$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/066530cb-b52a-370a-a267-5b05e13b3447.roa File: 066530cb-b52a-370a-a267-5b05e13b3447.roa (raw, json) Hash identifier: ODk2w9QqcNKeODPBQia7BWprQWl5BysejPg9eM1uuUE= Subject key identifier: 2D:CA:84:2E:13:D5:20:2B:BA:8B:AB:EF:82:03:30:54:81:12:57:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605D5A69F9F8B423562600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/066530cb-b52a-370a-a267-5b05e13b3447.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 71.30.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5d:5a:69:f9:f8:b4:23:56:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=ef4b169d-3acc-4b31-810a-3b166333d46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:aa:cf:9a:02:16:85:d3:28:64:7a:8c:f9: be:bd:a4:90:69:30:3b:76:c9:64:3e:03:9d:96:f3: 59:44:1b:e3:1a:c5:0a:d2:83:08:eb:33:16:8f:9b: c8:2c:1f:8a:0b:89:f7:4c:e5:ea:fd:78:97:72:2e: cc:8d:4f:91:e5:97:74:eb:08:56:92:49:47:6d:15: e7:fe:12:f3:a1:f3:24:e2:68:37:9d:f0:8c:50:77: 54:93:40:fd:39:9e:1b:29:78:8a:ee:5f:fa:fd:1e: 75:9f:f4:32:f7:60:a1:9f:c0:1e:5f:42:e5:69:e3: 61:1e:6e:0b:60:5e:64:bf:9a:55:7f:ef:b9:9f:6c: 20:a8:5a:c5:5f:12:bc:2f:69:32:89:73:74:47:0c: 4f:c9:72:24:f2:68:59:9e:b8:6f:8e:a3:8c:5f:e1: c7:62:b3:22:0b:a9:81:38:48:a7:07:63:d1:ff:0a: 36:a0:d2:09:ec:a1:4c:b6:29:3b:3e:63:54:52:d1: 4f:11:99:aa:4b:41:6e:06:d8:42:c6:4d:94:4b:79: 05:4b:28:a6:42:82:be:9d:4d:b8:23:80:aa:63:af: 58:97:90:98:d7:66:99:07:39:1f:14:db:4e:19:8d: e9:04:bd:44:e6:c9:9b:ca:63:84:d2:bb:de:41:25: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:84:2E:13:D5:20:2B:BA:8B:AB:EF:82:03:30:54:81:12:57:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/066530cb-b52a-370a-a267-5b05e13b3447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d6:0c:da:60:7b:5b:a1:5c:94:6e:98:8e:db:7d:69:b0:4b: 99:13:94:20:a7:81:29:f0:33:6f:88:0c:61:57:f8:d8:fb:73: 5d:5a:ae:a1:12:d4:ac:d3:df:a2:b6:03:f1:2e:31:46:23:8e: ad:d0:a1:28:58:50:7f:fa:f7:6a:0d:9b:4d:6d:e7:54:91:63: 5c:fc:70:05:e2:d7:32:63:71:3e:fc:01:9d:90:24:0f:7d:7a: 44:c7:37:79:e4:3a:a9:66:e9:14:c6:9a:d9:12:27:1e:07:50: 64:ef:6d:39:46:70:b6:a1:bf:a6:a9:4e:76:79:5c:06:9a:07: 70:fb:e0:ca:99:12:67:ff:64:fd:8f:60:e0:90:23:3a:27:ab: 33:2a:4d:57:4b:83:d1:ca:1f:7c:dc:88:59:34:64:44:f3:b7: 9d:39:c8:18:31:6c:7b:3a:a1:63:ac:7f:22:ea:58:a5:02:fe: 7d:78:48:f7:e8:54:74:70:1d:13:bb:43:e7:b5:2c:7e:0f:7b: 5e:e6:c8:96:48:f6:48:0e:2d:d7:05:c9:b0:ca:02:8b:3b:ae: 8d:3f:47:a2:df:2f:1d:2f:04:8b:5d:b0:e6:24:f3:63:46:a6: a2:9b:aa:b1:37:89:0f:45:20:7f:78:5a:45:48:c5:16:ae:d8: 12:df:5f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF1aafn4tCNWJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ZWY0YjE2OWQtM2FjYy00YjMxLTgxMGEtM2IxNjYzMzNkNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+mqz5oCFoXTKGR6jPm+vaSQaTA7dslkPgOd lvNZRBvjGsUK0oMI6zMWj5vILB+KC4n3TOXq/XiXci7MjU+R5Zd06whWkklHbRXn /hLzofMk4mg3nfCMUHdUk0D9OZ4bKXiK7l/6/R51n/Qy92Chn8AeX0LlaeNhHm4L YF5kv5pVf++5n2wgqFrFXxK8L2kyiXN0RwxPyXIk8mhZnrhvjqOMX+HHYrMiC6mB OEinB2PR/wo2oNIJ7KFMtik7PmNUUtFPEZmqS0FuBthCxk2US3kFSyimQoK+nU24 I4CqY69Yl5CY12aZBzkfFNtOGY3pBL1E5smbymOE0rveQSWhSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3KhC4T1SAruour74IDMFSBEldlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDY2NTMwY2ItYjUyYS0z NzBhLWEyNjctNWIwNWUxM2IzNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx7oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/WDNpge1uhXJRumI7bfWmwS5kTlCCngSnwM2+IDGFX+Nj7c11arqES 1KzT36K2A/EuMUYjjq3QoShYUH/692oNm01t51SRY1z8cAXi1zJjcT78AZ2QJA99 ekTHN3nkOqlm6RTGmtkSJx4HUGTvbTlGcLahv6apTnZ5XAaaB3D74MqZEmf/ZP2P YOCQIzonqzMqTVdLg9HKH3zciFk0ZETzt505yBgxbHs6oWOsfyLqWKUC/n14SPfo VHRwHRO7Q+e1LH4Pe17myJZI9kgOLdcFybDKAos7ro0/R6LfLx0vBItdsOYk82NG pqKbqrE3iQ9FIH94WkVIxRau2BLfX3Q= -----END CERTIFICATE-----Generated at Tue Jul 1 20:35:26 2025 by rpki-client