:9a: d0:d5:7e:3a:95:c9:55:29:f8:f6:e3:fc:d5:93:4a:94:f1:0e: 80:65:9e:a2:89:8b:4d:be:c1:0d:29:ae:b3:ae:ac:8f:c4:86: da:36:51:f8:62:9d:01:c8:6e:3a:11:e0:83:39:f0:bb:09:f7: c2:62:03:5c:60:19:56:09:0f:1f:0c:e5:7d:59:74:9d:6e:38: 94:6f:e5:bc:00:fb:48:e3:c9:c1:33:12:d9:a7:56:b4:34:39: 99:0f:fc:18:cf:1d:47:ea:e1:49:7d:75:4e:97:d6:25:51:e3: f9:1c:06:bd:90:86:32:b5:28:4c:17:8b:14:7d:3d:60:70:5a: c1:b7:55:39:57:04:d1:4f:9d:31:bd:10:0b:a1:9b:cd:c3:b2: 3a:54:e7:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYlcV3hKLPM/wFQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMzE5MzcwOFoXDTI1MTExMTIwMzcwOFowLzEtMCsGA1UEAxMk ZTNhMzYzYzgtMzMxNS00NjUzLTkzNjEtMzliZDM4NTkwNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1VgUoE3jNAs1leldHvC+23wfZizX9yKSXpa POP30CgISBA2tTbcxaOJoBIJmxbTnItpSkxpqGdCQdppbcm1JrDHJp9R9TdayYmg ANfe9lEhS2u13J41SPZ/PHo4HpNarf311oCCfeuzTy6Ugt3pzckkROEeyUSwKCta yf1Cs40qQlYfHbWqpFIve9HzGdOsd9h+E1yVcSNzopTUjrTBkXfXb84/VDyJZHR8 yxGa/2GCDaKfM36UHTijpCSHI278Uy+SxtdPTVNTDkoO+8EvUzDV8MW9EUr/tDD1 wVMkyXn8CUYOnFWpa6PmX8qbpYRiPMkUUxNDoy46ml8MOu9RTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0AZ162F8rGbeqldrPXwRQMChxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTVkODRmOGYtMmQwMC0z Njk3LWJhYTYtZWIwNTQ1MmIwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPR8zFCZ+kGW+VjwMr+aqvX8I0zjDUXwCvsfyUgigSiiBl5UDIELqOc 6GZRcIHRJ1gKl8QWkdZP9Wyh8jJBaUoTs6+TJCCcO+ZHWbM3u7TVhv3QtkScUYlS rMcPnN5pMhU72YkkklMsi4immtDVfjqVyVUp+Pbj/NWTSpTxDoBlnqKJi02+wQ0p rrOurI/Ehto2UfhinQHIbjoR4IM58LsJ98JiA1xgGVYJDx8M5X1ZdJ1uOJRv5bwA +0jjycEzEtmnVrQ0OZkP/BjPHUfq4Ul9dU6X1iVR4/kcBr2QhjK1KEwXixR9PWBw WsG3VTlXBNFPnTG9EAuhm83DsjpU520= -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:59 2025 by rpki-client