$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa File: d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa (raw, json) Hash identifier: TM6ihUy4C6lJmDWf0mbzZS08lACX5qI17ifxhsnnm2A= Subject key identifier: 54:95:B4:B9:E0:5A:BB:18:55:F9:7B:C4:6A:89:C4:54:C4:8B:7B:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0DC84FEBE7BD5E7DFB880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 395464 IP address blocks: 71.31.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:dc:84:fe:be:7b:d5:e7:df:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=47d26e73-d86b-4694-babe-f47135da5d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:45:f9:16:68:da:8c:59:cc:9d:b8:1d:8c: 9c:ce:d7:05:a8:02:2a:eb:cd:a8:2c:fb:71:f6:74: ff:36:1c:27:8b:09:36:96:bc:c8:51:b5:37:5a:16: 23:2d:f2:d5:55:61:fb:e9:1c:73:98:6f:c5:5c:33: 92:56:5f:d8:07:c1:27:f2:c9:8b:29:c3:8d:12:98: d4:7a:30:a4:16:ce:4b:a1:63:a8:8a:aa:5a:d5:47: 03:3c:9e:ac:f1:86:f4:5e:e6:dd:f0:79:a7:5c:63: 4f:59:c6:6a:b0:02:21:71:6b:86:cd:70:67:4c:0c: 90:81:8f:fc:31:0f:e3:b1:61:89:a3:be:e2:d2:40: 8b:e9:39:2a:8d:fd:06:f2:44:e5:f3:f2:a3:26:d7: 35:51:ff:90:64:c2:2d:eb:f1:28:76:77:50:8a:29: c6:6b:52:1c:7d:a0:0f:e2:80:ed:59:bf:90:3a:a2: 40:ae:74:8c:10:0d:b6:6b:f3:f3:71:27:40:de:be: dd:5e:c1:04:95:ca:b9:90:60:38:c4:2b:d3:fe:ea: eb:00:0e:fe:b5:2b:64:85:90:2f:74:9b:31:7c:81: ed:aa:c2:dd:45:a4:3e:1a:54:ec:53:73:c1:28:48: fd:2e:00:f1:64:1e:60:29:28:2b:e6:1d:2f:c9:3e: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:95:B4:B9:E0:5A:BB:18:55:F9:7B:C4:6A:89:C4:54:C4:8B:7B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d25a7acf-1d46-3e1a-863f-915f0faee9d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c9:c3:13:a1:2c:53:54:9e:59:5c:3d:79:f2:6d:38:4e:23: 9e:29:e4:8c:2b:03:f7:63:aa:6d:62:d2:ed:f0:a4:1a:2e:84: 32:23:05:5f:a6:8e:df:8a:d6:32:06:83:be:90:58:4d:d1:8d: b6:fc:e5:09:0e:38:8a:9f:2f:aa:cc:48:d9:f9:8e:b7:de:5f: 21:db:b3:37:13:3b:9a:1d:07:10:b5:78:46:35:25:d5:60:d6: dc:9c:43:27:78:26:f2:f5:3c:8d:83:7b:3d:b4:1e:27:9e:9d: a9:c8:3e:16:55:f9:7d:38:c2:56:d3:38:78:ea:7c:67:58:8e: 76:59:0c:40:6a:86:3b:58:55:ce:25:5b:5a:c1:86:e4:78:1b: 67:d4:82:4e:f0:9e:a2:a7:77:02:9f:eb:6e:db:20:de:32:f9: f6:4a:63:aa:82:12:3b:40:2f:6a:fc:f7:58:ba:0c:24:8a:9d: 0e:8a:94:77:d3:3e:52:4d:a2:56:02:f9:2b:c6:f0:5b:8a:02: c8:fd:1c:61:76:cd:b7:e5:ec:80:45:7b:a7:0d:aa:3a:ef:55: e6:4a:18:83:88:58:84:c9:87:7c:3f:6b:af:3d:40:f4:55:fd: 7e:39:ce:a2:01:ed:db:c3:15:7a:e3:07:eb:ac:83:55:29:2d: 8f:68:e3:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNyE/r571effuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NDdkMjZlNzMtZDg2Yi00Njk0LWJhYmUtZjQ3MTM1ZGE1ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpBF+RZo2oxZzJ24HYycztcFqAIq682oLPtx 9nT/Nhwniwk2lrzIUbU3WhYjLfLVVWH76RxzmG/FXDOSVl/YB8En8smLKcONEpjU ejCkFs5LoWOoiqpa1UcDPJ6s8Yb0Xubd8HmnXGNPWcZqsAIhcWuGzXBnTAyQgY/8 MQ/jsWGJo77i0kCL6Tkqjf0G8kTl8/KjJtc1Uf+QZMIt6/EodndQiinGa1IcfaAP 4oDtWb+QOqJArnSMEA22a/PzcSdA3r7dXsEElcq5kGA4xCvT/urrAA7+tStkhZAv dJsxfIHtqsLdRaQ+GlTsU3PBKEj9LgDxZB5gKSgr5h0vyT6KpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSVtLngWrsYVfl7xGqJxFTEi3vDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI1YTdhY2YtMWQ0Ni0z ZTFhLTg2M2YtOTE1ZjBmYWVlOWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTJwxOhLFNUnllcPXnybThOI54p5IwrA/djqm1i0u3wpBouhDIjBV+m jt+K1jIGg76QWE3Rjbb85QkOOIqfL6rMSNn5jrfeXyHbszcTO5odBxC1eEY1JdVg 1tycQyd4JvL1PI2Dez20HieenanIPhZV+X04wlbTOHjqfGdYjnZZDEBqhjtYVc4l W1rBhuR4G2fUgk7wnqKndwKf627bIN4y+fZKY6qCEjtAL2r891i6DCSKnQ6KlHfT PlJNolYC+SvG8FuKAsj9HGF2zbfl7IBFe6cNqjrvVeZKGIOIWITJh3w/a689QPRV /X45zqIB7dvDFXrjB+usg1UpLY9o47U= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:11 2025 by rpki-client