$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa File: 34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa (raw, json) Hash identifier: g/gyGEV+PxiFsz/1vV5897EfY3o+9YwpUYtMeubfNIc= Subject key identifier: 9E:C9:B6:8B:3C:EC:A4:F1:94:84:C0:45:03:6C:59:6C:78:35:E5:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA90DC074F0F7311DEE800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.30.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:90:dc:07:4f:0f:73:11:de:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=5f08d879-6378-4536-9343-ba1c9ad2dc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:2b:b5:c5:4e:28:68:99:3d:65:df:c4:7a: e8:26:4f:6c:fa:a3:36:7b:15:76:77:dd:c2:d4:b2: 5b:18:c1:7d:d1:01:a7:69:be:6b:63:40:f0:37:37: e0:68:f0:10:87:4f:13:38:df:9d:88:5a:da:1f:10: 2a:00:f0:d5:05:85:7e:d4:86:37:3e:e6:30:75:3e: 2d:d1:ab:41:47:e6:b7:ed:f3:28:92:41:05:a3:ed: ce:39:6e:ea:4f:32:da:ab:66:56:8c:03:6e:9b:cd: a1:2b:96:24:a4:9b:fa:b2:cd:04:73:52:73:5e:10: 7b:91:e7:17:0e:d4:64:f7:c0:c8:95:ca:9e:44:71: a2:ee:fe:a0:75:71:d9:c8:44:cf:e4:39:4f:b4:30: 7d:0a:d3:54:d9:8c:39:b2:d4:06:ee:2d:6f:92:fb: ad:2f:28:42:23:c1:a3:43:d4:bc:eb:68:df:27:be: a2:9f:5c:e4:e9:14:83:ac:87:c9:4e:fa:c0:7d:6c: cc:8c:5c:29:ef:ea:b1:98:55:5e:64:a3:f3:67:49: 70:96:f6:53:2b:0a:8a:e8:04:5a:0a:2e:da:da:fd: 73:37:11:ee:69:95:20:c1:be:26:8d:c2:a5:56:a2: 5d:c3:e7:72:7c:25:02:ad:b9:ab:be:1f:d7:2e:d0: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C9:B6:8B:3C:EC:A4:F1:94:84:C0:45:03:6C:59:6C:78:35:E5:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:93:cc:c6:32:e1:82:bf:3d:63:c9:67:3c:0b:81:71:83:5d: cb:c1:10:1c:2f:a4:81:a6:f4:a5:9e:91:a6:d6:2a:81:b7:56: b8:10:a3:cd:02:c8:63:fd:4f:53:16:24:6c:3f:63:ac:d3:b3: eb:83:c0:8a:4c:85:85:2a:cb:0a:52:74:71:aa:15:fa:a0:6d: 5a:4d:1f:de:6b:46:1a:e6:e6:18:31:c5:42:8f:69:85:89:12: d3:17:89:8b:f4:10:da:4f:b1:8b:9a:1b:ac:74:51:ea:6a:12: 7e:fa:3a:06:a3:39:cb:b5:88:57:d6:38:5e:48:08:93:f1:69: 08:55:31:dd:0d:06:ae:9b:60:fa:f7:97:1c:eb:09:4f:29:ae: 23:06:e1:6f:50:ca:69:70:ae:31:c7:95:a8:fd:26:a1:a2:73: 4f:03:11:72:3c:82:aa:6d:2c:22:39:d8:40:a6:95:8b:9a:d3: 55:fd:1a:fb:eb:bd:25:2f:68:0e:8d:8c:49:ed:03:f7:c7:8e: c6:d3:98:6f:54:da:4d:d4:d7:2d:cd:fe:75:ec:99:66:6a:b1: 63:66:45:91:77:fa:64:28:10:12:6f:a1:a5:83:64:b3:d5:c3: e8:8c:98:8d:cd:1c:ba:8b:3b:b9:67:ed:3d:24:f9:7d:28:38: 8f:94:0b:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpDcB08PcxHe6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NWYwOGQ4NzktNjM3OC00NTM2LTkzNDMtYmExYzlhZDJkYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYrtcVOKGiZPWXfxHroJk9s+qM2exV2d93C 1LJbGMF90QGnab5rY0DwNzfgaPAQh08TON+diFraHxAqAPDVBYV+1IY3PuYwdT4t 0atBR+a37fMokkEFo+3OOW7qTzLaq2ZWjANum82hK5YkpJv6ss0Ec1JzXhB7kecX DtRk98DIlcqeRHGi7v6gdXHZyETP5DlPtDB9CtNU2Yw5stQG7i1vkvutLyhCI8Gj Q9S862jfJ76in1zk6RSDrIfJTvrAfWzMjFwp7+qxmFVeZKPzZ0lwlvZTKwqK6ARa Ci7a2v1zNxHuaZUgwb4mjcKlVqJdw+dyfCUCrbmrvh/XLtC+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7Jtos87KTxlITARQNsWWx4NeVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRjOTc0MjgtNzMyYy0z YzIzLTlhOWQtNGZhNTU3YmQxZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiTzMYy4YK/PWPJZzwLgXGDXcvBEBwvpIGm9KWekabWKoG3VrgQo80C yGP9T1MWJGw/Y6zTs+uDwIpMhYUqywpSdHGqFfqgbVpNH95rRhrm5hgxxUKPaYWJ EtMXiYv0ENpPsYuaG6x0UepqEn76OgajOcu1iFfWOF5ICJPxaQhVMd0NBq6bYPr3 lxzrCU8priMG4W9QymlwrjHHlaj9JqGic08DEXI8gqptLCI52ECmlYua01X9Gvvr vSUvaA6NjEntA/fHjsbTmG9U2k3U1y3N/nXsmWZqsWNmRZF3+mQoEBJvoaWDZLPV w+iMmI3NHLqLO7ln7T0k+X0oOI+UC/8= -----END CERTIFICATE-----Generated at Sun Jun 15 13:12:22 2025 by rpki-client