$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b6a3941-a439-3fac-8634-72ffc3aa0033.roa File: 2b6a3941-a439-3fac-8634-72ffc3aa0033.roa (raw, json) Hash identifier: v+zHS/8lLOxZsD8qLcoiStY1/XBQMOpNNWj71VlOw2k= Subject key identifier: 39:9D:ED:54:75:FD:6E:78:89:FD:DE:BE:EE:E2:9D:85:96:C3:1E:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B771B03E15644BAA177A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b6a3941-a439-3fac-8634-72ffc3aa0033.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.7.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:77:1b:03:e1:56:44:ba:a1:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=fcf7a38b-5632-4a1d-94a6-7c88b805ee00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dd:21:b8:70:a6:52:9c:bf:37:8c:c5:bf:41: 50:f4:19:d3:02:94:56:46:ea:95:2b:57:7a:1f:03: ff:53:ca:fe:d2:55:59:05:5a:b6:46:89:c8:82:c4: 9f:65:1c:0e:a8:88:95:7a:0a:96:b4:4f:05:e9:da: 28:62:c7:55:28:75:a0:e1:f2:06:86:47:bc:52:ca: c2:3c:30:62:d4:27:90:9a:74:45:53:a8:ac:3d:ed: 35:0a:06:7e:1c:aa:71:17:12:8b:a7:c5:47:75:3e: c2:9e:dd:89:07:f6:29:e5:1c:db:06:d7:fc:67:b5: f9:5e:dc:1b:cd:d8:94:27:5c:d1:fb:1a:25:33:2c: a5:23:07:ca:b2:c6:df:27:53:1a:da:ac:73:ef:f7: 3b:48:14:7b:0d:dc:8c:f0:19:15:0b:7e:37:26:c8: 52:c3:2a:1e:1c:93:9a:82:50:67:82:83:fb:9f:16: f5:27:a1:55:b9:1f:d6:8d:42:03:2d:b0:d3:59:d8: e5:78:75:11:7f:b0:59:c8:3f:1c:27:ae:48:58:37: f2:d6:c9:d1:39:3f:c8:0d:a2:be:05:5d:7d:7f:75: db:85:0a:6f:25:00:e0:7d:07:ca:57:ab:97:b1:e8: 7d:e9:46:db:e1:c0:38:35:86:2f:0b:65:87:60:7e: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:ED:54:75:FD:6E:78:89:FD:DE:BE:EE:E2:9D:85:96:C3:1E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b6a3941-a439-3fac-8634-72ffc3aa0033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:18:a5:34:b9:57:69:ba:b1:d7:20:91:b1:b3:9a:a8:81:0d: 72:76:5b:b6:24:1d:38:c9:3b:7a:ee:eb:06:0b:4e:15:0e:c7: 8c:db:18:04:98:c5:d1:d2:52:d2:5d:7a:93:4b:11:f0:da:08: ea:27:df:3d:a7:d7:de:96:dd:dd:9b:c0:fb:96:0d:66:79:e1: d5:d8:8f:4b:f3:ba:81:35:38:d3:6b:fe:6d:3d:a0:5c:c9:b8: 5f:b4:c5:a8:9b:5d:cf:43:d2:91:58:c6:1f:96:3c:c4:6d:22: 58:21:72:0a:17:1b:81:5c:5f:08:ea:fe:04:f8:67:62:37:76: 2d:f2:d9:ff:05:3b:cf:fa:54:55:e6:4d:f2:7e:22:77:2f:05: 49:e7:30:98:29:bc:ed:cf:e2:39:4e:60:a9:ee:ba:3d:2a:1d: af:dc:37:d8:cb:e9:e0:46:c0:45:48:c6:68:0f:b0:6e:29:76: f8:c0:94:ae:93:e4:a6:cb:e7:df:e8:e1:b0:c0:7d:3f:88:f4: cd:b3:fc:a3:34:a1:cb:e6:72:a0:00:4c:0f:aa:53:31:68:00: 81:fb:06:ae:cf:17:c8:61:02:39:21:8d:6f:fd:a0:2f:27:0c: 03:eb:d3:03:1a:54:e8:3f:0c:c5:a6:6d:89:0a:0a:27:2f:15: 95:72:d9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3cbA+FWRLqhd6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ZmNmN2EzOGItNTYzMi00YTFkLTk0YTYtN2M4OGI4MDVlZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd0huHCmUpy/N4zFv0FQ9BnTApRWRuqVK1d6 HwP/U8r+0lVZBVq2RonIgsSfZRwOqIiVegqWtE8F6dooYsdVKHWg4fIGhke8UsrC PDBi1CeQmnRFU6isPe01CgZ+HKpxFxKLp8VHdT7Cnt2JB/Yp5RzbBtf8Z7X5Xtwb zdiUJ1zR+xolMyylIwfKssbfJ1Ma2qxz7/c7SBR7DdyM8BkVC343JshSwyoeHJOa glBngoP7nxb1J6FVuR/WjUIDLbDTWdjleHURf7BZyD8cJ65IWDfy1snROT/IDaK+ BV19f3XbhQpvJQDgfQfKV6uXseh96Ubb4cA4NYYvC2WHYH61XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmd7VR1/W54if3evu7inYWWwx6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmI2YTM5NDEtYTQzOS0z ZmFjLTg2MzQtNzJmZmMzYWEwMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMYpTS5V2m6sdcgkbGzmqiBDXJ2W7YkHTjJO3ru6wYLThUOx4zbGASY xdHSUtJdepNLEfDaCOon3z2n196W3d2bwPuWDWZ54dXYj0vzuoE1ONNr/m09oFzJ uF+0xaibXc9D0pFYxh+WPMRtIlghcgoXG4FcXwjq/gT4Z2I3di3y2f8FO8/6VFXm TfJ+IncvBUnnMJgpvO3P4jlOYKnuuj0qHa/cN9jL6eBGwEVIxmgPsG4pdvjAlK6T 5KbL59/o4bDAfT+I9M2z/KM0ocvmcqAATA+qUzFoAIH7Bq7PF8hhAjkhjW/9oC8n DAPr0wMaVOg/DMWmbYkKCicvFZVy2ak= -----END CERTIFICATE-----Generated at Wed Aug 6 14:16:32 2025 by rpki-client