$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f671207-c21a-3394-98c3-d80a3a4ef898.roa File: 7f671207-c21a-3394-98c3-d80a3a4ef898.roa (raw, json) Hash identifier: gpT45AQbk/fcbX+cNnpuTeRmGLoly50L3bG2SbD9xDM= Subject key identifier: F2:5C:FF:A5:58:94:E8:65:F4:E3:50:DE:5A:26:90:C7:46:25:8C:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D16587EDA7B5D63A00AEA7C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f671207-c21a-3394-98c3-d80a3a4ef898.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 71.31.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:87:ed:a7:b5:d6:3a:00:ae:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=6b97dde9-60f4-4c6e-acad-fc14ebc7b75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6e:94:bc:5a:ee:3d:02:ee:eb:b6:d6:4e:24: 99:28:b2:04:ae:65:9f:13:cd:54:83:83:2b:83:29: 1d:84:55:76:1d:b5:d4:d9:93:76:df:02:8e:7b:76: 76:f8:53:7d:88:f7:b9:4c:3d:7c:f1:9a:78:43:c0: b3:9e:f8:5a:65:dd:1a:2c:23:89:a1:74:c1:16:f1: 3f:7d:76:99:3c:13:fc:e3:25:b8:36:e0:c9:d0:7d: ba:d0:58:df:6c:97:ae:3c:5a:7f:44:54:a0:cc:8a: 3d:d7:4e:b2:67:fe:56:4c:af:87:26:35:12:7d:2b: d3:3c:08:f9:4f:7a:20:b0:f4:41:42:ad:07:a0:f5: a1:39:2c:7d:6d:2f:c7:71:22:3a:56:68:cb:34:d8: d3:2f:b7:10:41:b2:5f:56:68:7f:52:04:49:a3:85: d0:1e:71:aa:ab:16:77:7b:fd:87:5f:e5:bf:22:58: b1:60:40:cd:44:d0:9f:da:8e:0d:27:f2:b6:9d:35: a1:a2:dc:26:cc:2e:8f:ca:26:80:f8:c4:ae:7d:6b: f9:38:de:95:53:1d:0b:de:b8:4d:37:d3:71:6c:46: 4b:0a:23:10:10:66:76:0b:27:5c:61:43:04:57:90: e9:19:23:c7:31:5f:f5:e9:97:71:a3:46:f1:77:e4: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5C:FF:A5:58:94:E8:65:F4:E3:50:DE:5A:26:90:C7:46:25:8C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7f671207-c21a-3394-98c3-d80a3a4ef898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:aa:73:18:93:b1:c6:7a:b9:b9:4e:5d:3a:eb:02:61:19: d7:1f:15:f3:b0:ee:f5:a0:ff:45:d4:9a:de:a9:38:ed:a0:97: 0a:da:11:28:cb:bb:b3:aa:03:d3:4f:1b:71:05:47:1c:74:57: b7:f9:7e:78:a3:3c:91:bd:48:1f:18:2a:d3:86:22:e6:ea:86: e9:05:c3:9b:88:b9:0e:26:80:12:b3:0c:57:ff:54:87:52:cf: d4:67:fd:bd:3b:11:7b:45:58:81:74:34:70:f0:76:5b:f5:83: f3:85:2e:11:7d:f7:25:f9:81:1a:95:28:29:6a:ab:a6:94:da: 8b:7d:ef:ab:6a:93:8e:d8:4a:fe:29:5e:f3:17:e5:73:27:c9: d7:70:ed:e8:92:fd:55:32:ea:07:25:c5:eb:fe:19:98:a4:35: 65:9d:ed:82:52:d0:ea:f1:16:51:25:31:5a:9e:f4:97:ce:47: 18:d0:3a:d7:ff:bf:aa:75:09:be:db:b0:96:3f:21:c2:79:57: 50:5b:d3:d6:d3:22:39:10:60:7a:e8:05:23:d8:12:cb:72:f8: 22:c2:c4:89:70:6e:4d:ad:36:24:aa:f0:bc:39:99:d8:ba:05: 15:bd:59:1b:81:06:ec:d4:4b:4a:f9:b8:a9:18:e1:93:17:a2: 1d:5f:44:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYftp7XWOgCup8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NmI5N2RkZTktNjBmNC00YzZlLWFjYWQtZmMxNGViYzdiNzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk26UvFruPQLu67bWTiSZKLIErmWfE81Ug4Mr gykdhFV2HbXU2ZN23wKOe3Z2+FN9iPe5TD188Zp4Q8CznvhaZd0aLCOJoXTBFvE/ fXaZPBP84yW4NuDJ0H260FjfbJeuPFp/RFSgzIo9106yZ/5WTK+HJjUSfSvTPAj5 T3ogsPRBQq0HoPWhOSx9bS/HcSI6VmjLNNjTL7cQQbJfVmh/UgRJo4XQHnGqqxZ3 e/2HX+W/IlixYEDNRNCf2o4NJ/K2nTWhotwmzC6PyiaA+MSufWv5ON6VUx0L3rhN N9NxbEZLCiMQEGZ2CydcYUMEV5DpGSPHMV/16Zdxo0bxd+Q8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJc/6VYlOhl9ONQ3lomkMdGJYwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2Y2NzEyMDctYzIxYS0z Mzk0LTk4YzMtZDgwYTNhNGVmODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn7qnMYk7HGerm5Tl066wJhGdcfFfOw7vWg/0XUmt6pOO2glwraESjL u7OqA9NPG3EFRxx0V7f5fnijPJG9SB8YKtOGIubqhukFw5uIuQ4mgBKzDFf/VIdS z9Rn/b07EXtFWIF0NHDwdlv1g/OFLhF99yX5gRqVKClqq6aU2ot976tqk47YSv4p XvMX5XMnyddw7eiS/VUy6gclxev+GZikNWWd7YJS0OrxFlElMVqe9JfORxjQOtf/ v6p1Cb7bsJY/IcJ5V1Bb09bTIjkQYHroBSPYEsty+CLCxIlwbk2tNiSq8Lw5mdi6 BRW9WRuBBuzUS0r5uKkY4ZMXoh1fRPI= -----END CERTIFICATE-----Generated at Mon Jun 30 19:56:23 2025 by rpki-client