$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa File: faf66482-7afc-33d4-8de6-1371ecfa4006.roa (raw, json) Hash identifier: 7vHjk8ZlLxmklHtnrG32f//QeYi8MGUNkgGLXvwmuEE= Subject key identifier: 0B:EB:2D:AE:0B:F7:98:E0:09:34:46:6E:43:F7:2E:B0:72:8B:C2:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66898110CC40DE1EE50130 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:81:10:cc:40:de:1e:e5:01:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=65fffa74-7156-4741-95da-bb501659dfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:de:dc:1c:02:aa:85:87:29:46:2d:77:f8:12: 04:4f:03:6d:e6:b8:18:1c:ce:4c:91:90:a7:b9:db: f1:74:f4:d1:16:c1:50:78:03:d0:db:7f:c8:3b:a9: e1:33:65:1c:23:66:d3:7b:8c:79:a0:30:c3:34:10: e2:d7:0d:9c:cd:af:e1:fe:98:a5:9e:e9:b8:4a:64: fa:b6:3a:81:a9:80:1b:55:44:03:70:3c:2f:83:c1: 3e:79:ec:8d:09:e6:02:ce:8d:e8:ed:42:de:4b:52: e0:14:cc:9f:fe:fe:51:e9:ea:1a:7a:75:07:8d:73: 67:2c:21:68:b5:1f:b1:c6:5e:19:3f:2c:6d:dc:04: 38:2a:0d:19:af:81:59:4e:d3:bf:a6:7f:d7:fd:97: 0d:64:17:08:42:d7:7f:57:c7:b9:72:00:b5:57:87: 63:f2:1d:15:9a:da:24:09:92:3e:7e:d9:09:ca:1b: fb:24:f1:26:27:88:95:8f:67:e7:80:c4:ba:51:e3: 19:8b:cd:eb:2b:98:8a:32:93:29:09:bf:4d:81:9c: 4a:eb:b6:7b:41:31:6d:3e:56:e9:aa:ae:eb:c5:57: 3e:81:b4:31:08:d5:db:a2:d1:20:14:18:0e:55:45: e0:cb:a2:8a:09:af:78:c8:6a:93:bb:df:d8:37:46: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:2D:AE:0B:F7:98:E0:09:34:46:6E:43:F7:2E:B0:72:8B:C2:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:21:f4:ef:95:46:89:aa:d7:97:a7:67:1b:a2:d2:dd:6e:b7: 83:3a:0e:f3:39:ae:ff:ff:1d:50:52:69:33:73:2b:80:7f:06: c7:87:6b:a9:5f:50:67:b9:08:99:a9:7e:37:c3:e0:f3:87:34: 5a:50:5f:6f:76:04:e5:4f:03:48:4d:76:3c:37:50:b6:f1:6f: df:26:04:a0:2d:2f:12:9c:33:d3:06:22:71:1b:2c:db:dd:21: 4c:9b:dc:16:a0:ea:a8:a1:33:c6:76:db:d5:31:f5:0b:88:c0: e4:c4:77:0d:fb:0c:ec:ab:c7:a6:75:d3:e3:0e:71:f1:4c:9e: 66:fd:f7:b0:36:a9:e7:4e:d8:5c:7c:b9:79:46:f1:fd:96:0b: 26:30:af:c5:64:40:36:c0:d4:0f:1d:25:67:21:12:7e:68:1c: 81:51:90:6f:7e:70:50:80:0a:af:b6:f8:cd:6c:a6:12:80:0c: c1:c1:4f:c0:ef:28:cb:fd:04:4c:56:ad:81:a6:98:04:c4:bb: 23:e4:8b:b1:38:40:53:28:e4:ea:b7:69:d7:80:8e:0a:61:2f: 09:0e:d8:31:9e:f1:ce:cb:3e:27:4c:10:8e:70:d0:e1:40:ac: 0a:b5:0f:12:e9:0a:bd:b0:4a:e6:d9:09:f2:f0:34:55:52:6b: dc:6c:44:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZomBEMxA3h7lATAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NjVmZmZhNzQtNzE1Ni00NzQxLTk1ZGEtYmI1MDE2NTlkZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d7cHAKqhYcpRi13+BIETwNt5rgYHM5MkZCn udvxdPTRFsFQeAPQ23/IO6nhM2UcI2bTe4x5oDDDNBDi1w2cza/h/pilnum4SmT6 tjqBqYAbVUQDcDwvg8E+eeyNCeYCzo3o7ULeS1LgFMyf/v5R6eoaenUHjXNnLCFo tR+xxl4ZPyxt3AQ4Kg0Zr4FZTtO/pn/X/ZcNZBcIQtd/V8e5cgC1V4dj8h0Vmtok CZI+ftkJyhv7JPEmJ4iVj2fngMS6UeMZi83rK5iKMpMpCb9NgZxK67Z7QTFtPlbp qq7rxVc+gbQxCNXbotEgFBgOVUXgy6KKCa94yGqTu9/YN0YcpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvrLa4L95jgCTRGbkP3LrByi8IbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFmNjY0ODItN2FmYy0z M2Q0LThkZTYtMTM3MWVjZmE0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIh9O+VRomq15enZxui0t1ut4M6DvM5rv//HVBSaTNzK4B/BseHa6lf UGe5CJmpfjfD4POHNFpQX292BOVPA0hNdjw3ULbxb98mBKAtLxKcM9MGInEbLNvd IUyb3Bag6qihM8Z229Ux9QuIwOTEdw37DOyrx6Z10+MOcfFMnmb997A2qedO2Fx8 uXlG8f2WCyYwr8VkQDbA1A8dJWchEn5oHIFRkG9+cFCACq+2+M1sphKADMHBT8Dv KMv9BExWrYGmmATEuyPki7E4QFMo5Oq3adeAjgphLwkO2DGe8c7LPidMEI5w0OFA rAq1DxLpCr2wSubZCfLwNFVSa9xsRD4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:23:07 2025 by rpki-client