$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa File: f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa (raw, json) Hash identifier: Zqs3OYrqf34qLh7w1qMkPbjDiG5LNuIkBbBGmr6yalY= Subject key identifier: DC:F2:D5:B3:E2:97:7E:8E:4D:40:33:23:48:7A:B4:24:12:16:58:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B5741D2B6ABB35890B7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.31.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:57:41:d2:b6:ab:b3:58:90:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=825aeab7-57ed-43a9-9c7a-66ae8f74cdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:17:1a:33:a9:27:30:11:f5:4e:b1:e7:ed: 3d:9d:1a:06:ea:04:81:0a:1a:31:ef:91:7d:4f:fa: c9:33:ac:91:27:3b:03:81:cd:c9:48:ba:36:24:00: c2:14:a1:c0:90:f8:03:6a:a3:01:a6:73:26:91:aa: 07:de:fa:da:a5:bd:9e:6a:90:a1:b2:66:ce:07:92: 47:12:fe:23:4d:a1:0d:5c:bf:b1:71:bd:a3:4a:54: dd:21:7b:0e:53:1f:b7:0d:41:1c:16:1d:76:05:8a: fb:8f:e2:b3:a8:ed:28:bb:bf:d2:b6:ed:55:bf:32: a4:a6:08:b2:65:0b:62:ec:68:bf:94:68:ff:ca:d9: 5a:7a:f5:8a:00:77:f7:3f:04:e3:59:f1:11:f1:07: 0b:cc:3e:fe:a2:3a:17:a4:fb:b5:0a:b4:ca:dd:62: 06:23:e8:05:d6:2a:41:4e:8b:1c:45:c6:ce:54:9a: 17:4c:c3:56:26:a5:d3:fd:de:08:70:32:73:2e:45: 81:bb:7f:17:75:cc:51:e9:54:c7:2e:ca:32:25:0e: 69:50:74:2b:f9:25:f8:84:25:05:2d:4d:c9:4b:e4: 09:af:76:34:42:01:f2:02:64:af:96:94:fe:d5:a8: 15:6e:5b:78:a1:8b:21:44:50:af:d3:9d:71:8b:6c: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:D5:B3:E2:97:7E:8E:4D:40:33:23:48:7A:B4:24:12:16:58:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f43be3a9-71c6-34ad-b0d3-edd39cee319e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bd:cd:ef:82:82:4f:e9:37:ab:ce:1e:cd:a3:0f:bd:83:c2: 68:78:93:73:7d:95:3d:78:75:4b:0f:1f:ee:a0:34:e2:fe:86: 26:c0:9d:10:a0:f2:05:6a:56:a5:11:c4:2f:63:87:20:94:7a: 76:77:64:05:2c:56:5c:e3:18:98:bd:69:da:ef:06:d6:9a:6f: d7:ca:46:06:36:b8:f7:ca:97:1f:12:49:35:cc:a6:1a:83:30: 3b:5a:fe:4b:6d:cd:54:e9:ff:3b:69:2d:36:8c:2e:ec:4e:41: 12:7f:8d:90:cc:9c:cd:4a:5d:2b:2e:75:a2:c8:18:62:83:a3: d9:01:c7:54:34:46:bc:75:e1:53:43:07:f1:b6:db:cc:58:a4: 79:0a:d2:5e:a2:12:60:f4:52:f2:32:dd:d1:f3:41:f2:e0:14: 32:95:b0:1c:e7:aa:af:36:85:c7:51:fe:67:e1:0d:dd:fd:65: 39:e9:ec:c6:ae:52:e9:67:a0:b5:40:e7:de:e6:69:b5:b5:e0: b3:58:a9:00:0e:91:53:c6:59:53:f2:e1:ec:37:03:66:3d:fa: 3b:10:ab:67:6d:ce:34:9f:52:19:73:88:a6:4a:6a:a1:1c:f6: 92:fa:0d:fb:f2:bc:ce:aa:a2:fa:d8:1e:79:32:76:c1:b3:a7: 34:3b:72:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1dB0rars1iQt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk ODI1YWVhYjctNTdlZC00M2E5LTljN2EtNjZhZThmNzRjZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iAXGjOpJzAR9U6x5+09nRoG6gSBChox75F9 T/rJM6yRJzsDgc3JSLo2JADCFKHAkPgDaqMBpnMmkaoH3vrapb2eapChsmbOB5JH Ev4jTaENXL+xcb2jSlTdIXsOUx+3DUEcFh12BYr7j+KzqO0ou7/Stu1VvzKkpgiy ZQti7Gi/lGj/ytlaevWKAHf3PwTjWfER8QcLzD7+ojoXpPu1CrTK3WIGI+gF1ipB ToscRcbOVJoXTMNWJqXT/d4IcDJzLkWBu38XdcxR6VTHLsoyJQ5pUHQr+SX4hCUF LU3JS+QJr3Y0QgHyAmSvlpT+1agVblt4oYshRFCv051xi2zeEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzy1bPil36OTUAzI0h6tCQSFljBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQzYmUzYTktNzFjNi0z NGFkLWIwZDMtZWRkMzljZWUzMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx+cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq9ze+Cgk/pN6vOHs2jD72Dwmh4k3N9lT14dUsPH+6gNOL+hibAnRCg 8gVqVqURxC9jhyCUenZ3ZAUsVlzjGJi9adrvBtaab9fKRgY2uPfKlx8SSTXMphqD MDta/kttzVTp/ztpLTaMLuxOQRJ/jZDMnM1KXSsudaLIGGKDo9kBx1Q0Rrx14VND B/G228xYpHkK0l6iEmD0UvIy3dHzQfLgFDKVsBznqq82hcdR/mfhDd39ZTnp7Mau UulnoLVA597mabW14LNYqQAOkVPGWVPy4ew3A2Y9+jsQq2dtzjSfUhlziKZKaqEc 9pL6DfvyvM6qovrYHnkydsGzpzQ7cs8= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:43 2025 by rpki-client