$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa File: d34831cb-aade-3b02-85c4-76a6a232a1fb.roa (raw, json) Hash identifier: ZxYzC2BTwVfyQQr1dAVZS8/1QM+WSZXnBIJaGyNdnTg= Subject key identifier: 42:A1:A6:89:EB:9D:A5:79:41:89:C5:42:51:36:F9:F5:9F:0F:E4:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A38B038A0A1B6974DC6E3AC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa Signing time: Tue 17 Jun 2025 13:01:05 +0000 ROA not before: Tue 17 Jun 2025 13:01:05 +0000 ROA not after: Mon 15 Sep 2025 13:01:05 +0000 asID: 7029 IP address blocks: 71.28.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:b0:38:a0:a1:b6:97:4d:c6:e3:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 17 13:01:05 2025 GMT Not After : Sep 15 13:01:05 2025 GMT Subject: CN=e7e157b8-1fa9-4f8e-b4be-d5c38cf55b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:27:cf:e5:1e:1c:1d:7f:4e:72:55:08:98: b7:15:cb:9b:f6:02:34:16:33:02:81:ce:d4:18:21: 60:49:d3:fd:44:07:c4:12:d6:a6:a2:2d:d1:b9:df: a9:2c:bd:f6:c1:76:5a:b8:c8:4e:d7:5a:25:df:42: 92:bc:e1:ea:f0:06:57:8a:cd:83:55:75:40:c7:69: 0b:fd:c3:b2:b6:cf:e2:c9:a4:61:e4:42:1f:8a:5f: 20:46:bb:e1:97:c3:f6:86:26:f6:16:e4:6d:f4:68: 41:5e:90:08:f1:ac:10:41:57:7b:97:e2:b4:72:65: 69:5d:01:74:4d:96:fb:0b:05:5e:2c:16:78:c8:9a: ef:c4:1a:8a:f9:65:c8:e8:3a:26:73:02:ef:8b:7a: ec:3c:4c:d8:34:d1:53:e1:b8:33:d3:34:60:be:f7: 29:10:d7:47:08:4a:91:82:12:05:c7:69:66:e1:81: 37:85:a3:eb:cb:7e:bc:2f:12:b6:4c:d1:ee:a0:6a: 02:44:dc:18:a3:2e:54:07:b6:6e:73:b2:bc:c7:32: be:42:54:32:ea:18:28:f4:56:6f:a9:22:a5:0a:0e: 16:90:a4:2a:1d:f4:bf:94:45:17:59:eb:46:6f:20: a6:67:f7:6d:e5:47:45:e5:9b:0e:25:9a:fb:ea:74: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:A6:89:EB:9D:A5:79:41:89:C5:42:51:36:F9:F5:9F:0F:E4:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d34831cb-aade-3b02-85c4-76a6a232a1fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:db:79:62:d2:80:ce:5c:38:b4:30:80:67:76:77:86:b0: 63:ca:ea:c5:8f:dc:b6:a6:67:fa:94:45:14:dd:69:57:f0:1d: 0d:e8:72:9a:c7:4d:36:a2:7c:e9:33:f7:1b:fa:21:08:38:dc: 43:70:7f:47:0a:6c:54:76:5e:81:b3:8b:94:6a:2c:60:b8:93: 92:7b:54:f4:33:dc:26:d4:db:6f:46:3b:16:76:11:e1:f2:3b: f5:d8:40:48:d3:a1:fa:04:99:e6:de:72:36:76:80:52:4d:62: d5:c1:dd:e6:89:8c:53:3e:19:fc:43:2d:54:22:6d:c3:2a:d7: 48:c2:0e:91:ac:93:ba:ba:a6:44:fe:c1:4d:69:12:78:d2:85: f8:30:6e:7f:da:b5:0b:c4:b8:1f:37:b0:d4:bb:3c:f1:a6:c3: cb:32:f6:b1:d3:28:a6:95:8b:9c:ed:24:38:36:91:14:15:ba: 25:74:23:a1:55:45:a9:68:f5:2e:31:43:f5:2e:ba:c7:63:4d: 74:f8:ee:ed:5c:5d:90:e0:38:e8:e6:44:e2:5d:84:16:a1:14: 1e:5c:f1:27:48:a2:8b:2d:56:74:da:2a:48:1b:5b:d6:b2:76: 11:7b:e8:4f:b3:5c:4f:11:e4:e2:a8:7c:af:b7:e3:37:a4:71: 9a:4c:21:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo4sDigobaXTcbjrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNzEzMDEwNVoXDTI1MDkxNTEzMDEwNVowLzEtMCsGA1UEAxMk ZTdlMTU3YjgtMWZhOS00ZjhlLWI0YmUtZDVjMzhjZjU1Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuagnz+UeHB1/TnJVCJi3Fcub9gI0FjMCgc7U GCFgSdP9RAfEEtamoi3Rud+pLL32wXZauMhO11ol30KSvOHq8AZXis2DVXVAx2kL /cOyts/iyaRh5EIfil8gRrvhl8P2hib2FuRt9GhBXpAI8awQQVd7l+K0cmVpXQF0 TZb7CwVeLBZ4yJrvxBqK+WXI6DomcwLvi3rsPEzYNNFT4bgz0zRgvvcpENdHCEqR ghIFx2lm4YE3haPry368LxK2TNHuoGoCRNwYoy5UB7Zuc7K8xzK+QlQy6hgo9FZv qSKlCg4WkKQqHfS/lEUXWetGbyCmZ/dt5UdF5ZsOJZr76nTSBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKhponrnaV5QYnFQlE2+fWfD+SlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM0ODMxY2ItYWFkZS0z YjAyLTg1YzQtNzZhNmEyMzJhMWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8623li0oDOXDi0MIBndneGsGPK6sWP3LamZ/qURRTdaVfwHQ3ocprH TTaifOkz9xv6IQg43ENwf0cKbFR2XoGzi5RqLGC4k5J7VPQz3CbU229GOxZ2EeHy O/XYQEjTofoEmebecjZ2gFJNYtXB3eaJjFM+GfxDLVQibcMq10jCDpGsk7q6pkT+ wU1pEnjShfgwbn/atQvEuB83sNS7PPGmw8sy9rHTKKaVi5ztJDg2kRQVuiV0I6FV Ralo9S4xQ/UuusdjTXT47u1cXZDgOOjmROJdhBahFB5c8SdIoostVnTaKkgbW9ay dhF76E+zXE8R5OKofK+34zekcZpMIao= -----END CERTIFICATE-----Generated at Sun Jun 29 08:13:09 2025 by rpki-client