$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa File: d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa (raw, json) Hash identifier: 5ZZX6+PHFfKx/yEPg4ZU1CfTT+VNqqQ7AmfO583smt4= Subject key identifier: 9E:00:1D:14:F4:AB:25:82:C9:84:96:94:19:25:20:22:5E:A5:14:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849A8E9EDBB6550F449F9F62A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 71.30.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:ed:bb:65:50:f4:49:f9:f6:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=84d620c7-eaa8-419a-9797-d616d30f2600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:eb:af:32:21:41:bb:93:ef:73:43:cf:3b: c9:00:d6:8e:60:c4:28:47:00:32:26:6d:a5:67:cc: 67:74:6f:2e:50:c4:4f:3c:12:36:64:c8:4f:5c:ab: 09:2b:3c:18:a2:c1:26:cf:09:46:1c:78:4e:5c:ce: 8d:7b:3c:87:a5:1d:f7:fc:dc:77:c2:df:87:b7:91: 30:13:78:0b:9c:40:49:4f:9d:74:4c:58:16:20:24: a6:6a:37:c9:bb:9d:17:53:08:a6:1a:1b:85:11:4b: ad:cb:75:82:4d:35:56:60:87:8c:93:4e:27:09:84: 95:ba:9d:9e:8d:06:e6:2d:2a:b6:98:df:b4:c1:b6: 54:a2:74:f2:60:56:3b:e7:c3:92:46:9a:de:88:bd: d7:34:86:bb:31:0b:86:3f:d2:e1:73:9d:be:ad:37: 8d:33:f3:2f:87:35:54:34:35:68:42:d6:b2:47:b5: b4:3d:18:bc:3e:80:ff:be:8c:ab:f4:15:7f:17:76: 38:1e:f6:5b:76:24:6b:b5:f4:e0:fe:63:64:b3:71: 1c:54:d2:df:aa:7a:47:b4:ee:aa:dd:71:0c:78:bc: 4d:07:92:05:29:e0:cd:c1:6b:41:05:b8:92:c6:1c: 3e:8f:65:b2:46:27:f0:e1:a6:63:5b:b7:6f:d3:1f: 01:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:00:1D:14:F4:AB:25:82:C9:84:96:94:19:25:20:22:5E:A5:14:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d90eb225-cb3e-34d5-92bf-cfdce79e7b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cc:88:35:91:8c:c2:ec:de:5b:7d:67:fe:64:3d:84:10:8b: 71:82:22:79:d1:27:5e:91:6c:79:6b:79:21:42:c0:07:f1:ee: c5:2b:c2:d4:55:10:8a:da:97:04:34:19:a8:6b:e4:38:fe:f9: 9c:7f:f1:e0:27:ae:af:33:47:7b:fc:08:6e:e8:bd:db:c5:9b: fd:c7:60:35:b1:fa:d8:4b:6d:58:b0:4a:c7:3e:f1:e2:20:1d: d5:8d:c4:72:7c:81:73:b4:2b:e1:21:10:7e:96:73:79:33:ad: 5a:fe:01:f0:99:fe:66:b9:8b:63:72:e1:4c:0b:d5:24:24:61: 3c:99:b4:31:94:96:56:37:d6:f7:41:53:9b:b0:8c:a7:1b:e5: 33:ce:a8:a4:fa:f3:2b:cc:61:f9:45:00:8f:92:a5:f8:64:65: 65:b3:15:9a:c7:8f:fc:32:15:19:d5:b2:6a:07:29:df:2f:28: 18:f3:74:99:10:63:0f:4e:ed:33:b2:4e:82:c0:2e:ee:87:9e: 01:c9:e0:47:c4:87:96:f1:c2:96:c7:6e:7f:70:c5:fc:40:0a: 45:f6:7e:79:72:7e:89:74:bd:f5:da:a8:c2:42:53:3c:9e:2d: 7c:bf:69:19:65:f9:84:17:65:9d:6a:ef:96:41:00:86:83:20: 9d:c8:b6:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6e27ZVD0Sfn2KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk ODRkNjIwYzctZWFhOC00MTlhLTk3OTctZDYxNmQzMGYyNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoazrrzIhQbuT73NDzzvJANaOYMQoRwAyJm2l Z8xndG8uUMRPPBI2ZMhPXKsJKzwYosEmzwlGHHhOXM6NezyHpR33/Nx3wt+Ht5Ew E3gLnEBJT510TFgWICSmajfJu50XUwimGhuFEUuty3WCTTVWYIeMk04nCYSVup2e jQbmLSq2mN+0wbZUonTyYFY758OSRpreiL3XNIa7MQuGP9Lhc52+rTeNM/MvhzVU NDVoQtayR7W0PRi8PoD/voyr9BV/F3Y4HvZbdiRrtfTg/mNks3EcVNLfqnpHtO6q 3XEMeLxNB5IFKeDNwWtBBbiSxhw+j2WyRifw4aZjW7dv0x8B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4AHRT0qyWCyYSWlBklICJepRTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDkwZWIyMjUtY2IzZS0z NGQ1LTkyYmYtY2ZkY2U3OWU3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7MiDWRjMLs3lt9Z/5kPYQQi3GCInnRJ16RbHlreSFCwAfx7sUrwtRV EIralwQ0Gahr5Dj++Zx/8eAnrq8zR3v8CG7ovdvFm/3HYDWx+thLbViwSsc+8eIg HdWNxHJ8gXO0K+EhEH6Wc3kzrVr+AfCZ/ma5i2Ny4UwL1SQkYTyZtDGUllY31vdB U5uwjKcb5TPOqKT68yvMYflFAI+SpfhkZWWzFZrHj/wyFRnVsmoHKd8vKBjzdJkQ Yw9O7TOyToLALu6HngHJ4EfEh5bxwpbHbn9wxfxACkX2fnlyfol0vfXaqMJCUzye LXy/aRll+YQXZZ1q75ZBAIaDIJ3ItoI= -----END CERTIFICATE-----Generated at Wed May 7 11:50:18 2025 by rpki-client