$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa File: 34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa (raw, json) Hash identifier: k66+Ip7l8k0boVE65tk0F1/Kk7XkGkzprYts8vhdns8= Subject key identifier: 55:15:39:0A:DF:BA:AF:DA:42:EF:84:13:8B:AF:AA:13:59:93:81:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6692D732AF4056F8F82120 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.30.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:92:d7:32:af:40:56:f8:f8:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=ed5bfce9-0b71-436f-8694-6db2ce55cb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:ef:80:3c:09:05:d3:dc:8d:dd:0f:9e:2d: 5b:b7:93:28:7a:8b:44:ff:14:3e:d2:4c:bf:12:92: b7:2c:a8:77:bb:74:36:25:de:f7:87:fe:0f:e5:bf: c4:18:e4:79:49:95:57:84:10:b8:e8:17:8f:2e:af: 07:07:3d:e6:a3:92:7e:fe:e7:36:6b:40:8c:ee:a7: 6b:1d:79:a5:39:39:f8:4e:b0:ba:63:bf:42:5a:c0: 47:fa:6c:0f:f8:e9:20:90:f6:48:7e:a3:88:14:b2: 65:b7:0c:72:73:a0:a0:85:c6:15:c5:67:4b:24:75: 7b:df:9e:0d:cf:a3:9d:3e:4f:9d:9c:a3:43:0e:33: f3:66:8a:5f:52:a5:69:a4:9a:02:92:3c:dc:33:ad: f8:18:2e:23:b6:44:71:52:60:e7:27:7c:a1:11:8e: c1:af:78:32:54:fb:1f:95:8e:a4:ba:90:3c:f4:63: 08:f8:dc:c9:57:76:69:ed:db:f3:d7:7a:d2:d2:30: e2:94:4d:f0:b1:9b:f7:59:85:fe:17:aa:0f:dd:12: 21:8b:84:c2:96:df:64:7e:94:2e:b1:b4:8b:af:7e: 1c:71:14:a8:55:e6:08:43:39:30:16:5a:14:98:a0: 0a:45:96:d7:00:a5:d8:89:46:2b:b6:96:eb:2e:9d: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:15:39:0A:DF:BA:AF:DA:42:EF:84:13:8B:AF:AA:13:59:93:81:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c97428-732c-3c23-9a9d-4fa557bd1f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:0e:48:90:d5:56:25:11:46:3f:be:42:80:ea:69:6a:e8:f0: eb:00:2b:44:67:3d:45:5b:fa:ce:c1:48:99:8a:d1:bf:05:4a: a8:4b:bc:0b:ed:de:75:93:b1:1a:f1:ee:8d:f0:55:d7:f9:06: a1:d4:bd:1b:7f:4e:ed:95:1b:79:b3:35:02:3c:11:bd:4c:7f: fd:89:3d:33:1a:a9:23:a5:73:bf:09:2d:15:80:4c:1c:15:8d: f5:6d:27:f0:fa:7e:a4:e4:6f:56:96:b6:3f:47:99:e9:b5:ac: 7a:54:c3:95:9a:ef:61:0b:a5:7e:77:3c:94:36:fd:ea:c3:41: de:58:a6:0b:5a:5e:6b:8f:b1:09:85:22:b9:f9:13:86:7e:5b: 70:e8:f0:2b:6f:93:aa:75:75:b6:01:b5:f3:89:6f:c2:bf:15: 97:bd:64:75:a7:21:54:17:4a:8f:fe:dd:8e:d3:16:d5:0d:d7: 9a:cc:90:58:f6:c7:5f:75:85:36:74:13:eb:7c:01:b5:bb:32: e7:9c:24:4c:f5:64:b2:98:0b:f5:cc:61:f6:0d:c5:57:18:02: db:0d:8d:0e:d9:ff:2f:c0:d4:8d:4f:aa:ac:3f:a1:02:34:3a: 45:19:af:63:3d:85:64:ba:b8:12:19:2b:e5:3e:7e:d4:f7:dd: c2:d8:8d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpLXMq9AVvj4ISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWQ1YmZjZTktMGI3MS00MzZmLTg2OTQtNmRiMmNlNTVjYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz7vgDwJBdPcjd0Pni1bt5MoeotE/xQ+0ky/ EpK3LKh3u3Q2Jd73h/4P5b/EGOR5SZVXhBC46BePLq8HBz3mo5J+/uc2a0CM7qdr HXmlOTn4TrC6Y79CWsBH+mwP+OkgkPZIfqOIFLJltwxyc6CghcYVxWdLJHV7354N z6OdPk+dnKNDDjPzZopfUqVppJoCkjzcM634GC4jtkRxUmDnJ3yhEY7Br3gyVPsf lY6kupA89GMI+NzJV3Zp7dvz13rS0jDilE3wsZv3WYX+F6oP3RIhi4TClt9kfpQu sbSLr34ccRSoVeYIQzkwFloUmKAKRZbXAKXYiUYrtpbrLp1mIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUVOQrfuq/aQu+EE4uvqhNZk4GxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRjOTc0MjgtNzMyYy0z YzIzLTlhOWQtNGZhNTU3YmQxZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQOSJDVViURRj++QoDqaWro8OsAK0RnPUVb+s7BSJmK0b8FSqhLvAvt 3nWTsRrx7o3wVdf5BqHUvRt/Tu2VG3mzNQI8Eb1Mf/2JPTMaqSOlc78JLRWATBwV jfVtJ/D6fqTkb1aWtj9Hmem1rHpUw5Wa72ELpX53PJQ2/erDQd5YpgtaXmuPsQmF Irn5E4Z+W3Do8Ctvk6p1dbYBtfOJb8K/FZe9ZHWnIVQXSo/+3Y7TFtUN15rMkFj2 x191hTZ0E+t8AbW7MuecJEz1ZLKYC/XMYfYNxVcYAtsNjQ7Z/y/A1I1Pqqw/oQI0 OkUZr2M9hWS6uBIZK+U+ftT33cLYjZY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:03 2025 by rpki-client