$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa File: ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa (raw, json) Hash identifier: pgvS+AKj057EXYYQoh4A5nByxyS2cU4AwWfifyMukbo= Subject key identifier: 3E:F7:4D:A2:2A:FD:A2:89:A8:8A:5E:1D:89:33:2F:77:D0:06:AF:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668934ABE1E9DCE909A500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:34:ab:e1:e9:dc:e9:09:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b69bafd4-2d15-4471-851e-f9bf5a911f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:5b:04:33:65:3e:91:79:76:20:c7:35:0c: 6c:06:6e:4f:51:9d:56:d0:c2:12:c4:2a:50:cd:ac: 25:28:fd:f9:c7:0d:f4:0f:22:84:23:b4:55:ea:e8: 64:e1:96:65:83:3b:0b:3e:93:5a:14:09:05:a9:ce: 01:02:6f:8b:15:a1:89:70:5b:18:ef:77:26:fd:af: c0:f1:9e:86:4a:0b:e7:e0:da:c3:34:3e:9a:26:b3: 3e:43:89:74:47:f7:6d:57:a3:13:ff:cf:9b:be:05: 83:4a:ad:c7:f2:42:df:29:2a:93:06:1c:e8:11:a7: c7:d3:13:62:31:db:36:14:b5:47:32:48:bb:19:28: 1c:49:cd:9c:75:93:52:94:e1:cb:db:1f:be:7d:20: ca:05:37:de:df:a7:ab:a8:5b:42:f9:74:47:9f:2e: b8:be:e8:59:c6:f9:b6:88:80:33:b8:0f:69:da:9b: 9c:fe:9e:c2:34:68:03:1a:30:30:96:eb:07:d7:f6: 06:07:a3:d9:4e:6c:a0:ef:ea:80:6b:8e:aa:c0:68: b4:24:06:5d:24:42:af:5a:f4:5f:59:07:8a:2e:34: 31:ef:2a:cd:66:34:65:a8:46:37:89:e6:3c:b3:fd: 26:ce:da:a8:27:a6:21:51:b4:6b:c6:86:c0:cd:8b: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F7:4D:A2:2A:FD:A2:89:A8:8A:5E:1D:89:33:2F:77:D0:06:AF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff06164f-0e3a-371b-ad49-4422ba3d64d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:01:5b:a8:0a:35:37:b9:b9:1f:21:b7:3e:04:91:e8:59:58: e8:73:3b:7b:85:2c:b8:88:e9:51:b2:21:32:c1:95:f7:4e:05: 90:d2:b3:84:0b:e3:f4:11:25:56:6b:0c:6d:61:5a:c7:3a:6c: 9f:ab:54:42:31:32:1b:eb:cf:6c:f1:92:78:65:bf:e1:3a:6d: 05:99:53:ed:28:4d:75:ba:7f:10:aa:63:d9:52:aa:41:cc:b3: 1c:a1:bb:a6:47:8c:34:39:c6:99:11:fa:44:c9:20:a6:d2:91: b9:da:7f:a4:dc:9f:55:02:3a:79:b1:4b:f3:e3:32:8e:53:37: ae:68:77:41:4d:c8:73:d8:46:96:b1:39:e8:42:b9:6a:96:37: 42:0c:cc:8c:cd:6b:6e:06:6c:54:1b:b3:0c:87:c3:fb:f2:cc: ae:ef:64:77:8f:9f:d4:03:94:0f:5e:0f:97:a1:69:1c:47:32: 69:c8:54:f9:f1:bb:1f:86:3b:29:33:e1:3b:42:9d:30:04:30: 85:51:7d:b1:80:c7:8d:79:f3:51:1b:9e:d2:71:b2:85:97:8d: 42:12:a6:d4:c2:89:b5:bb:93:8a:6e:65:49:92:79:73:69:c5: 4a:c2:9e:ea:85:24:46:dc:39:04:12:da:24:a7:ee:77:80:01: 68:49:5b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZok0q+Hp3OkJpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjY5YmFmZDQtMmQxNS00NDcxLTg1MWUtZjliZjVhOTExZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xxbBDNlPpF5diDHNQxsBm5PUZ1W0MISxCpQ zawlKP35xw30DyKEI7RV6uhk4ZZlgzsLPpNaFAkFqc4BAm+LFaGJcFsY73cm/a/A 8Z6GSgvn4NrDND6aJrM+Q4l0R/dtV6MT/8+bvgWDSq3H8kLfKSqTBhzoEafH0xNi Mds2FLVHMki7GSgcSc2cdZNSlOHL2x++fSDKBTfe36erqFtC+XRHny64vuhZxvm2 iIAzuA9p2puc/p7CNGgDGjAwlusH1/YGB6PZTmyg7+qAa46qwGi0JAZdJEKvWvRf WQeKLjQx7yrNZjRlqEY3ieY8s/0mztqoJ6YhUbRrxobAzYs0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD73TaIq/aKJqIpeHYkzL3fQBq8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYwNjE2NGYtMGUzYS0z NzFiLWFkNDktNDQyMmJhM2Q2NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4BW6gKNTe5uR8htz4EkehZWOhzO3uFLLiI6VGyITLBlfdOBZDSs4QL 4/QRJVZrDG1hWsc6bJ+rVEIxMhvrz2zxknhlv+E6bQWZU+0oTXW6fxCqY9lSqkHM sxyhu6ZHjDQ5xpkR+kTJIKbSkbnaf6Tcn1UCOnmxS/PjMo5TN65od0FNyHPYRpax OehCuWqWN0IMzIzNa24GbFQbswyHw/vyzK7vZHePn9QDlA9eD5ehaRxHMmnIVPnx ux+GOykz4TtCnTAEMIVRfbGAx41581EbntJxsoWXjUISptTCibW7k4puZUmSeXNp xUrCnuqFJEbcOQQS2iSn7neAAWhJW9U= -----END CERTIFICATE-----Generated at Sat Aug 23 15:46:42 2025 by rpki-client