$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc02415d-3fc0-309b-8c08-22c8cc2a3fc0.roa File: fc02415d-3fc0-309b-8c08-22c8cc2a3fc0.roa (raw, json) Hash identifier: 8X6rXLSb/l56+/wUo2cfDj3ABXTwRa8DNZC3egoaDV8= Subject key identifier: BE:B6:0E:FC:37:33:02:B0:42:BB:0E:79:68:90:E8:A1:49:DF:51:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669281885AE6F53363FF24 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc02415d-3fc0-309b-8c08-22c8cc2a3fc0.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:92:81:88:5a:e6:f5:33:63:ff:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=6fc2d753-a15d-49fa-b3e5-7fcf027e026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:72:56:56:a5:61:1e:d2:ad:c6:91:ed:0d: 0b:58:8e:ad:af:1b:52:29:80:fb:7a:6e:4e:8b:85: 9b:c4:eb:f8:11:01:66:94:b3:59:2e:27:2a:6f:90: be:65:ec:24:44:f8:b2:98:5f:c9:37:9c:6f:a0:61: 26:0a:f5:6e:22:dc:cf:fb:02:d3:75:46:f0:5a:eb: 44:d0:a0:f7:a3:75:af:f1:ac:7f:da:70:5d:69:64: 98:9b:db:6e:f9:57:9d:61:2f:62:d5:58:ea:df:f9: 49:a5:41:f3:d5:6d:65:5c:19:25:09:1b:e6:cb:c4: 23:60:f2:09:d2:68:93:ac:a6:1e:dd:11:b4:1a:bd: 4b:71:10:31:5b:4f:95:4a:89:85:4e:72:3c:45:80: 73:55:ba:9f:34:91:cb:5e:2f:eb:ab:42:e8:22:25: 34:7e:f8:31:3e:07:0d:40:91:ba:a9:41:7c:6c:fe: c0:85:fb:11:4d:94:e5:0e:65:4e:31:8e:36:20:a1: 6e:c1:2f:09:90:cf:fe:45:61:4b:85:fb:2b:5c:cb: c5:1e:c0:07:dd:6b:79:31:16:a6:3d:39:8e:2f:a8: 28:f0:5e:85:87:c6:af:3d:33:45:46:cd:85:cb:db: 1b:b4:2f:2b:71:e1:96:45:b8:e6:65:cf:b0:6e:dd: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B6:0E:FC:37:33:02:B0:42:BB:0E:79:68:90:E8:A1:49:DF:51:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc02415d-3fc0-309b-8c08-22c8cc2a3fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:e7:14:f0:fb:8c:73:8a:c9:fd:60:ea:25:c4:6c:86:c8:a0: bc:38:28:d0:47:ed:38:3a:88:4d:a5:57:b4:d5:f1:b8:c0:cf: 21:de:86:63:8d:0d:6a:0a:9e:20:5b:03:8f:7f:52:4c:82:be: b6:a7:81:02:b6:e6:90:65:2b:02:18:15:df:04:2d:16:71:dd: d1:39:dc:51:c2:ad:c1:94:90:e3:27:ed:de:2d:20:d7:3c:39: 88:42:72:8e:d3:2b:23:d3:85:47:bc:18:2a:1d:d7:71:df:58: 96:25:25:f5:b8:dd:f8:56:47:40:cb:3e:25:d2:aa:ed:81:0a: e7:34:dc:3a:d0:2c:b6:e3:6e:46:2e:71:ad:2b:e7:5b:96:ff: 2b:68:1d:c8:30:21:ba:86:14:37:09:5c:f7:2a:81:02:5b:dd: e6:cf:07:94:2c:88:be:d5:ea:e3:0a:1c:69:cc:cc:69:09:2b: de:3a:c2:e7:d5:33:0d:1a:3a:c0:71:ac:50:b1:dc:ba:6e:6b: ec:33:80:e6:db:38:e3:19:60:cb:23:b9:79:59:8a:b9:df:c9: 8b:9e:7e:82:80:65:f3:52:61:cc:8a:a0:81:02:9e:a8:39:ca: ee:72:9b:b5:a1:87:11:f1:68:f4:7f:dd:72:8f:69:e2:ef:9c: 9e:4a:b4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpKBiFrm9TNj/yQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NmZjMmQ3NTMtYTE1ZC00OWZhLWIzZTUtN2ZjZjAyN2UwMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIxyVlalYR7SrcaR7Q0LWI6trxtSKYD7em5O i4WbxOv4EQFmlLNZLicqb5C+ZewkRPiymF/JN5xvoGEmCvVuItzP+wLTdUbwWutE 0KD3o3Wv8ax/2nBdaWSYm9tu+VedYS9i1Vjq3/lJpUHz1W1lXBklCRvmy8QjYPIJ 0miTrKYe3RG0Gr1LcRAxW0+VSomFTnI8RYBzVbqfNJHLXi/rq0LoIiU0fvgxPgcN QJG6qUF8bP7AhfsRTZTlDmVOMY42IKFuwS8JkM/+RWFLhfsrXMvFHsAH3Wt5MRam PTmOL6go8F6Fh8avPTNFRs2Fy9sbtC8rceGWRbjmZc+wbt1CpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL62Dvw3MwKwQrsOeWiQ6KFJ31H8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmMwMjQxNWQtM2ZjMC0z MDliLThjMDgtMjJjOGNjMmEzZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXnFPD7jHOKyf1g6iXEbIbIoLw4KNBH7Tg6iE2lV7TV8bjAzyHehmON DWoKniBbA49/UkyCvrangQK25pBlKwIYFd8ELRZx3dE53FHCrcGUkOMn7d4tINc8 OYhCco7TKyPThUe8GCod13HfWJYlJfW43fhWR0DLPiXSqu2BCuc03DrQLLbjbkYu ca0r51uW/ytoHcgwIbqGFDcJXPcqgQJb3ebPB5QsiL7V6uMKHGnMzGkJK946wufV Mw0aOsBxrFCx3Lpua+wzgObbOOMZYMsjuXlZirnfyYuefoKAZfNSYcyKoIECnqg5 yu5ym7WhhxHxaPR/3XKPaeLvnJ5KtCY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:35 2025 by rpki-client