$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa File: a661af9c-80ea-344c-ac05-94e45117320a.roa (raw, json) Hash identifier: lN9lQ5b6q/NCu7JRI/eAWClnjjuWymLOkF9hSF2Dr9s= Subject key identifier: 04:25:CD:FA:1A:70:A4:C1:1F:E8:C2:D4:17:36:E4:0C:0F:48:32:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6689DB0E02BFF6B31AD830 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.30.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:89:db:0e:02:bf:f6:b3:1a:d8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=2280b14b-6cb3-4e6d-8316-24cad4450702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:ab:2a:3a:db:b3:e4:46:bd:ed:b4:b3:56: b1:60:ed:59:0d:0a:46:19:ab:f1:8a:28:bd:34:ce: 86:7d:96:c0:47:bf:b8:2b:2f:89:54:ca:da:ba:50: 5f:69:fc:a0:04:ec:06:21:51:fb:68:db:60:57:fd: 6c:e3:96:ed:f0:b1:46:ef:e0:f5:46:34:19:5a:84: f6:9b:e6:4e:9c:5d:18:d7:34:11:7c:57:8c:25:c9: be:34:c5:45:22:62:14:fc:cc:79:dd:df:8f:b3:91: c8:c3:3e:f8:84:fb:9d:dc:c9:1e:b1:dc:69:4c:97: c3:f5:31:76:d7:70:23:23:17:5e:be:3c:4d:3b:56: 1e:20:53:4e:3e:56:25:eb:f2:69:9d:0e:3a:4b:4e: db:a3:47:9b:d1:cd:3c:21:78:fb:7e:28:16:e1:44: 27:bb:0f:a5:de:61:65:98:34:d1:fd:41:48:4e:ca: 48:eb:d3:19:c9:e2:bb:df:62:d6:01:7a:a9:54:ac: fc:59:86:7a:5a:37:e8:48:12:51:35:cc:f6:bd:34: 27:d1:c1:13:c1:ca:9f:36:43:8a:1f:33:8d:7d:d9: 9a:8c:c2:00:6d:7f:64:9d:0d:01:1a:d2:53:49:40: 22:c8:8d:a3:45:99:4a:ed:78:6b:8b:02:69:91:e4: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:CD:FA:1A:70:A4:C1:1F:E8:C2:D4:17:36:E4:0C:0F:48:32:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a661af9c-80ea-344c-ac05-94e45117320a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a3:51:7c:cb:80:67:c0:cf:bf:f8:d2:4f:b3:93:b2:a2:40: ce:5c:ce:0a:30:a0:23:2c:6e:53:5c:9a:18:6d:91:d5:b3:43: 0c:68:75:87:ab:1f:e8:35:80:d0:e6:aa:ae:06:6c:7c:95:74: 98:3d:51:b6:6d:66:da:28:0d:9b:fa:79:90:da:33:fc:34:6a: ef:8b:a4:69:31:22:d4:07:44:d1:b4:ee:92:42:d5:a3:59:af: 76:e1:61:9f:ac:a8:84:35:ad:90:e3:50:12:d0:66:ed:81:a1: 34:08:ab:a5:50:d9:03:e0:97:4f:66:21:e3:cb:5e:5b:71:6a: 59:5f:96:a5:d3:89:a1:05:57:3a:aa:27:71:5d:09:c7:af:af: 8d:b7:32:4a:35:d9:79:5b:a3:4c:45:7c:c1:51:e7:04:85:68: 4b:06:a8:c1:94:44:6b:88:39:46:b8:7b:5f:42:ef:4e:ca:b3: 42:17:24:db:af:75:74:3c:dd:ed:62:64:6f:c3:27:05:70:c8: 25:d5:86:4a:2e:0e:a6:00:a4:72:90:f4:d0:94:56:be:78:1c: ae:91:51:10:40:de:d5:5a:36:22:14:c9:38:1d:95:97:c1:4d: b9:a3:59:fa:96:e7:d6:24:82:27:61:48:ee:1f:f2:72:79:b3: e7:83:fe:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZonbDgK/9rMa2DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MjI4MGIxNGItNmNiMy00ZTZkLTgzMTYtMjRjYWQ0NDUwNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pOrKjrbs+RGve20s1axYO1ZDQpGGavxiii9 NM6GfZbAR7+4Ky+JVMraulBfafygBOwGIVH7aNtgV/1s45bt8LFG7+D1RjQZWoT2 m+ZOnF0Y1zQRfFeMJcm+NMVFImIU/Mx53d+Ps5HIwz74hPud3MkesdxpTJfD9TF2 13AjIxdevjxNO1YeIFNOPlYl6/JpnQ46S07bo0eb0c08IXj7figW4UQnuw+l3mFl mDTR/UFITspI69MZyeK732LWAXqpVKz8WYZ6WjfoSBJRNcz2vTQn0cETwcqfNkOK HzONfdmajMIAbX9knQ0BGtJTSUAiyI2jRZlK7XhriwJpkeQsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQlzfoacKTBH+jC1Bc25AwPSDKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTY2MWFmOWMtODBlYS0z NDRjLWFjMDUtOTRlNDUxMTczMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWjUXzLgGfAz7/40k+zk7KiQM5czgowoCMsblNcmhhtkdWzQwxodYer H+g1gNDmqq4GbHyVdJg9UbZtZtooDZv6eZDaM/w0au+LpGkxItQHRNG07pJC1aNZ r3bhYZ+sqIQ1rZDjUBLQZu2BoTQIq6VQ2QPgl09mIePLXltxallflqXTiaEFVzqq J3FdCcevr423Mko12Xlbo0xFfMFR5wSFaEsGqMGURGuIOUa4e19C707Ks0IXJNuv dXQ83e1iZG/DJwVwyCXVhkouDqYApHKQ9NCUVr54HK6RURBA3tVaNiIUyTgdlZfB TbmjWfqW59YkgidhSO4f8nJ5s+eD/ks= -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:33 2025 by rpki-client