$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa File: cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa (raw, json) Hash identifier: vRRVXsMmLRLOZu/qDCKI6PNOIb/CVibwYcTAVNzc7jA= Subject key identifier: 74:DF:E2:B6:36:B6:51:BE:70:B7:C4:DF:EA:AA:10:A3:92:D6:A0:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497076538BD01FA2A0613750 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 71.28.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:76:53:8b:d0:1f:a2:a0:61:37:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=f82f18ed-24bc-40bb-a3a8-9223bef0e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:49:9c:ae:cb:41:43:a4:22:04:68:84:73:cc: 6f:4f:d9:ba:68:6d:cc:03:02:c1:48:32:55:3d:c3: c6:26:16:08:4f:1c:44:59:82:45:7b:6e:d0:92:c9: 06:30:12:68:1c:34:73:db:94:56:71:ec:ac:e1:94: 00:23:b8:a1:47:b0:2d:32:4e:5f:7f:02:0d:6b:f8: 7f:b3:67:85:a4:25:97:fd:2c:c0:ba:4e:34:c3:29: 58:ef:ea:97:c5:6e:cd:ba:8b:72:ea:35:bc:97:e3: a6:77:90:7a:1a:b3:c7:c0:4c:1c:69:b2:98:ed:d2: 8a:c7:3d:49:5a:fe:45:0e:04:10:9e:e6:24:b5:f2: 1d:d8:dd:d6:66:aa:ee:9e:b9:b5:c8:03:45:a1:9d: 2a:68:05:71:7a:a9:45:e0:37:5c:56:69:b2:41:3c: ee:9c:a1:fb:a4:a4:39:66:8d:81:92:2b:b9:21:11: fa:c1:e0:ac:58:ea:a2:d8:0e:2c:51:ac:45:66:7f: 9c:fd:06:73:d2:ee:d0:8e:ee:01:72:39:b7:9f:83: e7:06:61:ec:4a:fb:ca:bd:d8:8b:9c:b8:78:98:74: c0:e8:8b:19:db:30:79:7b:81:8a:44:fc:12:66:19: 9b:dc:6d:c6:60:72:3a:48:a5:bc:df:ea:f3:7f:53: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:E2:B6:36:B6:51:BE:70:B7:C4:DF:EA:AA:10:A3:92:D6:A0:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf6f6148-06bd-31ea-90d4-a683b7fa37da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:19:b2:3a:a1:69:28:aa:5a:a5:21:37:f4:15:13:67:63:e4: 52:96:80:ef:69:0a:95:d7:ba:9d:e4:54:89:0c:e8:bb:88:6a: e9:87:11:2d:aa:c8:d7:b6:ce:8d:87:6e:dc:70:51:b8:af:0e: 64:62:86:7d:e8:1e:ed:5f:ba:19:ff:9d:f1:87:a9:f6:bc:aa: 84:ec:a6:03:3e:97:02:20:28:fb:53:ca:bc:f8:f6:44:a9:e0: 47:d9:d5:83:46:9f:e6:45:25:ae:9c:9e:22:1b:9c:40:0a:88: 29:25:13:ab:05:5c:e1:eb:1b:4c:f0:0b:c8:84:53:f3:88:4a: e1:11:72:6c:0c:2a:25:45:f3:06:29:6a:0b:79:a1:72:dd:b0: ba:95:d6:45:87:d8:1a:39:3b:a3:3b:a1:8a:e3:80:d9:7e:d1: af:6c:71:33:a0:dd:79:5a:d7:61:b1:47:18:9a:06:06:e8:3d: 5b:18:07:8a:b2:82:4d:d4:82:70:7a:21:fa:f2:fd:b5:06:6d: 66:51:de:86:c6:ec:af:ab:0b:f7:ed:bd:28:b7:c2:3e:8e:ab: 01:89:b4:6d:4b:0e:a8:0f:b0:b3:6c:c7:47:f0:d7:f2:57:1d: 31:1c:6b:80:59:34:a6:2a:c5:76:bc:fd:b6:3b:65:06:84:c1: d9:1b:b8:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHZTi9AfoqBhN1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZjgyZjE4ZWQtMjRiYy00MGJiLWEzYTgtOTIyM2JlZjBlNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUmcrstBQ6QiBGiEc8xvT9m6aG3MAwLBSDJV PcPGJhYITxxEWYJFe27QkskGMBJoHDRz25RWceys4ZQAI7ihR7AtMk5ffwINa/h/ s2eFpCWX/SzAuk40wylY7+qXxW7Nuoty6jW8l+Omd5B6GrPHwEwcabKY7dKKxz1J Wv5FDgQQnuYktfId2N3WZqrunrm1yANFoZ0qaAVxeqlF4DdcVmmyQTzunKH7pKQ5 Zo2Bkiu5IRH6weCsWOqi2A4sUaxFZn+c/QZz0u7Qju4Bcjm3n4PnBmHsSvvKvdiL nLh4mHTA6IsZ2zB5e4GKRPwSZhmb3G3GYHI6SKW83+rzf1NsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTf4rY2tlG+cLfE3+qqEKOS1qDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y2ZjYxNDgtMDZiZC0z MWVhLTkwZDQtYTY4M2I3ZmEzN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkZsjqhaSiqWqUhN/QVE2dj5FKWgO9pCpXXup3kVIkM6LuIaumHES2q yNe2zo2HbtxwUbivDmRihn3oHu1fuhn/nfGHqfa8qoTspgM+lwIgKPtTyrz49kSp 4EfZ1YNGn+ZFJa6cniIbnEAKiCklE6sFXOHrG0zwC8iEU/OISuERcmwMKiVF8wYp agt5oXLdsLqV1kWH2Bo5O6M7oYrjgNl+0a9scTOg3Xla12GxRxiaBgboPVsYB4qy gk3UgnB6Ifry/bUGbWZR3obG7K+rC/ftvSi3wj6OqwGJtG1LDqgPsLNsx0fw1/JX HTEca4BZNKYqxXa8/bY7ZQaEwdkbuB0= -----END CERTIFICATE-----Generated at Mon Jun 30 18:34:43 2025 by rpki-client