$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa File: c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa (raw, json) Hash identifier: qwSLDh1mUyJ3oNGdvomLgc64QfLKL7TnJ4X+wFMVlHg= Subject key identifier: 7E:CC:17:B5:8C:CC:B9:26:00:CE:F3:B2:BA:72:CA:8C:2C:9A:17:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AD4BE76CE1EF336D6E1BC1C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa Signing time: Tue 12 Aug 2025 10:35:54 +0000 ROA not before: Tue 12 Aug 2025 10:35:54 +0000 ROA not after: Mon 10 Nov 2025 11:35:54 +0000 asID: 7029 IP address blocks: 71.29.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d4:be:76:ce:1e:f3:36:d6:e1:bc:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 12 10:35:54 2025 GMT Not After : Nov 10 11:35:54 2025 GMT Subject: CN=9b224505-88f2-4a2a-8669-36e84ecb57f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a5:d1:0e:80:ed:a3:96:01:64:92:f4:46:53: cc:9b:8c:2d:b1:dd:18:b9:52:d6:9b:4b:99:5d:8f: 2c:59:98:31:1f:cd:5f:94:1e:8f:23:49:27:0a:4e: a4:98:1a:e4:20:cf:70:8d:ac:a9:d6:5f:e6:4c:4c: 54:ff:ba:9c:90:ae:c1:e6:9c:73:b6:d2:90:a5:3f: db:60:57:2d:1b:73:36:aa:bf:78:4d:59:90:c5:17: 8a:03:c4:35:f2:12:5b:02:75:4e:46:39:e6:96:91: 29:f6:af:64:1e:67:58:21:22:43:38:24:2c:cf:c6: 8b:54:d5:53:2d:1d:73:01:6f:2c:d6:c1:4b:89:ff: 7f:05:6c:c7:6c:52:a5:16:f1:15:2f:88:ae:da:64: 7c:7c:fe:b2:59:49:95:d0:88:e6:f8:06:b7:43:82: c6:b9:9a:1d:9a:11:be:57:00:de:40:3f:5c:a3:2c: 72:66:26:1e:3b:ac:2c:c7:4d:de:7a:0b:50:20:dc: a3:42:2e:24:f5:58:e7:b6:3b:81:b8:da:cc:1e:7a: c7:11:68:cd:01:8e:de:63:77:03:0f:d7:57:c2:6f: 18:59:52:32:68:eb:cc:6c:f0:51:8f:ee:8d:d3:cd: 2d:91:91:5d:2e:82:3f:95:d5:46:dc:18:2a:be:0a: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CC:17:B5:8C:CC:B9:26:00:CE:F3:B2:BA:72:CA:8C:2C:9A:17:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c1:b4:5a:31:79:59:10:c0:40:47:62:9a:c2:e2:ea:0f:ef: 75:3a:3a:08:f5:01:2f:a8:a6:67:0c:fd:17:11:8a:bc:a8:59: 83:08:bd:f8:e6:86:99:b7:e9:c1:1c:d4:af:98:2e:65:c8:ad: 60:b4:e8:ae:81:32:b0:64:60:a5:aa:45:12:73:66:2a:44:eb: 3a:df:77:eb:cf:e8:48:29:c3:9b:4e:ad:f9:1a:e6:c0:89:66: 61:c6:77:52:fc:77:e8:4a:97:15:0c:11:ea:22:aa:e5:31:6f: 66:8a:b7:b4:ed:88:31:54:1a:0f:2b:91:e1:fa:10:48:61:19: cf:82:60:5f:80:42:6b:85:d8:c1:de:21:94:d5:35:64:9b:95: 80:03:75:fc:5b:ac:4c:d3:f8:cf:e2:26:f8:fa:30:87:0b:b2: ff:4a:08:b1:5e:95:ed:bd:02:c2:cb:d2:24:4a:53:08:4a:f8: 8c:03:56:ac:cc:93:42:3d:80:19:ec:4c:ac:f5:68:5e:ec:c0: 8a:83:fb:06:96:39:8d:b5:28:cd:10:c7:c5:b2:c2:9a:c4:2e: 9c:d3:de:a8:7f:fb:20:30:bc:10:01:7f:df:de:9c:93:7e:25: 42:b5:8e:f7:64:6b:be:2c:ef:fa:eb:b6:fd:15:bc:09:2c:44: 40:cd:1b:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErUvnbOHvM21uG8HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMjEwMzU1NFoXDTI1MTExMDExMzU1NFowLzEtMCsGA1UEAxMk OWIyMjQ1MDUtODhmMi00YTJhLTg2NjktMzZlODRlY2I1N2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqXRDoDto5YBZJL0RlPMm4wtsd0YuVLWm0uZ XY8sWZgxH81flB6PI0knCk6kmBrkIM9wjayp1l/mTExU/7qckK7B5pxzttKQpT/b YFctG3M2qr94TVmQxReKA8Q18hJbAnVORjnmlpEp9q9kHmdYISJDOCQsz8aLVNVT LR1zAW8s1sFLif9/BWzHbFKlFvEVL4iu2mR8fP6yWUmV0Ijm+Aa3Q4LGuZodmhG+ VwDeQD9coyxyZiYeO6wsx03eegtQINyjQi4k9VjntjuBuNrMHnrHEWjNAY7eY3cD D9dXwm8YWVIyaOvMbPBRj+6N080tkZFdLoI/ldVG3BgqvgpfZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7MF7WMzLkmAM7zsrpyyowsmhceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMmVhOWQtNDZlMS0z NTU2LWExOGMtMTdjZTczZTQ4MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELBtFoxeVkQwEBHYprC4uoP73U6Ogj1AS+opmcM/RcRiryoWYMIvfjm hpm36cEc1K+YLmXIrWC06K6BMrBkYKWqRRJzZipE6zrfd+vP6Egpw5tOrfka5sCJ ZmHGd1L8d+hKlxUMEeoiquUxb2aKt7TtiDFUGg8rkeH6EEhhGc+CYF+AQmuF2MHe IZTVNWSblYADdfxbrEzT+M/iJvj6MIcLsv9KCLFele29AsLL0iRKUwhK+IwDVqzM k0I9gBnsTKz1aF7swIqD+waWOY21KM0Qx8WywprELpzT3qh/+yAwvBABf9/enJN+ JUK1jvdka74s7/rrtv0VvAksREDNG4U= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:08 2025 by rpki-client