$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa File: ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa (raw, json) Hash identifier: zD7qZG+xRNU5mU610u/TLZF1frgP1eX9MaIHq3f94EA= Subject key identifier: 9E:2C:83:02:87:CD:88:9A:2A:EB:C4:64:6A:8A:74:44:9A:F3:2A:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA88F5F88D976BAD9390A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.30.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:f5:f8:8d:97:6b:ad:93:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=82ecee81-ffe5-4ebb-8e40-d4dee929e370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:90:c9:48:0e:60:1e:e5:d0:f1:20:61:b3: 9a:8a:bf:3a:a6:31:45:7b:0a:3c:6d:ae:19:c9:ea: 5d:ae:60:22:98:f3:03:9d:b3:c7:9e:23:77:bf:a3: ba:9b:81:0a:f1:d9:74:fa:96:9d:49:fd:f4:89:5a: 2a:2d:4e:55:35:9a:1e:66:34:d8:6e:74:76:71:67: 68:64:1e:89:2b:1e:a9:6b:59:ac:d0:e9:e6:3f:cf: 2f:1a:b4:b3:79:35:1e:54:51:da:b2:13:e8:10:81: e5:c6:06:f0:57:ca:94:68:0c:60:20:3e:e2:50:67: 10:3b:18:03:79:e4:c4:a2:c0:83:7d:80:0a:15:81: 19:e8:5f:e5:d8:4c:9a:10:bd:21:6c:84:06:56:80: 12:1c:8f:51:0c:98:6a:60:23:53:d3:98:00:38:28: e5:0c:bb:45:15:a7:99:b3:e5:00:79:14:72:6a:d5: 71:cc:99:6d:98:d5:aa:ea:d5:c3:b8:2c:b1:e4:0b: 2a:56:d5:9f:66:32:e8:0b:eb:9c:05:da:70:8d:95: 86:64:fb:93:33:43:da:5e:78:76:b9:37:18:66:11: 94:73:c3:7b:42:32:8e:88:24:29:d4:bd:f5:1b:d9: a9:b9:36:91:8a:20:4f:60:05:65:fd:66:2f:76:68: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2C:83:02:87:CD:88:9A:2A:EB:C4:64:6A:8A:74:44:9A:F3:2A:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ef:1c:4c:56:dd:80:aa:0d:5a:51:50:fc:4f:33:ea:c0:29: c5:d6:1d:6c:9b:a2:c8:19:dc:9f:66:54:6f:f6:97:af:97:22: a3:9a:ef:26:37:c9:0d:52:c1:e3:29:da:cb:40:3c:59:95:ce: 48:81:55:9c:8a:3c:38:07:83:d4:e2:f3:54:f2:ed:9e:0a:00: 5e:15:e3:01:3d:30:e6:0f:0f:64:de:ab:6a:a5:84:d8:8c:3a: e5:e0:37:db:ea:b6:f7:80:ac:d4:40:50:7c:4e:00:d9:b1:6c: 0f:59:07:48:8f:38:29:82:ac:e7:36:2c:78:e6:42:33:bf:bb: 87:3b:2c:f9:bb:5b:a6:0a:e5:ad:75:69:39:98:36:c8:e8:f1: f0:78:23:04:da:10:e4:67:c7:b1:8e:40:e5:b6:af:5d:76:9a: 07:a3:22:72:55:1d:82:99:5f:d3:bf:8a:57:49:c2:31:ab:a1: f6:5f:43:19:50:95:57:42:27:38:45:19:01:40:26:5c:30:dc: b0:1d:33:3a:48:60:2c:8b:45:d7:16:19:60:28:d1:34:64:bb: f8:ea:69:b8:22:a0:05:e3:96:b8:d8:be:c7:a9:ad:bf:ef:e3: bc:4c:05:4d:6f:f7:28:c8:b5:5d:7f:f7:4a:91:8a:f2:10:45: ac:c9:db:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoj1+I2Xa62TkKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODJlY2VlODEtZmZlNS00ZWJiLThlNDAtZDRkZWU5MjllMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVWQyUgOYB7l0PEgYbOair86pjFFewo8ba4Z yepdrmAimPMDnbPHniN3v6O6m4EK8dl0+padSf30iVoqLU5VNZoeZjTYbnR2cWdo ZB6JKx6pa1ms0OnmP88vGrSzeTUeVFHashPoEIHlxgbwV8qUaAxgID7iUGcQOxgD eeTEosCDfYAKFYEZ6F/l2EyaEL0hbIQGVoASHI9RDJhqYCNT05gAOCjlDLtFFaeZ s+UAeRRyatVxzJltmNWq6tXDuCyx5AsqVtWfZjLoC+ucBdpwjZWGZPuTM0PaXnh2 uTcYZhGUc8N7QjKOiCQp1L31G9mpuTaRiiBPYAVl/WYvdmgc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4sgwKHzYiaKuvEZGqKdESa8yrxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYyZjlkMDktMGI3ZS0z ZjcyLWI4NGUtNDE0OGE0OTgyM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHvHExW3YCqDVpRUPxPM+rAKcXWHWybosgZ3J9mVG/2l6+XIqOa7yY3 yQ1SweMp2stAPFmVzkiBVZyKPDgHg9Ti81Ty7Z4KAF4V4wE9MOYPD2Teq2qlhNiM OuXgN9vqtveArNRAUHxOANmxbA9ZB0iPOCmCrOc2LHjmQjO/u4c7LPm7W6YK5a11 aTmYNsjo8fB4IwTaEORnx7GOQOW2r112mgejInJVHYKZX9O/ildJwjGrofZfQxlQ lVdCJzhFGQFAJlww3LAdMzpIYCyLRdcWGWAo0TRku/jqabgioAXjlrjYvseprb/v 47xMBU1v9yjItV1/90qRivIQRazJ20Q= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:44 2025 by rpki-client