$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa File: f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa (raw, json) Hash identifier: uVcFKyYWi0A1O/G2K+GhOhDjWa8NfloiUMe8EJTRtxI= Subject key identifier: 88:8B:A0:27:40:B4:FF:BD:7E:CE:30:A5:AC:E1:37:90:CD:D8:D9:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA20BDC24BF19CDB548E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.30.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:bd:c2:4b:f1:9c:db:54:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=1667ef60-8816-4569-9532-8e014a02dcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:7e:a6:b9:22:26:f1:63:1b:ad:2a:8e:91: 20:c7:c3:c7:37:87:fd:03:8a:61:05:ed:7b:e8:63: 6c:58:5a:33:40:62:eb:d1:9e:19:58:99:9a:69:3f: e5:61:73:b5:b5:02:0d:9a:04:3e:1f:b1:d3:8b:7c: d4:15:30:fa:b2:84:3b:73:07:e1:8f:a8:f3:1d:12: 8b:85:f4:fd:5d:91:5d:aa:ce:db:43:02:13:70:42: 32:1f:40:c3:2b:4f:5f:15:79:36:a6:65:5d:3a:7f: 9a:47:75:e7:2e:da:e5:26:f0:ef:8a:c1:44:33:7f: 1f:0f:85:2c:c7:cc:4d:34:7e:44:db:4f:4a:63:53: 53:d5:4e:a0:44:cb:fa:25:fe:ad:29:d0:33:77:94: f2:66:ef:54:a3:5f:c6:40:5f:43:db:ae:b7:55:e9: 12:5b:05:94:8b:80:55:a1:27:eb:31:46:cb:a6:8d: 59:4e:2c:af:81:16:90:f3:47:be:37:23:8a:12:df: 75:94:4b:34:94:f2:ec:a1:d8:e0:fc:a2:64:8b:61: 6c:4b:91:52:bf:d0:1f:68:e4:25:e7:51:0c:ea:ac: b4:a7:b5:15:00:c8:32:cb:f7:56:80:95:9c:ee:3f: 55:69:ef:c5:66:20:b8:a2:b4:51:0e:e8:15:1b:0c: f6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8B:A0:27:40:B4:FF:BD:7E:CE:30:A5:AC:E1:37:90:CD:D8:D9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f6efbc99-fc0a-3e53-97c3-435d9327f8fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6d:3f:ce:da:45:6d:17:53:1c:26:12:70:78:d9:59:7a:94: 70:ab:ff:7c:05:8f:50:0e:26:f2:2d:a5:ff:61:45:15:95:98: 96:b1:2d:d4:e7:46:a4:e8:61:25:9a:98:03:4e:88:ff:b5:56: 13:10:5a:5c:67:91:f6:2b:24:46:d8:c5:aa:00:d8:a6:e8:f0: fb:41:4e:54:92:f4:01:41:1c:8c:cf:36:d1:c8:e5:d0:4b:e4: 16:7a:d8:b9:f1:6d:e7:63:ab:92:1f:f8:1f:a1:93:f5:bb:53: d0:02:fe:ba:53:7b:41:d6:46:93:91:21:25:ac:e7:98:d2:34: 34:43:5d:ce:87:0c:1b:df:62:c5:01:57:b0:5f:fe:0c:cb:a4: d1:18:6c:5a:8e:e7:12:34:1e:3f:90:06:04:38:be:85:ed:c7: c7:a6:79:a5:62:86:de:67:51:6f:ad:23:0c:dd:08:72:c8:a3: 11:88:ae:d8:04:99:8d:bb:dd:f4:be:eb:e3:16:9d:c1:3e:41: 0b:57:a8:08:5a:dc:ca:89:fa:8a:d3:0f:46:a4:e0:ed:a5:b8: 11:ff:06:ac:25:f1:fa:c3:06:4e:c7:6d:7d:e7:bc:b7:d0:62: f2:3b:a6:cb:2c:06:81:81:03:33:8c:55:b7:4a:fd:c4:b0:79: 05:92:c5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiC9wkvxnNtUjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MTY2N2VmNjAtODgxNi00NTY5LTk1MzItOGUwMTRhMDJkY2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiax+prkiJvFjG60qjpEgx8PHN4f9A4phBe17 6GNsWFozQGLr0Z4ZWJmaaT/lYXO1tQINmgQ+H7HTi3zUFTD6soQ7cwfhj6jzHRKL hfT9XZFdqs7bQwITcEIyH0DDK09fFXk2pmVdOn+aR3XnLtrlJvDvisFEM38fD4Us x8xNNH5E209KY1NT1U6gRMv6Jf6tKdAzd5TyZu9Uo1/GQF9D2663VekSWwWUi4BV oSfrMUbLpo1ZTiyvgRaQ80e+NyOKEt91lEs0lPLsodjg/KJki2FsS5FSv9AfaOQl 51EM6qy0p7UVAMgyy/dWgJWc7j9Vae/FZiC4orRRDugVGwz2twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiLoCdAtP+9fs4wpazhN5DN2NlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjZlZmJjOTktZmMwYS0z ZTUzLTk3YzMtNDM1ZDkzMjdmOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERx4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNtP87aRW0XUxwmEnB42Vl6lHCr/3wFj1AOJvItpf9hRRWVmJaxLdTn RqToYSWamANOiP+1VhMQWlxnkfYrJEbYxaoA2Kbo8PtBTlSS9AFBHIzPNtHI5dBL 5BZ62Lnxbedjq5If+B+hk/W7U9AC/rpTe0HWRpORISWs55jSNDRDXc6HDBvfYsUB V7Bf/gzLpNEYbFqO5xI0Hj+QBgQ4voXtx8emeaViht5nUW+tIwzdCHLIoxGIrtgE mY273fS+6+MWncE+QQtXqAha3MqJ+orTD0ak4O2luBH/Bqwl8frDBk7HbX3nvLfQ YvI7psssBoGBAzOMVbdK/cSweQWSxWI= -----END CERTIFICATE-----Generated at Sun Jun 15 22:20:51 2025 by rpki-client