$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa File: 40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa (raw, json) Hash identifier: PxemfpxRrnwDBEtlfpe1RtYIPMnW/kNItS7TZieU3Jo= Subject key identifier: BD:0C:3A:11:D5:B8:93:BE:8A:8D:8D:CA:E1:D1:D6:08:0B:A7:E3:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB386282E72F88BEC5113BD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 71.31.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:28:2e:72:f8:8b:ec:51:13:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=f2f13e21-735f-4322-b87f-56ad8622d556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:20:a3:0f:39:dc:86:1f:60:02:0f:57:fe: df:e7:ca:b6:43:dd:d3:ea:ff:4a:c8:48:67:f1:03: ad:8e:d3:3f:b2:e7:6f:0f:f4:54:6c:44:c2:6f:3e: 38:08:c0:21:e7:66:6b:05:43:e7:a0:01:6c:86:5e: 26:dd:79:3e:cf:76:cc:68:b4:54:4d:f4:46:a0:c1: 55:aa:b6:b4:64:81:da:05:67:8d:31:52:e9:a9:d6: 24:fe:36:4d:46:2e:27:f6:00:8d:98:53:74:40:94: f1:8d:ad:d3:fd:ca:2c:41:90:44:81:7d:9f:89:34: be:94:2e:85:e2:e9:50:f9:ed:43:8e:8b:59:03:31: 28:0a:b7:d3:45:75:2e:f5:a6:a6:9b:bb:bf:c6:d5: 65:53:54:c5:3f:e1:93:7d:9d:b4:5c:65:f3:3e:ba: f7:45:1f:2b:b9:76:d2:56:fc:97:e6:e5:67:85:b5: ed:65:ab:e5:6b:3a:a4:4f:97:a6:45:eb:7c:20:45: a9:f3:52:86:d0:36:4f:12:43:97:0e:99:bd:4b:cb: 4d:f9:e8:75:72:c5:2a:7a:35:aa:67:4c:7b:6d:55: a8:da:e7:07:b0:4a:02:70:c6:87:99:00:9e:98:a7: 4f:2c:fc:4d:d5:b1:05:f7:b7:ed:82:32:8d:13:87: 23:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0C:3A:11:D5:B8:93:BE:8A:8D:8D:CA:E1:D1:D6:08:0B:A7:E3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:34:55:a4:a4:04:3d:a6:00:2a:9d:38:c1:be:0f:c9:be:dd: 9f:9d:e9:7d:7c:19:48:23:52:e9:ba:f7:29:ee:db:3b:27:64: e1:73:fa:b6:a7:ca:a3:01:2f:8b:2a:c0:e6:0b:85:d9:da:25: 41:30:6f:70:ac:8c:4a:7f:f5:bf:31:89:75:58:a9:7b:00:73: 06:14:5c:b9:ac:f5:33:0f:ae:f2:b2:1b:dc:f8:88:75:e7:62: 5c:6e:a3:bf:0b:6e:df:8c:f2:65:2d:3c:16:4a:3e:c6:3c:a6: b2:80:e5:6b:49:b1:b9:cf:2c:fd:d4:a4:9d:1b:97:c6:4c:0b: 13:fd:08:55:1a:ac:ae:f6:3a:27:5c:0f:15:d4:dc:35:b1:8f: d3:79:19:f1:8b:e2:09:bd:6b:23:9f:b0:d2:e2:67:03:74:8b: 83:85:b6:9a:5c:24:72:81:26:00:70:ba:74:49:bc:78:cf:5f: 6a:d3:f7:2a:2d:41:9c:b5:67:65:5c:df:b7:d9:29:be:9e:cb: 3c:2b:31:27:60:8b:a0:48:de:a4:f3:29:57:25:30:48:7f:3b: 93:17:90:ac:85:8e:44:81:34:4a:e2:19:ca:e1:6f:81:ed:df: fe:b0:0c:29:e9:65:2d:ef:b4:17:34:85:68:de:a0:a7:93:ac: 77:f3:64:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhigucviL7FETvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjJmMTNlMjEtNzM1Zi00MzIyLWI4N2YtNTZhZDg2MjJkNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmksgow853IYfYAIPV/7f58q2Q93T6v9KyEhn 8QOtjtM/sudvD/RUbETCbz44CMAh52ZrBUPnoAFshl4m3Xk+z3bMaLRUTfRGoMFV qra0ZIHaBWeNMVLpqdYk/jZNRi4n9gCNmFN0QJTxja3T/cosQZBEgX2fiTS+lC6F 4ulQ+e1DjotZAzEoCrfTRXUu9aamm7u/xtVlU1TFP+GTfZ20XGXzPrr3RR8ruXbS VvyX5uVnhbXtZavlazqkT5emRet8IEWp81KG0DZPEkOXDpm9S8tN+eh1csUqejWq Z0x7bVWo2ucHsEoCcMaHmQCemKdPLPxN1bEF97ftgjKNE4cjNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0MOhHVuJO+io2NyuHR1ggLp+MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBiYWZiOWEtMWZmYy0z ZTdiLWIxNjAtMWFmZjdhZTYwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ0VaSkBD2mACqdOMG+D8m+3Z+d6X18GUgjUum69ynu2zsnZOFz+ran yqMBL4sqwOYLhdnaJUEwb3CsjEp/9b8xiXVYqXsAcwYUXLms9TMPrvKyG9z4iHXn Ylxuo78Lbt+M8mUtPBZKPsY8prKA5WtJsbnPLP3UpJ0bl8ZMCxP9CFUarK72Oidc DxXU3DWxj9N5GfGL4gm9ayOfsNLiZwN0i4OFtppcJHKBJgBwunRJvHjPX2rT9yot QZy1Z2Vc37fZKb6eyzwrMSdgi6BI3qTzKVclMEh/O5MXkKyFjkSBNEriGcrhb4Ht 3/6wDCnpZS3vtBc0hWjeoKeTrHfzZCc= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:04 2025 by rpki-client