$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/225d62e9-31c5-31bb-8aac-a756b8f158b1.roa File: 225d62e9-31c5-31bb-8aac-a756b8f158b1.roa (raw, json) Hash identifier: 1nDqDM4YKMLYUp+ICJ8dcWnyu/OCB+jDYFefjCW4ets= Subject key identifier: 01:60:0F:E8:8D:37:67:90:A9:85:7D:57:A9:89:31:60:8D:DD:F2:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A80109A1C7116EEA3AFFD0D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/225d62e9-31c5-31bb-8aac-a756b8f158b1.roa Signing time: Sun 13 Jul 2025 02:37:41 +0000 ROA not before: Sun 13 Jul 2025 02:37:41 +0000 ROA not after: Sat 11 Oct 2025 02:37:41 +0000 asID: 7029 IP address blocks: 71.28.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:80:10:9a:1c:71:16:ee:a3:af:fd:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 13 02:37:41 2025 GMT Not After : Oct 11 02:37:41 2025 GMT Subject: CN=4f491ba3-f479-421e-a293-229685c3391d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:95:d1:75:ee:8b:f3:92:52:86:d4:75:64: fe:99:b7:66:ed:9e:e9:db:88:41:8a:31:ed:20:95: 76:94:69:6f:03:a0:1b:d7:af:4c:9a:d5:40:3b:03: bd:46:41:8d:09:b0:3d:b5:36:8f:d0:ea:b2:45:81: eb:85:71:38:ba:9f:8a:65:9d:4e:30:e6:b9:c6:3d: ca:3c:4d:3b:33:1a:e2:0e:90:fa:e9:38:64:32:d7: 9e:3e:fc:0e:34:1e:4a:b9:33:e0:0f:32:db:78:32: d9:89:b0:e1:36:e8:66:12:04:3d:10:e3:96:c4:95: e1:33:c4:30:58:45:7c:95:dc:88:2c:c5:81:f2:55: 71:fc:66:cb:e4:d4:e9:b2:5a:36:5d:d9:87:37:ea: 34:0d:2f:c8:5b:14:74:3f:5c:e3:80:e8:9d:bb:5c: 5d:c8:55:15:55:0c:9e:73:ed:40:fe:c9:e5:14:8b: 52:1a:69:c2:a7:9f:4b:1f:76:e1:e3:11:29:e3:3b: c4:8e:4e:b2:60:d8:1b:08:a7:35:6e:6c:24:9f:a3: f7:e8:a7:c7:c7:18:e3:8c:0d:5b:f6:be:b5:f2:6c: 68:d7:6a:23:b7:b1:fe:4e:8f:98:78:10:e7:d5:3e: 8e:70:fe:06:bb:bc:fb:67:9f:1a:8f:b1:6b:5e:95: 89:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:60:0F:E8:8D:37:67:90:A9:85:7D:57:A9:89:31:60:8D:DD:F2:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/225d62e9-31c5-31bb-8aac-a756b8f158b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:09:14:90:26:f4:45:65:cf:48:4a:bd:c3:9c:53:42:df:73: bb:8a:41:18:76:0a:36:75:ab:b4:1a:40:21:97:2c:2d:41:cc: 27:c6:16:ad:a9:76:d2:92:89:6d:78:0f:98:43:25:a3:ac:d2: 2b:97:2e:1f:5a:66:11:91:c3:a7:b7:41:a5:50:0f:0b:39:8e: dd:35:a4:b5:7a:47:c2:2f:90:65:85:8d:bb:d4:c1:7e:34:71: 02:6f:aa:f8:86:c9:e0:cb:03:64:15:5b:63:30:63:ad:8e:06: c1:d1:2b:68:51:92:d2:cd:26:e4:72:7a:45:02:bf:49:01:ef: 57:ad:93:06:6e:1d:49:59:40:ab:e0:6b:21:5d:1e:9e:a2:55: d9:4d:1e:d8:86:00:d9:2f:69:ab:e5:23:80:94:e4:1d:9a:f4: 8d:d8:7e:66:86:9a:46:ba:59:b4:0f:22:6a:4a:94:08:f5:20: 86:7f:3c:47:da:e8:d2:09:f9:6e:85:ab:e3:f4:80:bb:75:56: bb:62:aa:20:51:d7:b1:6b:97:fd:ec:d5:db:1c:88:98:dc:57: c2:4f:cc:bc:f4:56:ae:cc:3d:1a:36:ab:47:a4:0e:04:9f:e1: d9:2d:86:4f:c0:a8:9c:22:12:33:62:6c:e8:f4:47:e6:b8:2c: c4:90:d3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqAEJoccRbuo6/9DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxMzAyMzc0MVoXDTI1MTAxMTAyMzc0MVowLzEtMCsGA1UEAxMk NGY0OTFiYTMtZjQ3OS00MjFlLWEyOTMtMjI5Njg1YzMzOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN6V0XXui/OSUobUdWT+mbdm7Z7p24hBijHt IJV2lGlvA6Ab169MmtVAOwO9RkGNCbA9tTaP0OqyRYHrhXE4up+KZZ1OMOa5xj3K PE07MxriDpD66ThkMteePvwONB5KuTPgDzLbeDLZibDhNuhmEgQ9EOOWxJXhM8Qw WEV8ldyILMWB8lVx/GbL5NTpslo2XdmHN+o0DS/IWxR0P1zjgOidu1xdyFUVVQye c+1A/snlFItSGmnCp59LH3bh4xEp4zvEjk6yYNgbCKc1bmwkn6P36KfHxxjjjA1b 9r618mxo12ojt7H+To+YeBDn1T6OcP4Gu7z7Z58aj7FrXpWJFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFgD+iNN2eQqYV9V6mJMWCN3fIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjI1ZDYyZTktMzFjNS0z MWJiLThhYWMtYTc1NmI4ZjE1OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxziMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwJFJAm9EVlz0hKvcOcU0Lfc7uKQRh2CjZ1q7QaQCGXLC1BzCfGFq2p dtKSiW14D5hDJaOs0iuXLh9aZhGRw6e3QaVQDws5jt01pLV6R8IvkGWFjbvUwX40 cQJvqviGyeDLA2QVW2MwY62OBsHRK2hRktLNJuRyekUCv0kB71etkwZuHUlZQKvg ayFdHp6iVdlNHtiGANkvaavlI4CU5B2a9I3YfmaGmka6WbQPImpKlAj1IIZ/PEfa 6NIJ+W6Fq+P0gLt1VrtiqiBR17Frl/3s1dsciJjcV8JPzLz0Vq7MPRo2q0ekDgSf 4dkthk/AqJwiEjNibOj0R+a4LMSQ05g= -----END CERTIFICATE-----Generated at Sun Jul 20 22:31:23 2025 by rpki-client