$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa File: f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa (raw, json) Hash identifier: r9P/eAxtMcRAcBu3ytMKS9QmgVPtpCqZ4+lrb8Hg3lg= Subject key identifier: 52:EE:DE:85:AA:8E:E4:C5:0F:A6:C5:17:5E:E1:F7:D7:CC:A5:34:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70DA6DE22673646BBE8A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.31.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:da:6d:e2:26:73:64:6b:be:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=5e1ea28e-f80b-403c-9f67-1140727f4a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:10:9e:26:57:65:14:61:49:96:99:e8:6b:7d: 6c:27:ef:3e:75:55:9b:f5:25:ba:f9:e0:06:31:24: 6e:d0:39:fc:0a:67:92:50:9f:d0:60:21:a9:ac:0d: d4:c5:34:03:d1:fe:d4:ac:b6:50:fc:d3:b4:58:d0: 5e:e2:b8:67:c0:e9:3e:eb:54:22:61:93:95:03:4b: aa:9c:ec:6f:b2:8a:ba:52:b1:e1:87:bb:0b:11:63: d0:0f:21:35:0c:aa:39:9c:a1:09:3c:e6:67:eb:fd: fe:91:16:83:4f:78:da:f2:53:23:b6:82:57:29:26: d0:02:d6:bf:dc:3b:d8:99:84:18:f9:fb:45:29:ec: 2d:cf:67:8d:6a:5e:fd:6a:80:9a:e7:9a:1a:63:ea: 8c:f5:99:12:b3:dd:67:07:da:f5:bf:2d:34:30:40: 6b:0e:8f:be:98:72:ba:22:e7:18:c6:6e:ca:3e:37: 4c:05:e1:f0:0a:23:84:97:04:cf:d2:83:52:bb:09: 27:4b:30:d7:33:e5:9f:b4:a4:56:c8:69:4c:84:18: c8:b5:53:72:50:72:95:64:ae:57:63:5c:6b:b4:2b: fc:f0:0e:4c:d5:67:0a:a9:56:c5:ba:7c:ce:c5:45: db:fd:3b:67:b1:b2:89:a4:96:2e:4e:51:a0:66:2e: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:DE:85:AA:8E:E4:C5:0F:A6:C5:17:5E:E1:F7:D7:CC:A5:34:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84fc0c4-ec7c-35b5-8d3e-b586a035cf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:04:07:fc:8e:f7:df:41:9e:a7:fa:56:07:96:bf:2b:83:5e: 59:72:43:7c:40:bb:4b:27:f7:b1:70:90:ed:f6:7f:76:27:f2: b1:9f:c1:51:22:9f:11:bd:6d:95:99:02:14:ee:3f:86:fe:61: c1:a9:48:85:31:4f:d8:96:c8:e7:58:4e:fe:e4:d9:61:6f:ac: c8:00:72:35:da:5b:fc:b4:d6:9d:8b:c1:07:ee:ed:f1:87:69: 0b:5a:ee:21:f9:39:e7:de:25:41:db:b7:71:27:21:09:fb:c8: 8b:0d:00:9a:ec:09:fc:68:5a:55:1b:a7:7f:61:47:cb:a1:e7: f6:82:87:ca:fc:6a:9b:18:a0:23:61:55:1b:c1:51:a5:ad:92: ae:21:e0:7d:09:0b:c9:34:63:20:5d:04:ec:f5:8f:fe:04:1f: 78:1f:cd:7c:c0:3c:2d:72:f1:7c:2a:fe:c4:8b:a4:f3:04:ee: 99:53:77:43:89:52:d7:1f:a5:47:45:12:f4:26:d4:80:9e:4c: 1d:04:c9:02:3d:e0:83:01:a4:b4:8d:4b:7c:0f:7d:c6:0a:5d: e5:b8:c4:d3:b0:80:58:b0:e9:04:1f:0f:88:72:ab:97:03:35: d2:d7:b8:f0:61:69:21:75:ba:50:d6:40:01:9d:de:2e:a8:6b: 07:93:9a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNpt4iZzZGu+ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NWUxZWEyOGUtZjgwYi00MDNjLTlmNjctMTE0MDcyN2Y0YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghCeJldlFGFJlpnoa31sJ+8+dVWb9SW6+eAG MSRu0Dn8CmeSUJ/QYCGprA3UxTQD0f7UrLZQ/NO0WNBe4rhnwOk+61QiYZOVA0uq nOxvsoq6UrHhh7sLEWPQDyE1DKo5nKEJPOZn6/3+kRaDT3ja8lMjtoJXKSbQAta/ 3DvYmYQY+ftFKewtz2eNal79aoCa55oaY+qM9ZkSs91nB9r1vy00MEBrDo++mHK6 IucYxm7KPjdMBeHwCiOElwTP0oNSuwknSzDXM+WftKRWyGlMhBjItVNyUHKVZK5X Y1xrtCv88A5M1WcKqVbFunzOxUXb/TtnsbKJpJYuTlGgZi7ePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLu3oWqjuTFD6bFF17h99fMpTQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg0ZmMwYzQtZWM3Yy0z NWI1LThkM2UtYjU4NmEwMzVjZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcEB/yO999Bnqf6VgeWvyuDXllyQ3xAu0sn97FwkO32f3Yn8rGfwVEi nxG9bZWZAhTuP4b+YcGpSIUxT9iWyOdYTv7k2WFvrMgAcjXaW/y01p2LwQfu7fGH aQta7iH5OefeJUHbt3EnIQn7yIsNAJrsCfxoWlUbp39hR8uh5/aCh8r8apsYoCNh VRvBUaWtkq4h4H0JC8k0YyBdBOz1j/4EH3gfzXzAPC1y8Xwq/sSLpPME7plTd0OJ UtcfpUdFEvQm1ICeTB0EyQI94IMBpLSNS3wPfcYKXeW4xNOwgFiw6QQfD4hyq5cD NdLXuPBhaSF1ulDWQAGd3i6oaweTmtw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:54:33 2025 by rpki-client