$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa File: d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa (raw, json) Hash identifier: bJp8obNgvDO+CqXCmAkCfSN/6it5dhhBz7MCuZeRZmk= Subject key identifier: 91:11:31:EB:47:82:D7:8D:47:B8:70:E2:DC:A3:76:52:7F:66:57:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22172D2D634EAAC16E1E8E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 71.30.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:72:d2:d6:34:ea:ac:16:e1:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=07d08bba-d82c-4734-8b8b-d2fb49a682d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:43:b0:87:e7:7b:2c:7b:fe:65:25:a0:07:cb: a4:81:85:c5:b0:7f:7b:f5:c9:11:a8:e2:8d:5f:24: ac:1d:16:70:4e:e4:fc:60:e5:1b:29:f5:45:f2:85: de:3b:c7:ce:4d:e1:d2:b0:c3:cc:0c:82:88:30:e1: 64:67:d8:69:8e:cb:fa:5d:43:0b:45:85:6d:6b:9e: e9:9b:57:72:68:fa:c8:30:2e:c2:f6:eb:a6:69:eb: 66:44:ce:e0:1c:0d:a4:62:a4:55:a6:d9:53:7c:d0: fc:e2:03:bd:28:7f:c8:7a:af:6e:e3:71:40:d4:f2: de:52:2e:3e:b0:92:63:bf:3b:0e:18:a3:be:69:6b: d5:c6:27:6d:18:a9:e7:4c:7a:03:bb:bb:de:91:62: 7b:fa:5d:39:75:4e:be:f2:56:2d:fb:91:e4:0c:f2: 8d:4b:14:8b:92:42:65:7f:18:cd:d8:1b:aa:78:66: fc:4b:f1:28:c4:84:9c:7a:e2:c5:97:1f:a2:48:74: 5b:ce:0f:0f:78:23:8e:bb:a1:30:7b:80:f3:81:7c: d7:63:42:d6:95:59:44:c4:13:69:9d:d4:95:1a:e7: 3a:61:89:7d:ac:d3:a4:87:ad:91:cb:3b:8e:47:4e: ec:36:5a:bc:1f:2f:9c:a6:27:7f:d2:f5:ee:18:77: 46:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:31:EB:47:82:D7:8D:47:B8:70:E2:DC:A3:76:52:7F:66:57:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:94:75:d4:dd:bc:cb:0e:e9:51:65:b5:78:14:f5:d7:75:96: 2b:4b:33:5e:e9:90:50:37:92:b6:c3:25:bf:46:3a:1a:49:3f: 68:6d:14:71:eb:05:58:da:2e:92:f7:0a:1e:ec:ec:7e:2c:e5: 44:19:7b:d8:fa:9e:1b:cc:a4:99:77:5f:d7:87:3e:b5:97:cb: d9:7a:db:03:66:18:69:c7:3a:9d:9a:05:1e:43:00:fe:98:69: db:65:5a:01:d6:d3:09:61:a3:96:06:c9:6f:bb:c5:b7:0f:bb: d2:3e:30:d1:79:55:3b:bd:c7:ba:5e:cb:ad:f8:f4:81:05:16: 32:fa:73:b2:c5:2b:07:27:a3:97:5b:c8:f5:dc:00:48:29:73: 48:98:fd:ff:50:fd:ee:d7:5d:8a:75:74:cc:a5:28:8b:82:5c: 7c:3f:75:fb:96:27:c8:cb:38:a7:af:f6:87:93:3c:b8:e2:60: 6c:77:a0:85:d0:42:9a:ef:9e:8d:49:28:79:26:4d:92:aa:2d: 05:e6:01:bb:94:0c:d0:3b:f7:3c:95:40:73:02:52:56:92:50: 67:a9:d9:00:80:7d:ce:12:96:31:ed:f9:29:8d:d0:e3:be:a9: 3f:0f:d8:16:6c:58:65:d7:03:14:26:91:94:da:7a:7b:7b:e7: 73:77:96:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXLS1jTqrBbh6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk MDdkMDhiYmEtZDgyYy00NzM0LThiOGItZDJmYjQ5YTY4MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUOwh+d7LHv+ZSWgB8ukgYXFsH979ckRqOKN XySsHRZwTuT8YOUbKfVF8oXeO8fOTeHSsMPMDIKIMOFkZ9hpjsv6XUMLRYVta57p m1dyaPrIMC7C9uumaetmRM7gHA2kYqRVptlTfND84gO9KH/Ieq9u43FA1PLeUi4+ sJJjvzsOGKO+aWvVxidtGKnnTHoDu7vekWJ7+l05dU6+8lYt+5HkDPKNSxSLkkJl fxjN2BuqeGb8S/EoxISceuLFlx+iSHRbzg8PeCOOu6Ewe4DzgXzXY0LWlVlExBNp ndSVGuc6YYl9rNOkh62RyzuOR07sNlq8Hy+cpid/0vXuGHdGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJERMetHgteNR7hw4tyjdlJ/ZldNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRjZWE4MjUtZjAyMi0z YjRlLWEwODItMWExYzg4YmMxYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaUddTdvMsO6VFltXgU9dd1litLM17pkFA3krbDJb9GOhpJP2htFHHr BVjaLpL3Ch7s7H4s5UQZe9j6nhvMpJl3X9eHPrWXy9l62wNmGGnHOp2aBR5DAP6Y adtlWgHW0wlho5YGyW+7xbcPu9I+MNF5VTu9x7pey6349IEFFjL6c7LFKwcno5db yPXcAEgpc0iY/f9Q/e7XXYp1dMylKIuCXHw/dfuWJ8jLOKev9oeTPLjiYGx3oIXQ Qprvno1JKHkmTZKqLQXmAbuUDNA79zyVQHMCUlaSUGep2QCAfc4SljHt+SmN0OO+ qT8P2BZsWGXXAxQmkZTaent753N3lhU= -----END CERTIFICATE-----Generated at Mon Aug 4 19:03:02 2025 by rpki-client