$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa File: d75928b4-5f67-3862-b915-b7ac40de473d.roa (raw, json) Hash identifier: ttNnTVHJ693DCq4XxXc6OmSZaIT3J7BvublTdWP9BEY= Subject key identifier: BD:0E:5D:62:DC:5E:DA:EC:50:AE:D7:82:BD:17:63:4D:4D:E9:24:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765D93897019F37FD9EC500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 71.31.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:d9:38:97:01:9f:37:fd:9e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=3baa4a82-4f2c-4ed3-9c82-d4c95119bb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:07:f6:0f:f5:3b:1d:ab:0f:e7:84:67:21:35: 43:40:62:7b:41:2c:2f:e2:71:b0:23:00:a5:90:8d: 4a:af:e3:b9:c6:6f:b6:75:27:88:44:a1:32:a7:e6: 82:aa:54:aa:e1:af:d4:17:0e:e4:3e:4a:6f:be:0f: 8a:55:73:b2:c2:2a:2d:61:46:42:70:24:2b:49:a3: c6:35:c5:1e:c8:46:b7:f3:74:4f:0b:ce:9b:d1:8b: b4:86:0e:36:38:6e:78:0d:52:17:53:fc:01:fd:8a: 5f:73:15:11:01:7c:ac:ba:a6:fd:35:e8:80:47:91: 0f:43:1d:0d:0b:8d:89:49:4b:b8:4e:e7:56:ad:aa: 84:f9:b4:e5:0d:c1:71:ab:fc:e3:4d:ba:2b:d2:54: 65:cc:13:79:f8:68:ef:d6:b6:7b:41:8c:b7:54:90: 1b:ec:fd:92:54:61:a8:cb:af:56:4f:c0:38:0e:ac: 75:fa:98:bf:99:7c:fe:26:0f:85:b1:e2:cf:1e:71: d2:80:74:78:90:fe:4c:ab:84:5e:19:2b:75:8f:3e: c9:d6:63:9b:a2:d9:fd:d8:d5:79:61:06:38:4a:68: b6:d9:80:a7:58:1c:8d:d4:fa:4e:4a:5e:5a:ac:d9: 23:2f:17:4a:b1:02:4d:0a:ba:30:f5:28:1d:d7:2c: b9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0E:5D:62:DC:5E:DA:EC:50:AE:D7:82:BD:17:63:4D:4D:E9:24:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d75928b4-5f67-3862-b915-b7ac40de473d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8f:42:fc:59:b6:e6:f9:e7:71:dc:30:98:e7:d2:bb:44:41: 85:16:af:3c:3e:0a:02:b2:4a:80:e6:a3:41:13:95:a5:95:17: a4:62:5f:f5:dd:f3:8c:40:69:3b:63:61:d1:9a:0d:f2:35:b0: 1d:a6:d3:67:3d:95:50:06:f8:8e:48:db:55:7d:e8:e6:f7:9e: ae:ac:fe:21:cf:7a:36:a6:e8:19:9d:1c:74:b1:66:2a:17:83: 5c:cc:57:ac:d8:df:d2:6d:bd:46:1f:d4:e9:3c:66:31:77:ee: e8:03:63:73:fc:99:fe:35:75:a8:56:ad:93:37:de:51:dc:10: 09:6f:eb:b3:e1:4f:59:91:6c:97:f1:02:18:dd:6a:fe:89:3f: 2b:f3:5c:03:b3:28:d9:ee:0f:6b:9b:88:bb:e6:b1:48:3b:2e: 6a:2c:44:0e:40:60:28:d1:4f:19:e5:6b:75:0f:aa:eb:0f:2c: 46:a0:7d:e3:5d:f6:d0:46:20:f5:78:fd:fe:2d:a7:79:79:5f: 58:eb:06:60:f0:29:61:21:92:49:08:17:d3:08:76:11:3a:20: bf:51:33:f6:68:56:11:26:0a:5b:99:63:d9:24:85:e3:3b:1b: 51:dd:c3:33:ea:d4:99:ed:21:80:cf:b3:4a:27:af:c2:9e:da: 17:6f:c5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZdk4lwGfN/2exQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk M2JhYTRhODItNGYyYy00ZWQzLTljODItZDRjOTUxMTliYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQf2D/U7HasP54RnITVDQGJ7QSwv4nGwIwCl kI1Kr+O5xm+2dSeIRKEyp+aCqlSq4a/UFw7kPkpvvg+KVXOywiotYUZCcCQrSaPG NcUeyEa383RPC86b0Yu0hg42OG54DVIXU/wB/YpfcxURAXysuqb9NeiAR5EPQx0N C42JSUu4TudWraqE+bTlDcFxq/zjTbor0lRlzBN5+Gjv1rZ7QYy3VJAb7P2SVGGo y69WT8A4Dqx1+pi/mXz+Jg+FseLPHnHSgHR4kP5Mq4ReGSt1jz7J1mObotn92NV5 YQY4Smi22YCnWByN1PpOSl5arNkjLxdKsQJNCrow9Sgd1yy5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0OXWLcXtrsUK7Xgr0XY01N6SQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDc1OTI4YjQtNWY2Ny0z ODYyLWI5MTUtYjdhYzQwZGU0NzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEePQvxZtub553HcMJjn0rtEQYUWrzw+CgKySoDmo0ETlaWVF6RiX/Xd 84xAaTtjYdGaDfI1sB2m02c9lVAG+I5I21V96Ob3nq6s/iHPejam6BmdHHSxZioX g1zMV6zY39JtvUYf1Ok8ZjF37ugDY3P8mf41dahWrZM33lHcEAlv67PhT1mRbJfx Ahjdav6JPyvzXAOzKNnuD2ubiLvmsUg7LmosRA5AYCjRTxnla3UPqusPLEagfeNd 9tBGIPV4/f4tp3l5X1jrBmDwKWEhkkkIF9MIdhE6IL9RM/ZoVhEmCluZY9kkheM7 G1HdwzPq1JntIYDPs0onr8Ke2hdvxS4= -----END CERTIFICATE-----Generated at Tue Jul 1 21:16:21 2025 by rpki-client