$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8178ba2-235b-30e7-a41b-ff87de6fb9bb.roa File: c8178ba2-235b-30e7-a41b-ff87de6fb9bb.roa (raw, json) Hash identifier: fffk9h9TvGQ9l4jtmvBGkMZdUhylB4LeWd9mEg1MJr8= Subject key identifier: 5E:71:87:0D:3F:E8:B6:AA:18:21:93:DE:1F:8E:4E:6D:88:E8:E1:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AD4BE6A3FFE542197B7869600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8178ba2-235b-30e7-a41b-ff87de6fb9bb.roa Signing time: Tue 12 Aug 2025 10:35:48 +0000 ROA not before: Tue 12 Aug 2025 10:35:48 +0000 ROA not after: Mon 10 Nov 2025 11:35:48 +0000 asID: 7029 IP address blocks: 71.29.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d4:be:6a:3f:fe:54:21:97:b7:86:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 12 10:35:48 2025 GMT Not After : Nov 10 11:35:48 2025 GMT Subject: CN=3c70e228-f5b5-46fe-b195-df962895cccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:03:a6:f6:4b:55:bc:d2:93:ce:a6:dc:dc:6c: f7:d9:4f:4f:16:1c:bb:5a:96:b3:cb:7d:56:c1:48: 3f:f0:99:63:72:10:62:0c:dd:83:14:36:f7:e1:ba: 40:3a:21:bd:01:af:c9:46:8d:4a:00:27:89:c6:b0: d3:ce:7c:28:e4:1c:1e:f3:12:d3:24:35:36:74:0c: 68:15:d1:ec:90:9f:2b:59:f2:ff:db:cf:33:dc:44: ea:38:b2:35:b6:aa:a5:c3:83:a3:c6:21:c2:41:8e: e8:29:3f:2c:96:14:5a:c5:4f:2d:1b:48:4d:0f:35: fc:25:45:63:6e:c4:f0:77:48:b5:0e:fa:cc:b4:11: d5:e3:70:e3:19:b2:1e:3c:43:ae:9a:61:c1:a1:58: 67:6b:8d:4c:2c:9f:a5:cb:50:b4:95:b2:4e:14:11: e7:fe:c1:8e:b1:0d:46:29:57:86:21:fd:25:dc:36: 0d:ee:38:45:b2:4b:65:43:72:8e:ab:bc:81:07:5e: 53:4d:2b:5b:2e:19:27:fd:54:6c:07:6b:f4:93:62: 12:03:89:88:6b:4e:17:44:98:8c:8a:31:69:53:6f: 68:47:0d:fb:66:10:68:c7:9d:2a:81:bb:9a:c3:5b: e8:d3:67:5d:7f:76:45:a4:e7:07:25:a6:4a:70:4f: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:87:0D:3F:E8:B6:AA:18:21:93:DE:1F:8E:4E:6D:88:E8:E1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c8178ba2-235b-30e7-a41b-ff87de6fb9bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b1:86:bf:e2:c5:ef:7a:dc:cb:36:19:fc:f6:02:8c:2b:2e: 49:47:b5:e3:07:35:ef:a7:76:43:6e:50:08:c7:f8:c6:c5:cd: f5:53:a4:9c:6f:f4:91:d8:fb:26:da:7a:8f:9a:84:f6:6d:13: 5b:d0:ad:bd:8d:41:eb:b8:5e:d3:2c:60:c0:3a:ec:78:3c:39: 4c:e8:f4:32:0e:5e:27:2f:93:1c:a6:df:fd:ea:d0:98:5b:39: 4c:e9:b7:2e:01:d4:61:0d:e9:cf:a7:84:e9:6f:a1:d5:38:e2: c6:bc:b4:14:21:f0:b1:f3:58:46:14:da:4f:19:d5:50:50:1e: 62:6b:35:a3:56:a7:09:da:cb:37:53:8f:4c:d3:b9:aa:9d:48: 59:81:9d:6b:9d:9d:b4:ed:fc:39:9a:b2:a1:3c:fb:01:70:9c: 36:c5:e0:ed:ab:07:37:7b:23:0d:7f:46:46:e4:bc:dd:90:8b: 8d:c3:df:7e:00:4d:3d:f3:0b:5d:b5:b1:62:d1:49:5f:aa:f9: a6:d1:4a:9f:7f:a0:39:db:1d:89:4f:05:7f:50:b1:de:9d:1e: a6:25:53:fa:47:5e:76:d2:57:0a:c6:9b:cb:60:77:a8:a9:16: da:ee:99:5d:7a:c1:40:c1:8e:38:b6:2f:8f:08:39:3e:18:cc: bc:50:5f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErUvmo//lQhl7eGlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxMjEwMzU0OFoXDTI1MTExMDExMzU0OFowLzEtMCsGA1UEAxMk M2M3MGUyMjgtZjViNS00NmZlLWIxOTUtZGY5NjI4OTVjY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QOm9ktVvNKTzqbc3Gz32U9PFhy7Wpazy31W wUg/8JljchBiDN2DFDb34bpAOiG9Aa/JRo1KACeJxrDTznwo5Bwe8xLTJDU2dAxo FdHskJ8rWfL/288z3ETqOLI1tqqlw4OjxiHCQY7oKT8slhRaxU8tG0hNDzX8JUVj bsTwd0i1DvrMtBHV43DjGbIePEOummHBoVhna41MLJ+ly1C0lbJOFBHn/sGOsQ1G KVeGIf0l3DYN7jhFsktlQ3KOq7yBB15TTStbLhkn/VRsB2v0k2ISA4mIa04XRJiM ijFpU29oRw37ZhBox50qgbuaw1vo02ddf3ZFpOcHJaZKcE8cWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5xhw0/6LaqGCGT3h+OTm2I6OGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzgxNzhiYTItMjM1Yi0z MGU3LWE0MWItZmY4N2RlNmZiOWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyxhr/ixe963Ms2Gfz2AowrLklHteMHNe+ndkNuUAjH+MbFzfVTpJxv 9JHY+ybaeo+ahPZtE1vQrb2NQeu4XtMsYMA67Hg8OUzo9DIOXicvkxym3/3q0Jhb OUzpty4B1GEN6c+nhOlvodU44sa8tBQh8LHzWEYU2k8Z1VBQHmJrNaNWpwnayzdT j0zTuaqdSFmBnWudnbTt/DmasqE8+wFwnDbF4O2rBzd7Iw1/RkbkvN2Qi43D334A TT3zC121sWLRSV+q+abRSp9/oDnbHYlPBX9Qsd6dHqYlU/pHXnbSVwrGm8tgd6ip FtrumV16wUDBjji2L48IOT4YzLxQX4s= -----END CERTIFICATE-----Generated at Sat Aug 23 19:48:36 2025 by rpki-client