$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa File: b070f9e8-2be6-3915-acc7-509b56ce39ec.roa (raw, json) Hash identifier: +wf0aNZMHprPqy7jPRPPoL8kbqyk1tZS0gknCy4zX+s= Subject key identifier: 4B:DB:9E:EF:76:92:71:9C:FA:2B:6C:E9:3A:CF:89:89:72:6C:73:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D373A0B3F5F1B144B8C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.30.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d3:73:a0:b3:f5:f1:b1:44:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=21ecefe2-f6a3-41c8-891a-40728f7bc7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:f4:fc:f9:0b:ad:0f:d3:f1:98:55:35:76: dc:c8:36:85:76:5f:8c:af:db:20:17:2c:e9:3b:28: 01:71:08:2d:60:66:29:be:72:64:53:f6:03:28:30: 74:24:a1:2d:23:c8:12:4a:71:76:8d:49:36:b7:4e: 49:48:d3:e6:0c:d6:57:f7:32:84:0d:e9:77:3d:92: c1:0f:14:2e:43:12:c8:e9:2e:3d:60:f4:22:43:93: 85:74:9d:ba:13:7d:1e:b5:1d:9d:04:b0:7a:21:7a: 09:96:f0:db:52:06:b1:5e:59:86:10:be:73:d4:f2: 08:e5:98:41:7e:68:e0:02:58:b7:c0:9d:97:03:ba: 31:ff:eb:66:d1:58:ef:59:e9:18:6a:20:7d:5a:ac: 85:a8:e2:d5:15:01:c9:0b:9d:d7:5c:55:fc:e9:e9: 12:cd:a4:f1:30:a1:52:46:3e:18:6d:b2:e3:d5:6d: 9d:48:82:40:3c:1b:1f:c8:fe:16:37:38:0a:d3:bf: 91:a7:7c:bd:99:88:22:d6:21:ad:c1:59:d1:cb:10: 09:76:1b:1c:58:4f:d0:50:d2:c9:cf:0f:07:ce:08: 92:ea:c0:94:79:e5:41:72:4d:71:bb:5d:18:7e:c5: 9f:94:46:29:01:5b:00:7e:d1:7d:a2:bc:3b:59:9b: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:9E:EF:76:92:71:9C:FA:2B:6C:E9:3A:CF:89:89:72:6C:73:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b070f9e8-2be6-3915-acc7-509b56ce39ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b6:3c:09:bd:19:fc:8b:1b:63:de:fb:41:28:93:8c:2b:2e: 6d:21:00:81:3d:4c:8f:98:da:6e:06:3d:1f:bc:41:fa:8d:d8: 92:3a:25:bc:0e:ad:eb:45:49:1d:1d:88:90:ad:d8:90:1d:1b: db:71:35:99:9a:4a:9b:e9:20:18:6b:c3:0c:4b:e2:41:c1:d2: 0c:79:1c:91:4a:d6:9e:e2:df:fe:64:4b:58:93:ce:22:9a:d4: 3f:fa:86:26:95:7a:1b:b5:e7:6d:ce:58:ce:96:22:6f:07:66: 79:ef:d8:00:19:53:f5:9e:0e:e2:ec:0e:d6:17:ff:39:d6:a9: 65:7c:d1:63:8c:c4:08:2e:39:01:b5:42:3c:99:f1:b3:b0:b1: f8:32:d4:96:86:d7:9b:c1:94:65:fc:f6:64:5a:14:a9:d4:a5: db:75:40:cc:85:48:0e:e3:68:18:52:2d:f6:1b:3f:ea:4a:1f: 8c:3d:d4:ac:bc:7a:80:e5:4a:dd:1f:fe:d3:52:de:97:a3:39: a8:c8:e9:52:40:5e:29:5a:7d:9c:59:47:15:75:67:30:a1:a4: 93:19:24:d6:18:9b:e1:ee:a5:44:63:a5:09:99:71:22:d3:55: a6:91:6c:67:e8:da:10:d3:d5:8d:41:b5:c6:d4:b8:35:b7:24: ab:87:81:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNNzoLP18bFEuMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk MjFlY2VmZTItZjZhMy00MWM4LTg5MWEtNDA3MjhmN2JjN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHD0/PkLrQ/T8ZhVNXbcyDaFdl+Mr9sgFyzp OygBcQgtYGYpvnJkU/YDKDB0JKEtI8gSSnF2jUk2t05JSNPmDNZX9zKEDel3PZLB DxQuQxLI6S49YPQiQ5OFdJ26E30etR2dBLB6IXoJlvDbUgaxXlmGEL5z1PII5ZhB fmjgAli3wJ2XA7ox/+tm0VjvWekYaiB9WqyFqOLVFQHJC53XXFX86ekSzaTxMKFS Rj4YbbLj1W2dSIJAPBsfyP4WNzgK07+Rp3y9mYgi1iGtwVnRyxAJdhscWE/QUNLJ zw8HzgiS6sCUeeVBck1xu10YfsWflEYpAVsAftF9orw7WZu7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvbnu92knGc+its6TrPiYlybHPWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjA3MGY5ZTgtMmJlNi0z OTE1LWFjYzctNTA5YjU2Y2UzOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu2PAm9GfyLG2Pe+0Eok4wrLm0hAIE9TI+Y2m4GPR+8QfqN2JI6JbwO retFSR0diJCt2JAdG9txNZmaSpvpIBhrwwxL4kHB0gx5HJFK1p7i3/5kS1iTziKa 1D/6hiaVehu1523OWM6WIm8HZnnv2AAZU/WeDuLsDtYX/znWqWV80WOMxAguOQG1 QjyZ8bOwsfgy1JaG15vBlGX89mRaFKnUpdt1QMyFSA7jaBhSLfYbP+pKH4w91Ky8 eoDlSt0f/tNS3pejOajI6VJAXilafZxZRxV1ZzChpJMZJNYYm+HupURjpQmZcSLT VaaRbGfo2hDT1Y1BtcbUuDW3JKuHgRc= -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:45 2025 by rpki-client