$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68c9aba5-2675-3eb1-8224-5ff5e44e8e26.roa File: 68c9aba5-2675-3eb1-8224-5ff5e44e8e26.roa (raw, json) Hash identifier: 2YvZO7ntGRgs1h2CghO8BmOOts8SFPe/WD4xzOKaIzw= Subject key identifier: 6F:E3:59:98:04:50:56:96:64:5A:C9:BA:30:2E:EF:62:5C:2A:6E:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CD8577279D4BBC7F8E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68c9aba5-2675-3eb1-8224-5ff5e44e8e26.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.30.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cd:85:77:27:9d:4b:bc:7f:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=bc9f0858-0388-4769-a36d-100faddeff97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:4c:64:eb:31:3a:66:06:c9:1d:fd:60:9d: 73:39:21:3a:27:64:01:c2:69:f6:a6:c9:9d:04:15: 42:a1:6f:cd:97:93:63:ac:2b:d4:f2:05:76:04:bf: 38:c9:92:2f:4e:27:52:07:d5:8e:0b:0e:c9:15:62: 5b:f8:2e:a3:d4:d5:3d:ac:50:c5:49:1c:e1:5b:63: c5:03:59:1a:fc:7f:50:0c:33:c4:3d:98:58:5e:92: d8:9c:f7:a4:c6:4e:38:f9:ef:d4:bd:d9:b6:cb:46: 19:66:60:6b:34:c6:ad:3d:d3:2d:8d:61:f9:6b:de: e4:f1:97:0f:ca:18:9f:d0:9d:1e:a6:d4:06:54:06: a7:48:b8:cf:66:18:a7:68:a4:f2:bb:b6:5f:1c:55: d4:3b:1a:84:15:40:52:31:3d:ca:92:14:74:02:d5: 38:a1:81:3f:29:33:8e:0a:df:ee:8f:1a:dd:6d:a8: 61:e4:63:34:e1:c7:f3:39:d2:8a:aa:b0:72:bb:4b: 0a:af:5f:fa:1f:67:98:39:23:89:8f:1d:f5:23:69: bf:99:48:ca:12:0a:81:54:cb:2f:a0:02:a2:56:bc: cc:77:6f:8b:c8:9e:a4:6a:95:af:45:96:e7:1c:fb: 55:50:03:70:12:6d:81:ad:9a:9b:c0:38:c3:88:2d: 30:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E3:59:98:04:50:56:96:64:5A:C9:BA:30:2E:EF:62:5C:2A:6E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68c9aba5-2675-3eb1-8224-5ff5e44e8e26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4b:a1:58:eb:4a:80:67:2e:2a:c7:a2:f6:27:f4:0b:5e:de: f5:eb:08:98:d4:04:1d:45:65:d4:60:98:e1:ca:6d:d9:29:6d: 26:c2:49:8d:5d:77:60:d8:1c:89:4b:e2:c1:61:ea:1d:e2:1d: 1d:bf:76:e1:ea:cf:5f:15:b1:bb:22:06:2d:db:d7:d1:8e:b7: ce:dc:4e:08:ad:68:de:87:4a:11:52:f8:13:cf:92:86:9e:3d: 4a:d6:e5:b5:a5:36:5a:8e:46:59:7a:d3:42:df:7d:61:40:e0: 0e:a7:d6:0e:e8:db:b4:2c:09:92:e7:23:48:71:a2:56:8a:a5: 9a:76:8f:3a:42:60:46:6d:bd:01:fb:a1:57:c6:ca:a0:a9:6c: ee:e2:13:3b:1c:12:db:73:f8:d5:de:06:17:b6:df:a8:6d:23: 56:f2:a3:9d:c2:a4:c6:c3:5c:0e:df:44:d3:71:15:9d:b5:03: e8:a0:35:e3:90:e0:4a:f8:88:f6:f6:48:a0:5f:1e:62:e6:4e: e9:d1:2e:83:3d:f0:e4:d2:df:96:ac:94:c3:e1:f9:c3:14:df: ab:68:9d:f8:73:78:fd:cb:4a:c6:92:fd:2a:2b:4f:cc:51:1a: de:fa:d1:87:c5:d9:d1:61:e4:4c:fd:d3:6f:1d:5e:69:5a:a7: df:5e:ae:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM2FdyedS7x/joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YmM5ZjA4NTgtMDM4OC00NzY5LWEzNmQtMTAwZmFkZGVmZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n1MZOsxOmYGyR39YJ1zOSE6J2QBwmn2psmd BBVCoW/Nl5NjrCvU8gV2BL84yZIvTidSB9WOCw7JFWJb+C6j1NU9rFDFSRzhW2PF A1ka/H9QDDPEPZhYXpLYnPekxk44+e/Uvdm2y0YZZmBrNMatPdMtjWH5a97k8ZcP yhif0J0eptQGVAanSLjPZhinaKTyu7ZfHFXUOxqEFUBSMT3KkhR0AtU4oYE/KTOO Ct/ujxrdbahh5GM04cfzOdKKqrByu0sKr1/6H2eYOSOJjx31I2m/mUjKEgqBVMsv oAKiVrzMd2+LyJ6kapWvRZbnHPtVUANwEm2BrZqbwDjDiC0wRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/jWZgEUFaWZFrJujAu72JcKm63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjhjOWFiYTUtMjY3NS0z ZWIxLTgyMjQtNWZmNWU0NGU4ZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1LoVjrSoBnLirHovYn9Ate3vXrCJjUBB1FZdRgmOHKbdkpbSbCSY1d d2DYHIlL4sFh6h3iHR2/duHqz18VsbsiBi3b19GOt87cTgitaN6HShFS+BPPkoae PUrW5bWlNlqORll600LffWFA4A6n1g7o27QsCZLnI0hxolaKpZp2jzpCYEZtvQH7 oVfGyqCpbO7iEzscEttz+NXeBhe236htI1byo53CpMbDXA7fRNNxFZ21A+igNeOQ 4Er4iPb2SKBfHmLmTunRLoM98OTS35aslMPh+cMU36tonfhzeP3LSsaS/SorT8xR Gt760YfF2dFh5Ez9028dXmlap99erkU= -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:53 2025 by rpki-client