$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa File: 18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa (raw, json) Hash identifier: E3s+jczjULaXOBoqtGLBjiIcpVURfRqJxGh+l2akLf4= Subject key identifier: 78:03:9B:71:38:50:0E:DF:FB:53:44:68:A2:1F:85:06:87:04:D7:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CC448D03C09A3A6DB680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.30.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cc:44:8d:03:c0:9a:3a:6d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=368582a2-416c-4508-ba59-581698959e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:ec:1b:f5:7a:e6:f2:0a:be:0d:fb:3d:2c: 7a:44:3f:7b:04:ae:a0:f7:44:44:24:3c:97:95:b5: 36:5c:d9:a3:63:54:57:c8:83:16:91:2c:53:39:49: cd:21:80:12:a7:36:17:9b:5e:9d:9f:35:79:53:eb: 79:45:be:7a:67:a3:a9:11:d2:4d:00:f0:23:72:a7: 0e:8b:ad:06:f8:87:8e:10:45:19:bf:e8:67:f5:09: 58:90:26:c7:ec:9d:ab:e9:0a:39:f7:27:9d:58:11: 65:1d:b2:76:a2:39:89:9f:f2:2a:83:e8:66:ee:c9: 74:37:20:0f:c9:1a:ca:d2:0d:b5:9b:b9:7f:76:ea: 7c:ca:ea:ee:46:66:a3:a0:90:60:22:17:bd:d8:5f: d8:4b:c5:9e:a3:aa:93:d7:c5:de:51:7b:44:20:cf: 74:6f:dd:7f:4a:9a:77:fc:17:b3:bc:cf:2b:28:e9: 34:a4:5d:83:66:c9:47:f4:cd:3a:7e:da:b2:ec:2d: 3a:de:37:86:07:01:58:da:0b:61:f9:cf:a2:b8:f2: ff:cb:cc:d9:6b:5a:c0:6e:d6:a4:55:66:b4:19:fc: 3c:0a:51:82:a1:3c:89:47:80:9d:69:da:1b:16:57: 8e:dc:9d:ce:82:76:2c:d2:45:2b:56:71:55:02:60: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:9B:71:38:50:0E:DF:FB:53:44:68:A2:1F:85:06:87:04:D7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:13:b1:a5:77:c0:c8:7e:17:19:fa:f4:49:bb:be:c5:48:7e: 52:1b:7f:a9:fc:fc:88:46:50:bd:f4:20:48:57:33:2f:94:bc: bb:39:0b:3f:ce:d5:3c:28:a7:68:ac:1f:93:49:c3:13:7b:ca: 00:ab:7e:c7:ac:bf:92:50:9f:21:d8:80:d6:41:b3:7d:b9:e5: 3e:67:42:cd:21:b5:ba:16:91:22:4c:8a:52:06:25:e3:5e:2a: d1:8b:a3:f7:2a:4c:43:a8:c9:35:1f:a3:82:c6:5b:cd:a7:61: f6:0c:4e:76:0b:c0:90:11:bc:55:48:69:1c:f5:29:7d:38:a4: 5b:24:85:98:17:8e:69:52:0c:f2:da:29:58:02:9f:0b:54:8a: f0:82:c1:87:af:9b:e8:dd:62:37:18:97:1e:bd:8a:dc:44:2c: 9c:b1:64:ef:29:ca:b0:10:f0:cc:06:50:e4:49:18:05:02:14: d2:5a:a8:b8:18:0e:f1:f8:de:89:d9:d9:b8:7f:e6:b8:51:ab: b6:c9:48:69:aa:a6:f9:a0:32:28:c4:ed:41:c3:5c:42:a1:be: 08:55:53:47:6c:80:bb:0e:14:d7:76:c7:65:ea:10:e4:96:80: 12:65:ab:ca:d3:6f:83:13:a1:50:b2:d0:b7:e1:d7:28:d4:67: 36:de:29:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMxEjQPAmjpttoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MzY4NTgyYTItNDE2Yy00NTA4LWJhNTktNTgxNjk4OTU5ZTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3sG/V65vIKvg37PSx6RD97BK6g90REJDyX lbU2XNmjY1RXyIMWkSxTOUnNIYASpzYXm16dnzV5U+t5Rb56Z6OpEdJNAPAjcqcO i60G+IeOEEUZv+hn9QlYkCbH7J2r6Qo59yedWBFlHbJ2ojmJn/Iqg+hm7sl0NyAP yRrK0g21m7l/dup8yuruRmajoJBgIhe92F/YS8Weo6qT18XeUXtEIM90b91/Spp3 /BezvM8rKOk0pF2DZslH9M06ftqy7C063jeGBwFY2gth+c+iuPL/y8zZa1rAbtak VWa0Gfw8ClGCoTyJR4CdadobFleO3J3OgnYs0kUrVnFVAmC15wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgDm3E4UA7f+1NEaKIfhQaHBNdzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMThjMGQyOGMtZjZkMi0z MzBhLWFiNWQtMThhOTJjZDE2MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwTsaV3wMh+Fxn69Em7vsVIflIbf6n8/IhGUL30IEhXMy+UvLs5Cz/O 1Twop2isH5NJwxN7ygCrfsesv5JQnyHYgNZBs3255T5nQs0htboWkSJMilIGJeNe KtGLo/cqTEOoyTUfo4LGW82nYfYMTnYLwJARvFVIaRz1KX04pFskhZgXjmlSDPLa KVgCnwtUivCCwYevm+jdYjcYlx69itxELJyxZO8pyrAQ8MwGUORJGAUCFNJaqLgY DvH43onZ2bh/5rhRq7bJSGmqpvmgMijE7UHDXEKhvghVU0dsgLsOFNd2x2XqEOSW gBJlq8rTb4MToVCy0Lfh1yjUZzbeKfk= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:24 2025 by rpki-client