$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa File: 96213a24-96de-36e3-bc89-e54aaa229011.roa (raw, json) Hash identifier: v3WuWUN0VmAMW5mXvKXNoptZXw1h38gMIO7j+voo3jQ= Subject key identifier: 7F:11:77:FC:78:31:ED:8D:C3:75:CC:EC:C0:CA:B4:2D:A5:8A:B5:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22125375F9AE2963ACCA060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 71.30.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:25:37:5f:9a:e2:96:3a:cc:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=7f7c2ee9-e251-4c60-a3ce-aefac25b933d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:da:b5:fa:c1:76:50:1f:3d:59:a6:9d:29: a8:b0:de:e1:14:98:2f:11:e0:39:b2:53:4f:c1:88: 67:cb:1f:26:db:80:ad:81:c5:9b:d0:52:6f:52:47: 6f:ce:68:7b:77:e2:34:46:fc:77:b5:f8:fb:ef:6a: ea:f7:ca:69:7e:c3:a6:ac:94:c1:08:a1:4a:ca:66: 88:54:dd:1a:73:65:36:dc:29:d7:00:28:bc:b6:8c: 8f:2e:3c:ee:8c:d9:16:aa:b2:0d:f0:02:79:e9:36: 5c:5c:19:a5:19:13:a2:0a:35:b1:04:d8:1d:4c:7a: 19:04:51:00:4d:a7:b2:11:e8:62:81:b3:48:a6:26: 2f:cb:7e:de:0c:18:2d:31:25:52:81:0d:1b:9d:d7: 89:60:9a:a7:3f:f1:ec:1a:8e:13:86:2a:6b:7f:8c: 5a:8a:17:8c:a8:7d:b5:85:8e:67:17:66:62:0f:3c: 04:41:36:1d:f4:d1:43:e7:81:31:53:df:ec:a1:fb: f1:78:c6:c7:b3:48:01:6b:a3:d0:68:42:5f:95:0f: f9:3e:25:04:49:4f:2f:2c:fe:68:67:51:e9:c2:a2: 26:00:b9:f2:04:4f:02:96:6d:1a:e4:c1:b0:49:7a: 7a:04:cf:26:47:c6:60:f6:47:56:6e:c4:11:cb:4e: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:11:77:FC:78:31:ED:8D:C3:75:CC:EC:C0:CA:B4:2D:A5:8A:B5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/96213a24-96de-36e3-bc89-e54aaa229011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:72:f7:dd:23:93:61:0f:eb:8a:c2:c9:67:86:18:27:c2:8a: b7:ce:98:75:89:c1:67:e1:d8:38:d9:5e:7a:cc:ce:4f:19:08: b9:49:21:b9:09:ff:9a:16:ea:ad:d3:ed:56:44:49:49:41:e8: 75:f9:b2:95:f5:5d:0e:73:82:12:c0:11:91:58:0f:cb:02:36: 62:fa:7c:d8:67:a3:a5:90:9d:aa:3b:6d:89:b7:6a:54:13:b6: 87:d5:4e:c9:41:12:7a:45:8d:2a:2d:a2:bf:c8:76:c0:d7:bd: 7c:ef:05:b4:f6:0f:a6:76:f0:cf:58:80:4f:4f:7d:24:fd:9b: ff:1c:11:17:e0:71:61:f9:8e:78:80:ee:d3:50:94:32:57:ae: ba:47:95:c3:ce:b2:5f:b1:14:3b:0c:8f:7f:01:ef:59:f1:e7: 59:99:01:06:e3:09:b0:13:e5:52:c8:ac:6c:ee:dc:06:86:59: f1:be:4f:be:b0:87:f9:b2:5d:50:29:2e:0c:75:52:89:a9:0e: 57:33:37:a0:06:37:ca:91:97:03:96:4a:60:9a:b0:1b:80:d4: b0:9e:e0:9c:9f:92:64:86:04:32:44:2a:3e:81:a6:4d:0f:28: a9:63:30:2d:d6:fb:c4:a0:db:b8:e2:e9:39:6b:28:10:2a:84: da:43:6c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyISU3X5riljrMoGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2Y3YzJlZTktZTI1MS00YzYwLWEzY2UtYWVmYWMyNWI5MzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwjatfrBdlAfPVmmnSmosN7hFJgvEeA5slNP wYhnyx8m24CtgcWb0FJvUkdvzmh7d+I0Rvx3tfj772rq98ppfsOmrJTBCKFKymaI VN0ac2U23CnXACi8toyPLjzujNkWqrIN8AJ56TZcXBmlGROiCjWxBNgdTHoZBFEA TaeyEehigbNIpiYvy37eDBgtMSVSgQ0bndeJYJqnP/HsGo4Thiprf4xaiheMqH21 hY5nF2ZiDzwEQTYd9NFD54ExU9/sofvxeMbHs0gBa6PQaEJflQ/5PiUESU8vLP5o Z1HpwqImALnyBE8Clm0a5MGwSXp6BM8mR8Zg9kdWbsQRy05TTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8Rd/x4Me2Nw3XM7MDKtC2lirVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTYyMTNhMjQtOTZkZS0z NmUzLWJjODktZTU0YWFhMjI5MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFy990jk2EP64rCyWeGGCfCirfOmHWJwWfh2DjZXnrMzk8ZCLlJIbkJ /5oW6q3T7VZESUlB6HX5spX1XQ5zghLAEZFYD8sCNmL6fNhno6WQnao7bYm3alQT tofVTslBEnpFjSotor/IdsDXvXzvBbT2D6Z28M9YgE9PfST9m/8cERfgcWH5jniA 7tNQlDJXrrpHlcPOsl+xFDsMj38B71nx51mZAQbjCbAT5VLIrGzu3AaGWfG+T76w h/myXVApLgx1UompDlczN6AGN8qRlwOWSmCasBuA1LCe4JyfkmSGBDJEKj6Bpk0P KKljMC3W+8Sg27ji6TlrKBAqhNpDbNQ= -----END CERTIFICATE-----Generated at Wed Aug 6 14:23:39 2025 by rpki-client