$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa File: 5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa (raw, json) Hash identifier: Q8Ewtc/HZPj0uGZhHr3isKAyTy3VZeFzhfv/7zAfPPE= Subject key identifier: 8E:2E:D5:8F:5A:EB:D0:11:A0:62:F4:11:5B:FE:12:5F:55:20:C6:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765D8CEE5BFF5816FB51B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 71.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d8:ce:e5:bf:f5:81:6f:b5:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=71b7dc98-37b0-46d4-a441-4fe1a2a7d060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:0d:a5:e9:4e:51:a2:2e:de:67:63:d9:dc: 7d:3c:95:cb:d8:9e:1d:74:f4:09:da:3c:19:86:81: a8:32:20:52:ef:dc:78:ff:e6:99:f0:55:f8:07:bf: ea:ed:3c:d1:9b:a8:73:85:5a:98:c7:62:14:b5:0f: 35:2e:f8:5a:e5:07:77:cf:54:20:9f:d8:95:4e:0d: b4:45:34:19:46:c1:73:87:ee:f1:82:45:e0:d5:ff: df:82:27:85:be:cb:a8:09:39:bc:a3:a9:da:47:49: 76:85:94:00:df:28:be:c3:40:bd:80:d4:2f:72:6d: e8:45:6b:21:ac:6c:d8:6c:12:59:24:f0:74:25:1e: 2e:04:d7:f5:4c:57:92:c5:8d:11:9d:64:82:ba:35: c8:c4:a2:c5:f7:68:5d:14:aa:a8:8a:83:76:cc:f8: 4f:59:e1:85:79:69:6d:8f:b0:f8:39:b5:46:17:fe: e3:2d:1f:8d:e4:9e:f1:dd:62:cb:dd:ab:dc:74:5b: aa:8c:9a:12:5f:c1:d7:a1:1b:54:71:99:fd:5f:c1: 16:4d:3c:00:70:d7:78:07:78:6a:16:ec:06:f0:48: b2:76:ce:8a:7b:43:4a:02:8f:50:a6:81:45:81:bd: 54:08:ff:ef:3f:47:ae:11:3c:1d:28:43:10:90:7f: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2E:D5:8F:5A:EB:D0:11:A0:62:F4:11:5B:FE:12:5F:55:20:C6:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9d:e2:1f:90:04:86:02:35:c3:b1:3d:88:a0:a5:05:34:eb: 72:26:22:a9:6e:88:91:3a:d4:5b:66:6d:32:e7:d6:48:17:2f: 3e:23:43:6c:40:1b:ab:9a:13:8b:10:ea:b9:fc:03:60:02:87: 6d:68:a3:7b:2d:a5:d3:75:50:7d:de:c9:5b:67:ab:89:cb:f0: 92:c3:a9:04:42:06:ef:87:ce:ec:00:f7:7f:84:bc:fd:17:a9: eb:0d:df:a7:e6:5c:50:12:a7:da:49:ef:f8:4a:d5:1f:8b:c8: a4:0b:e8:04:fc:0b:f6:3c:8b:0d:75:e7:86:32:57:60:44:7e: 2c:d2:69:28:d1:78:4b:a1:3a:df:cf:07:fb:2d:53:d3:a1:05: 2c:3f:91:de:1b:92:20:50:75:90:1b:a5:89:80:9d:e8:68:15: a2:a1:09:c0:9d:43:4c:7c:33:e1:87:6b:52:37:c2:4d:e8:2f: 9a:0b:dc:77:4e:a5:0d:aa:4b:b3:2c:68:ac:39:35:e3:22:fb: e8:5d:4c:c5:eb:85:d7:f7:ad:77:97:a2:b7:1f:73:ef:8c:f4: 9e:f7:e1:6d:d3:45:87:ce:e0:46:cf:2c:29:02:72:70:2a:7d: 27:37:c9:d4:c1:57:43:e7:46:ac:eb:34:57:4c:24:ba:12:11: ef:90:61:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdjO5b/1gW+1G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NzFiN2RjOTgtMzdiMC00NmQ0LWE0NDEtNGZlMWEyYTdkMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVMNpelOUaIu3mdj2dx9PJXL2J4ddPQJ2jwZ hoGoMiBS79x4/+aZ8FX4B7/q7TzRm6hzhVqYx2IUtQ81Lvha5Qd3z1Qgn9iVTg20 RTQZRsFzh+7xgkXg1f/fgieFvsuoCTm8o6naR0l2hZQA3yi+w0C9gNQvcm3oRWsh rGzYbBJZJPB0JR4uBNf1TFeSxY0RnWSCujXIxKLF92hdFKqoioN2zPhPWeGFeWlt j7D4ObVGF/7jLR+N5J7x3WLL3avcdFuqjJoSX8HXoRtUcZn9X8EWTTwAcNd4B3hq FuwG8Eiyds6Ke0NKAo9QpoFFgb1UCP/vP0euETwdKEMQkH+fIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4u1Y9a69ARoGL0EVv+El9VIMaOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY0NThiYWEtOWRhMi0z MDg0LWE4ZmYtNjliNzRkNDFmOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERx/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAud4h+QBIYCNcOxPYigpQU063ImIqluiJE61FtmbTLn1kgXLz4jQ2xA G6uaE4sQ6rn8A2ACh21oo3stpdN1UH3eyVtnq4nL8JLDqQRCBu+HzuwA93+EvP0X qesN36fmXFASp9pJ7/hK1R+LyKQL6AT8C/Y8iw1154YyV2BEfizSaSjReEuhOt/P B/stU9OhBSw/kd4bkiBQdZAbpYmAnehoFaKhCcCdQ0x8M+GHa1I3wk3oL5oL3HdO pQ2qS7MsaKw5NeMi++hdTMXrhdf3rXeXorcfc++M9J734W3TRYfO4EbPLCkCcnAq fSc3ydTBV0PnRqzrNFdMJLoSEe+QYUQ= -----END CERTIFICATE-----Generated at Sun Jun 29 09:17:43 2025 by rpki-client