$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa File: b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa (raw, json) Hash identifier: siMK0/llNGjIdVJ3hR2V3lmDQ2dG38DWsEtSLTLK3AY= Subject key identifier: 48:DF:F4:0E:FF:57:F4:04:08:4D:61:01:38:08:4F:2A:B9:92:DD:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669211E49CEE9D0814E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:92:11:e4:9c:ee:9d:08:14:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=61c47691-2374-4860-8808-828bda0db67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c1:9b:ae:3d:82:5f:a1:0a:a5:03:9c:80:77: 83:09:21:3b:d1:d2:4a:83:60:f7:56:df:05:fe:05: 38:68:a2:e1:83:e8:74:a1:d1:8d:bc:d4:66:97:ae: 53:8b:ee:56:d0:11:be:40:5d:78:49:e1:c6:ac:53: 52:bc:0a:1a:df:e3:eb:8e:fe:75:f8:c6:4e:5c:33: d7:1e:aa:56:c8:42:45:45:48:ae:96:9d:0b:6e:d7: 64:c1:e2:5c:05:23:b8:45:7c:90:91:76:13:9e:72: be:62:2e:a7:21:62:4b:8c:18:38:63:45:13:58:a7: 16:c0:27:37:ef:bb:aa:5a:ee:12:96:ef:34:0b:ef: c2:2b:60:1f:40:ac:ff:d7:38:4c:a0:c9:7a:79:48: 50:59:78:f4:80:27:9f:48:fc:9b:83:99:65:15:7f: a8:da:9f:d2:7b:ad:01:22:eb:cb:0f:e0:a0:83:3d: cf:7a:6d:09:60:da:5f:54:1d:3a:f7:01:b0:63:d0: 18:14:67:8b:58:e4:dd:eb:63:f5:55:7e:23:11:e3: c1:89:e2:45:97:2f:ca:7e:c3:35:f7:6a:5a:93:c2: 66:07:98:d3:1e:97:6c:3a:20:85:9f:7c:c8:70:d7: 55:7c:02:fe:f4:be:3e:7f:a9:20:f6:6d:84:be:c0: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DF:F4:0E:FF:57:F4:04:08:4D:61:01:38:08:4F:2A:B9:92:DD:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c7:f5:74:24:ce:b1:66:2d:e8:1e:d1:6e:a6:b6:b9:68:1c: d3:49:b6:8a:38:62:f9:a6:03:22:50:56:aa:9d:b0:91:8e:8d: b1:ed:5d:d9:fe:ac:e5:6b:d5:d0:fe:e7:a0:62:dd:9e:b5:a4: e1:60:84:80:2f:58:ba:c5:6f:a4:e2:d4:c4:6e:3b:51:65:30: 66:83:d6:3e:c5:fd:28:14:4d:37:b9:4d:61:c3:a6:83:4b:ac: 40:22:ed:6b:1a:a6:ad:b8:c9:92:c9:28:63:11:8d:19:c3:1c: 44:f8:4b:0e:e9:fb:21:6d:c6:fb:03:64:dc:28:e3:07:7a:f8: 8d:15:75:b5:3b:fa:9d:a9:20:dd:12:06:78:43:e4:18:97:e6: e9:5e:96:13:de:f0:ee:0b:03:f9:5e:14:bf:a2:f7:ca:f8:9a: 14:ba:9f:4f:3e:ee:df:fa:4e:eb:07:07:81:5a:51:cc:b6:5e: 0e:23:a4:3c:ac:38:1a:3c:d9:cc:20:3b:99:06:32:8e:4c:e3: b2:b0:57:bb:40:1f:d7:9d:c9:29:52:09:d8:f3:95:76:bd:9e: 35:0b:85:ca:b5:26:7a:bf:7d:ed:6b:24:5b:04:70:58:3d:28: 7f:8c:17:5f:3c:2b:ec:5e:80:cf:b4:5e:b4:a4:69:2b:45:e8: ce:01:9a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpIR5JzunQgU4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NjFjNDc2OTEtMjM3NC00ODYwLTg4MDgtODI4YmRhMGRiNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicGbrj2CX6EKpQOcgHeDCSE70dJKg2D3Vt8F /gU4aKLhg+h0odGNvNRml65Ti+5W0BG+QF14SeHGrFNSvAoa3+Prjv51+MZOXDPX HqpWyEJFRUiulp0LbtdkweJcBSO4RXyQkXYTnnK+Yi6nIWJLjBg4Y0UTWKcWwCc3 77uqWu4Slu80C+/CK2AfQKz/1zhMoMl6eUhQWXj0gCefSPybg5llFX+o2p/Se60B IuvLD+Cggz3Pem0JYNpfVB069wGwY9AYFGeLWOTd62P1VX4jEePBieJFly/KfsM1 92pak8JmB5jTHpdsOiCFn3zIcNdVfAL+9L4+f6kg9m2EvsBOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjf9A7/V/QECE1hATgITyq5kt38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjJjZjMzYzktMjVlMC0z YjA5LWEzNTItZTYxODhmYTM3Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvH9XQkzrFmLege0W6mtrloHNNJtoo4YvmmAyJQVqqdsJGOjbHtXdn+ rOVr1dD+56Bi3Z61pOFghIAvWLrFb6Ti1MRuO1FlMGaD1j7F/SgUTTe5TWHDpoNL rEAi7Wsapq24yZLJKGMRjRnDHET4Sw7p+yFtxvsDZNwo4wd6+I0VdbU7+p2pIN0S BnhD5BiX5ulelhPe8O4LA/leFL+i98r4mhS6n08+7t/6TusHB4FaUcy2Xg4jpDys OBo82cwgO5kGMo5M47KwV7tAH9edySlSCdjzlXa9njULhcq1Jnq/fe1rJFsEcFg9 KH+MF188K+xegM+0XrSkaStF6M4BmvE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:04 2025 by rpki-client