$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa File: acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa (raw, json) Hash identifier: hLuMMX1jSBx82q3zqD1z20mGQPDvUJDNjEQRrvpQm7E= Subject key identifier: 2E:52:F2:22:B5:60:D2:CF:86:C1:0C:F7:E9:1B:6B:FB:EA:A4:82:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8840AB03196B8BB4EBED5400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:ab:03:19:6b:8b:b4:eb:ed:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=d8138dc8-78a7-4b10-971d-d7a9ab74d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:6a:c5:f2:44:f7:8e:a8:1b:02:b0:1b:55: a1:3e:90:ba:8b:b8:49:c4:da:d6:99:4d:d5:fe:3b: ec:05:96:f7:01:67:83:84:3c:7e:39:c1:fb:95:14: 59:53:ee:30:03:ac:dc:3e:3c:9e:e2:5f:a3:35:80: 5a:aa:87:46:bb:a6:b7:ac:f0:0d:d2:6c:b5:8e:79: 79:3e:44:4a:15:ad:bc:ee:a0:a3:3b:6d:48:4d:57: 2f:2e:fa:20:5a:9c:1f:fe:ae:f2:f7:9f:12:f1:65: 4e:df:48:b6:eb:42:a1:44:fe:5b:5e:3e:41:2a:dc: b8:84:0c:5f:67:c7:27:6f:c7:9d:65:91:3e:da:70: 73:c0:b6:71:93:d2:51:9f:dd:99:85:4c:0d:fa:99: 87:48:f7:ed:42:2c:f3:d1:db:85:26:65:8c:db:00: 57:52:bd:f1:68:1f:4c:39:a7:c7:d2:e3:37:43:be: 1a:38:0f:ca:db:6d:d6:a5:d2:66:62:e0:9f:97:8e: 51:66:3d:b3:09:29:4b:ac:73:4f:83:10:81:34:18: 58:b0:0a:67:cb:07:26:fd:04:b5:d7:12:73:04:bf: 64:26:86:1f:8b:2b:84:c1:5c:59:43:0a:23:ce:71: 60:2c:6e:97:a0:7c:fd:89:77:05:37:f8:80:dd:5f: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:52:F2:22:B5:60:D2:CF:86:C1:0C:F7:E9:1B:6B:FB:EA:A4:82:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f2:40:58:cd:75:bf:a5:a6:c8:83:58:69:c3:5f:06:23:b1: 81:ff:68:79:86:bf:e1:05:a7:fb:c0:7f:82:66:9d:56:0f:0c: 02:19:99:ee:75:0d:2c:0a:2c:65:ca:51:24:1f:6f:81:31:14: d0:54:9a:b6:b2:d4:9b:84:1e:57:cb:89:00:c5:41:35:03:a9: 43:a8:bb:fa:1c:3f:d0:e3:83:20:73:ef:32:0e:f7:20:9b:a8: bf:15:0e:b5:36:4e:a1:98:30:fa:8d:f9:fb:a3:72:96:5a:4e: e0:21:bd:6b:ff:fe:db:34:d2:2d:73:79:cb:b3:ec:fb:8e:e1: 68:77:27:50:6d:e4:dc:ce:32:30:9f:68:f9:ea:7d:eb:65:f7: f4:e9:89:f7:f5:62:f9:0a:43:5e:a6:75:48:42:e2:70:c4:dc: 9a:22:3f:85:fd:49:cd:af:99:4f:ac:39:74:9e:93:94:e1:7f: 93:2f:ac:01:21:85:d9:b8:fb:91:67:61:77:8a:57:91:0d:fd: 8c:15:b7:c9:7e:08:19:13:bf:80:b4:2d:95:30:f8:e0:04:a5: ab:9c:65:c6:2f:9f:c5:6d:33:78:d9:a7:87:e0:aa:1f:8f:e5: b1:f4:32:b0:be:a3:87:69:3f:35:8f:a8:77:25:3e:a7:87:c7: 26:4e:a9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKsDGWuLtOvtVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDgxMzhkYzgtNzhhNy00YjEwLTk3MWQtZDdhOWFiNzRkNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH5qxfJE946oGwKwG1WhPpC6i7hJxNrWmU3V /jvsBZb3AWeDhDx+OcH7lRRZU+4wA6zcPjye4l+jNYBaqodGu6a3rPAN0my1jnl5 PkRKFa287qCjO21ITVcvLvogWpwf/q7y958S8WVO30i260KhRP5bXj5BKty4hAxf Z8cnb8edZZE+2nBzwLZxk9JRn92ZhUwN+pmHSPftQizz0duFJmWM2wBXUr3xaB9M OafH0uM3Q74aOA/K223WpdJmYuCfl45RZj2zCSlLrHNPgxCBNBhYsApnywcm/QS1 1xJzBL9kJoYfiyuEwVxZQwojznFgLG6XoHz9iXcFN/iA3V849QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5S8iK1YNLPhsEM9+kba/vqpIKQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZGIzMTgtZTgyYy0z NmM5LWFjNGUtNTYzNmVjNDc1ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzyQFjNdb+lpsiDWGnDXwYjsYH/aHmGv+EFp/vAf4JmnVYPDAIZme51 DSwKLGXKUSQfb4ExFNBUmray1JuEHlfLiQDFQTUDqUOou/ocP9DjgyBz7zIO9yCb qL8VDrU2TqGYMPqN+fujcpZaTuAhvWv//ts00i1zecuz7PuO4Wh3J1Bt5NzOMjCf aPnqfetl9/Tpiff1YvkKQ16mdUhC4nDE3JoiP4X9Sc2vmU+sOXSek5Thf5MvrAEh hdm4+5FnYXeKV5EN/YwVt8l+CBkTv4C0LZUw+OAEpaucZcYvn8VtM3jZp4fgqh+P 5bH0MrC+o4dpPzWPqHclPqeHxyZOqe4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:56:51 2025 by rpki-client