$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa File: a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa (raw, json) Hash identifier: ULab+1A1Bi9YmHUpx1iNdGMCk/ELo6Bq6IY52VSuYKk= Subject key identifier: A2:7F:2E:AB:68:F1:4E:D9:B5:72:67:F8:76:CA:13:FE:D2:22:FC:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AD877B09962E3B451D5FE5880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa Signing time: Wed 13 Aug 2025 18:36:32 +0000 ROA not before: Wed 13 Aug 2025 18:36:32 +0000 ROA not after: Tue 11 Nov 2025 19:36:32 +0000 asID: 7029 IP address blocks: 71.29.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d8:77:b0:99:62:e3:b4:51:d5:fe:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 13 18:36:32 2025 GMT Not After : Nov 11 19:36:32 2025 GMT Subject: CN=e23b972a-964a-474d-81cb-67a97461df9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:18:18:8c:f6:4f:72:06:55:17:61:0b:fb: f6:4d:65:13:d0:de:37:46:34:33:57:92:17:97:63: e2:00:98:c4:2d:f8:be:3b:98:12:5f:a1:ae:e6:cb: 8e:ae:a8:27:84:2d:84:05:fc:63:a1:e9:5d:12:0d: 88:36:c6:33:08:f1:3f:f8:ee:86:dd:38:9f:63:19: ca:42:67:c2:d8:e5:96:8e:71:9f:c6:73:af:72:c4: 4f:b8:0d:16:d4:1b:7a:58:71:ca:6c:b4:65:4b:ec: 3e:f5:c2:dc:6d:8a:0d:28:e2:0b:56:cb:59:34:18: 2a:1d:ba:68:53:5e:53:d3:ae:e8:ca:0d:43:68:06: 58:6e:27:dd:2c:6d:6c:0c:76:81:32:a4:9a:df:9f: 27:31:52:02:36:5e:c1:c7:f2:66:26:1f:04:f6:f9: f1:a4:e3:0e:66:df:eb:9b:f2:c4:f8:a9:2c:34:11: 59:a5:ad:e5:31:cf:c5:0d:f8:ea:44:f8:fc:44:44: ab:a5:25:5b:8f:b0:b3:bf:20:d8:2e:8e:5f:fb:c1: 85:56:88:d7:34:cf:55:c5:a0:6c:5e:6b:da:ff:46: 75:b3:2e:d8:e4:02:38:bc:ba:96:a2:d4:cd:83:25: cc:df:4f:ab:60:82:28:61:bd:42:50:cc:51:03:69: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7F:2E:AB:68:F1:4E:D9:B5:72:67:F8:76:CA:13:FE:D2:22:FC:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bb:33:de:26:02:59:f3:54:4a:b8:72:fb:9b:3a:ae:66:3a: b2:25:fc:a6:67:3f:2a:70:86:a2:e2:08:12:23:96:dc:e1:9b: 3a:5e:eb:a9:51:bd:dd:b1:9b:4f:c9:cc:1e:61:23:5d:ef:c1: 54:9c:e8:1e:99:8a:e9:ad:6d:a8:4c:eb:49:ea:48:e2:2d:95: 46:9e:e4:54:65:ed:bb:e5:ee:81:96:4e:a0:5b:38:d5:66:f8: 9f:58:4c:bc:1e:b0:c8:df:7d:40:3c:ef:de:85:a0:e2:8b:d3: 14:cf:2b:02:86:74:d8:00:b0:ee:e8:74:59:0a:12:d3:e7:1f: 08:f7:46:46:de:81:69:64:02:a6:5c:77:ba:a9:e7:a8:76:44: 71:52:1f:0d:19:c7:5f:32:7b:30:6b:9d:d1:e8:02:ef:2f:f7: 39:88:00:01:72:1c:be:70:30:97:43:6f:5b:3e:26:e5:c9:79: e4:10:2b:1e:0b:36:a6:29:cd:21:a7:f6:cb:dc:85:06:27:5e: d0:0a:d2:5c:65:b2:23:92:0c:3e:51:39:f2:0e:ba:a9:9b:f8: de:4c:cf:6a:b2:c5:d1:30:f7:7b:f7:67:e0:19:30:7c:dc:5b: 87:26:35:2c:f3:5e:02:25:df:4c:a2:b5:bb:b8:98:3a:4b:fb: 77:66:f7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErYd7CZYuO0UdX+WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMzE4MzYzMloXDTI1MTExMTE5MzYzMlowLzEtMCsGA1UEAxMk ZTIzYjk3MmEtOTY0YS00NzRkLTgxY2ItNjdhOTc0NjFkZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMoYGIz2T3IGVRdhC/v2TWUT0N43RjQzV5IX l2PiAJjELfi+O5gSX6Gu5suOrqgnhC2EBfxjoeldEg2INsYzCPE/+O6G3TifYxnK QmfC2OWWjnGfxnOvcsRPuA0W1Bt6WHHKbLRlS+w+9cLcbYoNKOILVstZNBgqHbpo U15T067oyg1DaAZYbifdLG1sDHaBMqSa358nMVICNl7Bx/JmJh8E9vnxpOMOZt/r m/LE+KksNBFZpa3lMc/FDfjqRPj8RESrpSVbj7CzvyDYLo5f+8GFVojXNM9VxaBs Xmva/0Z1sy7Y5AI4vLqWotTNgyXM30+rYIIoYb1CUMxRA2ndxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJ/Lqto8U7ZtXJn+HbKE/7SIvxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdjZjZmNTUtMjdhOC0z YzU0LTk2YjMtZjIzMjY0YjhhODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB27M94mAlnzVEq4cvubOq5mOrIl/KZnPypwhqLiCBIjltzhmzpe66lR vd2xm0/JzB5hI13vwVSc6B6ZiumtbahM60nqSOItlUae5FRl7bvl7oGWTqBbONVm +J9YTLwesMjffUA8796FoOKL0xTPKwKGdNgAsO7odFkKEtPnHwj3RkbegWlkAqZc d7qp56h2RHFSHw0Zx18yezBrndHoAu8v9zmIAAFyHL5wMJdDb1s+JuXJeeQQKx4L NqYpzSGn9svchQYnXtAK0lxlsiOSDD5ROfIOuqmb+N5Mz2qyxdEw93v3Z+AZMHzc W4cmNSzzXgIl30yitbu4mDpL+3dm9+o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:19 2025 by rpki-client