$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa File: 6763f7e4-2af7-3bb9-9314-87a2549315db.roa (raw, json) Hash identifier: 8cPBVNJb9xtQ/nq24iSKJa/IWFZigKhumL3Y9Dfpilc= Subject key identifier: 99:AC:0F:27:7F:48:23:7D:A7:51:E4:E9:D2:E9:68:35:95:62:06:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9E966463A4BEAB6B630BFA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.31.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:64:63:a4:be:ab:6b:63:0b:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=12ae9233-094e-495a-8f1d-179d316487aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e3:95:c9:ff:7c:71:fa:46:b4:8c:40:8f:d0: 2d:93:cf:2e:54:d8:70:bc:87:50:f9:ad:ac:3a:54: f6:69:d4:50:48:87:e3:a1:24:b1:6b:a6:7a:60:61: 4e:1a:f9:00:47:10:9e:a6:94:2a:37:9c:5e:59:62: 89:95:25:96:5d:e8:9f:11:b6:bb:32:7c:8f:11:a9: 4a:31:00:62:ca:98:bf:8d:a1:65:18:ee:7a:aa:80: fc:d7:a3:8d:92:e4:af:2a:88:27:fe:bf:31:b4:6a: 80:e6:9f:ab:53:2c:04:6a:41:9d:d9:a1:fc:f2:bf: 1c:16:5c:22:66:3a:ed:20:1b:09:1c:f6:a4:f9:32: c9:3b:33:21:93:04:1c:26:c4:5b:ad:49:da:24:f9: 20:d2:60:c1:f0:14:b2:40:fe:97:ec:72:0a:da:ec: 9e:6a:79:8f:78:3d:a1:80:24:84:ad:28:d7:1c:a2: 62:b0:af:1a:de:fb:ad:73:e3:cd:bc:bb:ff:56:05: 5e:00:cd:47:23:72:c1:a4:dd:df:a0:93:15:1d:a9: 41:03:5f:fa:52:75:8d:22:dd:ec:a5:bd:51:78:79: 64:2a:7e:fa:39:e7:3b:45:26:b4:31:dc:3e:b0:d9: 9a:3f:0a:ce:29:80:8e:72:9c:04:d4:3c:9d:0c:01: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AC:0F:27:7F:48:23:7D:A7:51:E4:E9:D2:E9:68:35:95:62:06:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6763f7e4-2af7-3bb9-9314-87a2549315db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6b:fb:6d:b5:a2:d5:d0:d8:1a:9a:ff:ce:30:0b:3e:68:ec: bb:70:d5:ee:63:13:df:e6:48:8c:1c:e4:ee:6c:e4:f1:85:fd: 02:b1:a1:3c:4a:6e:85:fb:39:ce:d1:82:d7:3c:1a:90:68:56: f4:8c:15:fc:ff:95:c6:b4:0a:d0:23:2e:03:8b:f8:6a:a5:4b: d0:6c:fc:c5:ef:0d:71:c5:e2:9e:2c:5f:32:bc:70:41:81:12: b3:10:bc:5f:8f:09:0e:dc:57:8c:07:bf:4f:7e:05:04:f4:cf: af:8d:a2:c0:cc:37:8f:d0:c6:51:6a:c8:e1:af:51:73:fd:9e: 51:9d:0c:9b:54:8a:42:b4:e8:fd:ab:12:67:05:8e:ac:2a:3f: 62:c0:97:0a:b9:8a:4d:5d:cd:62:02:c9:9e:82:6e:6a:89:ac: 43:5c:ed:73:95:87:d8:10:e6:82:d1:87:c8:da:88:59:5d:2b: 89:60:3a:60:ed:7e:92:1d:e9:78:ce:a0:ad:55:05:5e:51:cd: fc:94:ff:6c:bb:50:67:df:99:a3:21:07:4a:64:d6:bf:2a:ec: da:a1:8b:70:ab:92:9b:b4:28:79:0f:19:c0:e5:2c:cd:8a:63: ee:23:ac:fc:ea:0c:e0:d8:3b:67:4d:e1:29:c5:04:32:f2:47: d1:ae:dc:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelmRjpL6ra2ML+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MTJhZTkyMzMtMDk0ZS00OTVhLThmMWQtMTc5ZDMxNjQ4N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+OVyf98cfpGtIxAj9Atk88uVNhwvIdQ+a2s OlT2adRQSIfjoSSxa6Z6YGFOGvkARxCeppQqN5xeWWKJlSWWXeifEba7MnyPEalK MQBiypi/jaFlGO56qoD816ONkuSvKogn/r8xtGqA5p+rUywEakGd2aH88r8cFlwi ZjrtIBsJHPak+TLJOzMhkwQcJsRbrUnaJPkg0mDB8BSyQP6X7HIK2uyeanmPeD2h gCSErSjXHKJisK8a3vutc+PNvLv/VgVeAM1HI3LBpN3foJMVHalBA1/6UnWNIt3s pb1ReHlkKn76Oec7RSa0Mdw+sNmaPwrOKYCOcpwE1DydDAGADQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmsDyd/SCN9p1Hk6dLpaDWVYgbjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc2M2Y3ZTQtMmFmNy0z YmI5LTkzMTQtODdhMjU0OTMxNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpr+221otXQ2Bqa/84wCz5o7Ltw1e5jE9/mSIwc5O5s5PGF/QKxoTxK boX7Oc7Rgtc8GpBoVvSMFfz/lca0CtAjLgOL+GqlS9Bs/MXvDXHF4p4sXzK8cEGB ErMQvF+PCQ7cV4wHv09+BQT0z6+NosDMN4/QxlFqyOGvUXP9nlGdDJtUikK06P2r EmcFjqwqP2LAlwq5ik1dzWICyZ6CbmqJrENc7XOVh9gQ5oLRh8jaiFldK4lgOmDt fpId6XjOoK1VBV5RzfyU/2y7UGffmaMhB0pk1r8q7Nqhi3Crkpu0KHkPGcDlLM2K Y+4jrPzqDODYO2dN4SnFBDLyR9Gu3JI= -----END CERTIFICATE-----Generated at Wed Aug 6 10:15:16 2025 by rpki-client