$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa File: d57da0e6-f691-31f3-9cdb-493375eb5d74.roa (raw, json) Hash identifier: GfgitI5UL2BQBuJ5YvoRFNNDj6PYonjoR1aTyQ1jyNk= Subject key identifier: 83:8A:1B:E1:33:C4:8E:85:BE:03:B3:50:DD:AA:DA:E2:39:DE:4F:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6689A2212140FDCED80E90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:a2:21:21:40:fd:ce:d8:0e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=84f3690c-82b7-46ff-9b7d-347529e79328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:b9:36:e3:ef:49:1b:93:23:b2:3e:1b:ea: 0b:ba:4f:1c:2d:44:58:59:ac:69:fc:26:c0:c8:41: 95:83:2a:d0:2b:a2:df:8a:ce:22:c4:14:92:15:ba: 96:1f:93:79:d4:c9:eb:46:da:ea:89:b7:be:56:3f: 78:fd:99:4f:40:da:38:c3:ff:ab:cd:c3:1a:f4:d0: 4a:f2:f5:cd:6c:9d:9b:82:7c:9c:f9:46:ec:5a:54: 98:75:8c:6e:c0:a1:4a:af:0b:7f:2d:90:ec:e7:7a: 5d:d3:a6:e8:e5:46:c9:b4:ba:c4:74:58:21:d8:80: 94:81:8c:4f:c8:f7:97:8c:16:95:56:5f:0e:a7:8d: e0:ee:fa:b0:4a:71:4c:8c:92:a9:d2:04:63:fe:63: 68:f0:d7:79:30:35:4c:9d:4c:66:09:35:c7:48:e7: 1d:e8:77:89:6a:5d:2b:5d:42:0b:03:bc:15:d0:4a: 6c:ea:60:9f:78:6b:b0:01:6b:03:57:6f:79:93:21: 33:ab:0f:16:bb:18:84:88:ee:e0:86:a1:d1:5d:fb: 9f:ca:66:9e:16:48:f0:84:51:df:c1:8b:d6:b0:7e: ab:ad:e2:d2:94:1d:e0:de:2c:4e:b8:a4:5b:ec:29: b5:33:6a:ea:2e:d9:bc:b9:68:f7:43:d5:d4:58:aa: ad:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8A:1B:E1:33:C4:8E:85:BE:03:B3:50:DD:AA:DA:E2:39:DE:4F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57da0e6-f691-31f3-9cdb-493375eb5d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:da:aa:52:0e:5f:63:5c:9b:2f:71:a6:17:d4:8c:8f:62:2f: e0:bb:3c:d2:5a:7d:38:ac:f2:03:ab:c9:ce:b4:4b:da:fa:c6: 5d:bf:1c:7e:3a:cc:19:e3:d6:5d:d0:88:9e:42:7a:88:c5:91: e0:cc:a4:cd:97:bb:3d:a8:4d:73:c6:7c:79:72:65:03:0b:4a: 88:57:0c:a1:d4:c6:ea:5e:93:73:af:29:03:4e:05:48:b8:6d: df:1f:86:4d:9c:b9:75:bc:ac:b6:b3:82:59:2b:bd:fc:62:23: 66:17:2b:8c:51:4b:35:2a:2d:e1:70:d2:00:28:47:c5:05:36: 34:bf:c4:86:fb:a3:b9:0f:52:7b:77:eb:26:2c:e0:64:93:f9: bd:b2:36:c2:41:f4:b7:59:f3:6b:54:dd:d3:81:2f:51:09:8a: 22:31:ed:11:0b:a8:e3:7e:54:3c:ca:41:db:ab:8c:de:84:2a: f1:b5:6d:86:eb:d6:b2:79:2b:d5:62:23:24:db:e5:9b:90:b5: 12:76:4e:b9:36:a5:95:1a:4a:44:18:51:7a:5d:7a:8f:10:e5: 09:61:7a:45:65:f8:da:99:99:36:d6:a6:f4:dd:57:e4:1f:2e: ab:9e:fa:27:1d:7d:3f:29:be:79:e3:5d:30:fd:0c:f4:38:f8: 3b:18:27:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZomiISFA/c7YDpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODRmMzY5MGMtODJiNy00NmZmLTliN2QtMzQ3NTI5ZTc5MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB65NuPvSRuTI7I+G+oLuk8cLURYWaxp/CbA yEGVgyrQK6Lfis4ixBSSFbqWH5N51MnrRtrqibe+Vj94/ZlPQNo4w/+rzcMa9NBK 8vXNbJ2bgnyc+UbsWlSYdYxuwKFKrwt/LZDs53pd06bo5UbJtLrEdFgh2ICUgYxP yPeXjBaVVl8Op43g7vqwSnFMjJKp0gRj/mNo8Nd5MDVMnUxmCTXHSOcd6HeJal0r XUILA7wV0Eps6mCfeGuwAWsDV295kyEzqw8WuxiEiO7ghqHRXfufymaeFkjwhFHf wYvWsH6rreLSlB3g3ixOuKRb7Cm1M2rqLtm8uWj3Q9XUWKqtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOKG+EzxI6FvgOzUN2q2uI53k88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDU3ZGEwZTYtZjY5MS0z MWYzLTljZGItNDkzMzc1ZWI1ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnaqlIOX2Ncmy9xphfUjI9iL+C7PNJafTis8gOryc60S9r6xl2/HH46 zBnj1l3QiJ5CeojFkeDMpM2Xuz2oTXPGfHlyZQMLSohXDKHUxupek3OvKQNOBUi4 bd8fhk2cuXW8rLazglkrvfxiI2YXK4xRSzUqLeFw0gAoR8UFNjS/xIb7o7kPUnt3 6yYs4GST+b2yNsJB9LdZ82tU3dOBL1EJiiIx7RELqON+VDzKQdurjN6EKvG1bYbr 1rJ5K9ViIyTb5ZuQtRJ2Trk2pZUaSkQYUXpdeo8Q5QlhekVl+NqZmTbWpvTdV+Qf Lque+icdfT8pvnnjXTD9DPQ4+DsYJ3A= -----END CERTIFICATE-----Generated at Sat Aug 23 13:20:33 2025 by rpki-client