$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a11616c7-1f07-3b5d-bf6e-4997a284306a.roa File: a11616c7-1f07-3b5d-bf6e-4997a284306a.roa (raw, json) Hash identifier: kyK4tltaPE4Pu/xFeq50dMCzynLrukZ+m9TtZ5+gxNo= Subject key identifier: 20:B4:64:67:A8:1C:C1:6B:91:30:A6:EF:D7:9B:6E:AF:71:83:85:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB4922B75AA601033CA2D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a11616c7-1f07-3b5d-bf6e-4997a284306a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 71.30.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:92:2b:75:aa:60:10:33:ca:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=1cacf280-da15-4b92-b895-5a86ab60a503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:80:cc:58:fe:bf:ba:7b:10:a0:59:53:66: c1:84:4e:01:c2:fe:19:9a:50:a7:63:b4:91:18:ab: db:38:8a:bd:3c:8d:1e:e1:3f:8b:8c:25:a1:ef:cd: 74:c7:9e:f2:92:88:13:96:2f:fa:29:44:c3:62:46: 76:18:7f:ca:da:18:f8:7b:11:c9:2c:9f:35:22:72: 06:1d:d1:2c:9f:8b:b7:1e:0c:af:09:62:77:51:dd: 04:80:b2:c7:7b:75:b7:79:e9:10:38:c8:bd:43:8f: 20:74:db:18:f4:65:96:c8:15:73:40:78:34:89:14: e3:de:08:da:7b:9d:6a:5f:4c:ca:53:85:a7:4c:11: 25:4d:0c:cb:bf:1b:c2:94:ba:43:91:1b:05:b5:ad: ae:42:e5:9f:8f:c6:49:8d:49:96:89:48:a2:aa:e4: fb:1f:68:4b:f8:28:01:ae:c8:f5:f1:e8:95:72:57: 08:dd:6c:0f:0e:f2:43:b8:23:fd:81:83:99:58:0a: a0:33:dd:b7:7e:a5:28:2f:b3:d9:e7:18:55:68:69: 6c:d4:e1:73:9e:c0:8d:98:78:44:45:e9:25:6e:82: 3b:1e:ad:33:77:32:d7:8c:94:50:b8:3d:4e:c7:a1: 62:7b:fd:b6:7e:8d:14:64:15:0e:50:8b:73:68:f0: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:64:67:A8:1C:C1:6B:91:30:A6:EF:D7:9B:6E:AF:71:83:85:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a11616c7-1f07-3b5d-bf6e-4997a284306a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2b:7e:80:d2:e4:da:3d:99:c7:db:fc:a5:83:f1:78:a9:2f: 7e:65:ba:92:49:bf:fc:f1:21:4c:6e:e2:34:81:eb:1f:b5:90: ef:4d:be:52:0d:46:4a:b7:d6:d4:03:4d:b5:de:e2:87:8d:38: 3f:69:48:c2:eb:83:bd:fd:7b:57:3e:39:b3:00:24:73:b0:85: 94:79:a8:2f:12:ba:81:c5:4b:04:0d:57:4a:cb:bb:c0:be:c2: 9d:ae:b9:68:a5:a3:a6:45:ae:31:93:4c:cb:da:c4:1c:9f:de: 4b:f9:5a:ac:7c:64:d1:5f:47:27:7e:48:11:be:d5:02:87:26: 67:fa:77:e2:6d:67:64:58:0d:51:a2:19:65:ea:80:e7:06:8d: 5d:e3:59:24:43:79:92:6c:7b:a1:46:81:35:2c:eb:b8:89:97: b8:d8:60:da:e0:1f:d9:ae:a3:c4:65:53:80:fa:a0:56:30:c2: d4:30:24:97:68:ae:68:e6:d2:e9:7f:73:8b:49:fe:40:3d:5d: 66:12:6d:35:f5:b3:26:b0:f4:eb:c4:1e:98:dc:49:6a:08:e0: 24:4a:ae:8c:53:88:8a:86:2d:5d:2b:64:5c:ec:a8:f2:11:6b: 4d:59:a7:0d:43:39:9e:ca:86:c2:66:a9:a4:28:69:7c:04:46: c5:a3:7d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJIrdapgEDPKLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MWNhY2YyODAtZGExNS00YjkyLWI4OTUtNWE4NmFiNjBhNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFiAzFj+v7p7EKBZU2bBhE4Bwv4ZmlCnY7SR GKvbOIq9PI0e4T+LjCWh7810x57ykogTli/6KUTDYkZ2GH/K2hj4exHJLJ81InIG HdEsn4u3HgyvCWJ3Ud0EgLLHe3W3eekQOMi9Q48gdNsY9GWWyBVzQHg0iRTj3gja e51qX0zKU4WnTBElTQzLvxvClLpDkRsFta2uQuWfj8ZJjUmWiUiiquT7H2hL+CgB rsj18eiVclcI3WwPDvJDuCP9gYOZWAqgM923fqUoL7PZ5xhVaGls1OFznsCNmHhE ReklboI7Hq0zdzLXjJRQuD1Ox6Fie/22fo0UZBUOUItzaPB8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC0ZGeoHMFrkTCm79ebbq9xg4X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTExNjE2YzctMWYwNy0z YjVkLWJmNmUtNDk5N2EyODQzMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEorfoDS5No9mcfb/KWD8XipL35lupJJv/zxIUxu4jSB6x+1kO9NvlIN Rkq31tQDTbXe4oeNOD9pSMLrg739e1c+ObMAJHOwhZR5qC8SuoHFSwQNV0rLu8C+ wp2uuWilo6ZFrjGTTMvaxByf3kv5Wqx8ZNFfRyd+SBG+1QKHJmf6d+JtZ2RYDVGi GWXqgOcGjV3jWSRDeZJse6FGgTUs67iJl7jYYNrgH9muo8RlU4D6oFYwwtQwJJdo rmjm0ul/c4tJ/kA9XWYSbTX1syaw9OvEHpjcSWoI4CRKroxTiIqGLV0rZFzsqPIR a01Zpw1DOZ7KhsJmqaQoaXwERsWjfe8= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:08 2025 by rpki-client