$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa File: ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa (raw, json) Hash identifier: xqX1lp+J2h6f/og1jkxe8nUCp1Ds7HfmXuSS1Td9VDg= Subject key identifier: 9F:4A:32:18:84:EF:2A:2F:E6:59:CA:15:5C:AB:E6:B4:13:E4:E5:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B68FCA39BA8F79779197FD9C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.30.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a3:9b:a8:f7:97:79:19:7f:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=bb04f6c6-cc20-46df-919f-2d64b743ccb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:33:b8:8d:44:1a:17:83:f9:b5:54:19:e4: ad:73:23:74:4b:ff:4b:38:2c:8c:dc:ee:25:7a:ac: bc:85:65:48:37:61:73:bb:af:86:3f:01:27:9f:2e: 48:2e:62:cf:3d:5a:3b:d9:19:26:7e:66:bc:27:cf: 31:7d:d5:28:cc:c4:85:0c:4d:57:64:8a:22:41:de: 57:f7:f4:07:0b:32:6a:cb:20:54:f7:3e:43:58:bf: b8:51:7a:f0:b5:0b:ed:1b:79:e9:56:65:99:64:ee: ba:a7:e4:b3:6b:6d:c2:7b:e0:70:6c:d9:9f:cb:26: 55:7c:64:16:d8:01:42:7f:ec:6f:b9:d7:66:25:55: fc:98:db:dd:5f:4a:a3:47:f1:af:15:f6:48:a7:f0: 81:8e:6b:1c:23:d4:b6:f6:8f:84:df:f3:b4:2d:71: 53:51:d5:40:34:0e:88:66:5f:cf:4c:e8:0e:d0:8d: f5:cc:bb:67:6d:74:e0:49:ae:5d:30:65:d0:1b:c1: 22:7c:f8:46:c7:63:8d:5a:97:b3:d3:45:b5:92:5e: a5:ce:d1:1d:b8:09:a3:cb:6a:6f:3e:35:fe:d4:db: 84:a4:b1:59:7b:0c:da:c9:a4:7c:83:d8:7c:b1:1e: 41:14:df:bc:d2:4a:64:79:d1:77:9b:cc:e0:c9:44: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:32:18:84:EF:2A:2F:E6:59:CA:15:5C:AB:E6:B4:13:E4:E5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca70b4e1-b5c3-3a21-bc83-13c3f690ea82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d2:c5:b4:7e:93:7b:30:d3:b5:51:4e:f1:e8:5f:26:b3:76: b8:7d:78:2e:6a:e7:fa:9a:b7:23:7e:5a:11:09:6e:6a:b8:cf: 8a:6a:5d:64:db:6f:ca:08:96:8e:11:a4:12:19:2b:a3:30:33: 56:7e:31:ea:ed:9c:60:5c:34:dc:15:3c:de:ac:83:a4:b5:fc: f1:0d:1b:bf:81:aa:16:a8:d2:7d:43:18:dd:bb:ba:7e:75:41: 10:71:d3:42:bd:28:69:44:74:5b:89:b7:b3:27:5d:df:c0:7e: 2c:a2:49:49:17:8d:91:55:6f:e2:df:f8:18:c8:87:87:aa:21: 70:ee:3b:9d:3c:a7:b4:68:09:7a:a9:44:4b:0e:01:2e:05:c7: 7f:24:fd:42:b5:bf:d0:08:0e:95:76:ac:a6:6e:71:ca:c5:25: b2:76:c9:6b:ea:90:5e:17:6e:1b:69:6c:35:c5:84:bf:00:21: 5e:54:db:56:89:86:8e:54:0f:24:71:7e:71:3d:af:7b:40:b9: 71:ea:62:1f:09:83:31:10:6f:1d:30:9f:98:1c:27:05:d1:36: fe:6f:83:98:ff:50:d3:32:c1:ac:a9:29:12:76:fc:89:90:ea: b9:4e:d3:a1:31:74:9e:0e:c7:4f:ac:fd:5f:60:15:d0:05:7f: 55:9d:43:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KObqPeXeRl/2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk YmIwNGY2YzYtY2MyMC00NmRmLTkxOWYtMmQ2NGI3NDNjY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheczuI1EGheD+bVUGeStcyN0S/9LOCyM3O4l eqy8hWVIN2Fzu6+GPwEnny5ILmLPPVo72Rkmfma8J88xfdUozMSFDE1XZIoiQd5X 9/QHCzJqyyBU9z5DWL+4UXrwtQvtG3npVmWZZO66p+Sza23Ce+BwbNmfyyZVfGQW 2AFCf+xvuddmJVX8mNvdX0qjR/GvFfZIp/CBjmscI9S29o+E3/O0LXFTUdVANA6I Zl/PTOgO0I31zLtnbXTgSa5dMGXQG8EifPhGx2ONWpez00W1kl6lztEduAmjy2pv PjX+1NuEpLFZewzayaR8g9h8sR5BFN+80kpkedF3m8zgyUS3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9KMhiE7yov5lnKFVyr5rQT5OVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E3MGI0ZTEtYjVjMy0z YTIxLWJjODMtMTNjM2Y2OTBlYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfSxbR+k3sw07VRTvHoXyazdrh9eC5q5/qatyN+WhEJbmq4z4pqXWTb b8oIlo4RpBIZK6MwM1Z+MertnGBcNNwVPN6sg6S1/PENG7+Bqhao0n1DGN27un51 QRBx00K9KGlEdFuJt7MnXd/AfiyiSUkXjZFVb+Lf+BjIh4eqIXDuO508p7RoCXqp REsOAS4Fx38k/UK1v9AIDpV2rKZuccrFJbJ2yWvqkF4XbhtpbDXFhL8AIV5U21aJ ho5UDyRxfnE9r3tAuXHqYh8JgzEQbx0wn5gcJwXRNv5vg5j/UNMywaypKRJ2/ImQ 6rlO06ExdJ4Ox0+s/V9gFdAFf1WdQ4o= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:53 2025 by rpki-client