$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa File: bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa (raw, json) Hash identifier: 9JylCnU/DiGfahVaqpWFSV+5zQv7Z1CsX9kDeFOLCvg= Subject key identifier: 11:EC:E9:A6:5A:A0:8C:39:61:94:5B:18:EF:49:F9:AB:19:4F:C9:62 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480ADE3B0DCC855D8E4D0E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.29.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:de:3b:0d:cc:85:5d:8e:4d:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=baa64410-4d33-4bfa-bb0a-87185f4b6d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:50:f2:eb:ce:64:bd:57:32:a7:1f:a3:81: 7f:bd:d6:53:19:2e:2e:35:45:35:e9:b7:7f:6d:e6: 3e:13:45:c6:1f:fe:8e:c5:4e:c2:10:04:db:3a:48: 64:d9:b4:f8:b2:d5:87:b8:37:aa:b6:cf:ad:de:78: 01:2b:fb:20:0b:1c:30:d7:e1:fb:75:1c:53:04:a4: ef:64:03:67:a4:2f:34:8e:5d:16:88:e6:f2:18:3f: 74:ad:bf:27:46:e4:5a:38:86:60:98:9a:03:47:25: a8:7e:22:f8:09:5d:84:88:31:93:a3:16:d8:ec:ee: 85:33:e8:f8:00:7b:4f:c1:58:ff:de:8b:1d:72:d6: 79:c9:7a:11:a6:15:d6:30:9a:30:bd:dc:76:03:40: a9:de:03:75:a5:27:70:3c:df:c6:c6:fa:6f:26:08: 1d:c0:5e:96:8b:04:32:d0:5d:35:6a:02:a5:bc:35: 19:a3:bf:89:d3:48:e0:17:4c:b0:b5:fa:8c:ff:2b: 58:66:01:14:ce:74:dc:8c:5f:74:d7:09:50:7b:03: 33:f0:6b:70:90:f1:8f:26:f0:25:72:bb:90:c0:41: b7:35:f5:e1:89:26:c7:ad:a7:42:9b:04:a9:fd:9b: ca:e5:dd:14:ee:c0:6b:f2:f0:ab:83:fa:12:1c:41: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EC:E9:A6:5A:A0:8C:39:61:94:5B:18:EF:49:F9:AB:19:4F:C9:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb31b58c-e150-33f4-ac15-3fcb02bcc54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:32:08:0d:41:a2:5d:f2:99:58:33:4d:43:3f:7f:d7:46:03: 4e:ab:84:18:80:bd:1c:5a:a5:51:79:2e:34:93:6c:d2:d6:18: 2a:22:e3:58:5e:8c:15:18:43:61:ac:20:df:56:b5:01:8d:07: 70:1f:8b:c3:e9:22:3d:07:40:84:0f:25:54:64:0d:c8:36:a1: 8a:6b:72:f2:3c:03:e0:b2:13:58:2d:00:9c:42:c7:54:41:9d: a9:e5:8d:4a:90:d0:63:51:c8:ae:f7:c6:d0:67:e8:be:89:80: 9c:ec:46:a3:e2:7f:aa:06:95:3a:0b:df:78:42:da:4e:26:46: f4:cc:4d:33:3b:60:66:27:ae:f5:92:02:86:b6:f6:d3:86:fb: 94:ad:a3:fe:71:f1:e1:5d:80:bc:b8:09:ca:27:f7:b0:73:dd: d4:fc:ea:de:c5:15:53:6a:80:d7:0f:6d:e9:bf:75:03:ec:22: 45:d1:54:a7:e6:b3:5c:e2:e0:3d:64:6f:0d:fd:49:3e:a4:ac: 91:f4:7b:96:ed:cf:14:cf:4e:3f:b7:d8:aa:83:ee:db:c6:35: a0:38:6c:fd:bf:8a:1f:d3:75:4a:23:95:24:55:af:a6:bc:c2: 18:70:15:31:1a:7e:cf:43:47:b8:2d:cd:e2:94:f1:b7:9c:9b: f8:0c:24:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICt47DcyFXY5NDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YmFhNjQ0MTAtNGQzMy00YmZhLWJiMGEtODcxODVmNGI2ZDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgxQ8uvOZL1XMqcfo4F/vdZTGS4uNUU16bd/ beY+E0XGH/6OxU7CEATbOkhk2bT4stWHuDeqts+t3ngBK/sgCxww1+H7dRxTBKTv ZANnpC80jl0WiObyGD90rb8nRuRaOIZgmJoDRyWofiL4CV2EiDGToxbY7O6FM+j4 AHtPwVj/3osdctZ5yXoRphXWMJowvdx2A0Cp3gN1pSdwPN/GxvpvJggdwF6WiwQy 0F01agKlvDUZo7+J00jgF0ywtfqM/ytYZgEUznTcjF901wlQewMz8GtwkPGPJvAl cruQwEG3NfXhiSbHradCmwSp/ZvK5d0U7sBr8vCrg/oSHEFTHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHs6aZaoIw5YZRbGO9J+asZT8liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzMWI1OGMtZTE1MC0z M2Y0LWFjMTUtM2ZjYjAyYmNjNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcyCA1Bol3ymVgzTUM/f9dGA06rhBiAvRxapVF5LjSTbNLWGCoi41he jBUYQ2GsIN9WtQGNB3Afi8PpIj0HQIQPJVRkDcg2oYprcvI8A+CyE1gtAJxCx1RB nanljUqQ0GNRyK73xtBn6L6JgJzsRqPif6oGlToL33hC2k4mRvTMTTM7YGYnrvWS Aoa29tOG+5Sto/5x8eFdgLy4Ccon97Bz3dT86t7FFVNqgNcPbem/dQPsIkXRVKfm s1zi4D1kbw39ST6krJH0e5btzxTPTj+32KqD7tvGNaA4bP2/ih/TdUojlSRVr6a8 whhwFTEafs9DR7gtzeKU8becm/gMJFg= -----END CERTIFICATE-----Generated at Sun Jun 29 06:57:14 2025 by rpki-client