$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa File: 97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa (raw, json) Hash identifier: Uo1zpUAiLvnvbXsp92pLljEUNolu05liVFx6L8MbDDk= Subject key identifier: A2:A7:88:19:C7:01:A4:46:96:4C:21:B0:09:90:6F:BF:AA:1F:FE:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B434C603247DF061560ECA360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 7029 IP address blocks: 71.30.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:60:32:47:df:06:15:60:ec:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b0f9b2e1-eeed-49d1-85d5-d50a298d7a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:00:7b:96:b3:a5:0a:6e:64:04:ad:93:fc: c8:5b:56:e3:2e:5e:28:11:c8:8d:a4:f1:51:01:f7: 8b:9f:03:34:ac:15:08:ae:aa:93:9d:d0:f2:16:d5: 69:26:27:59:c8:42:4a:97:8a:d3:a7:65:fa:ce:9a: 7b:f9:8b:78:81:dc:c4:23:79:2d:23:e7:83:e0:9b: 14:1f:aa:d5:e2:f6:53:04:79:f0:33:2d:86:3c:f5: da:03:31:c5:f8:6d:82:9d:0b:87:99:d9:2e:49:15: e1:3c:8e:c6:3d:7f:34:90:44:6a:83:df:58:ef:81: 1c:b6:aa:ea:79:81:8f:78:83:7b:f0:db:93:ad:5f: d8:a7:04:de:05:b7:d1:d0:0a:a8:f1:c3:cb:33:5d: 8f:00:5b:99:40:a1:2d:ee:67:94:4a:28:db:2c:37: 46:10:7f:10:4e:75:c2:43:e8:71:27:a1:ee:bd:07: 13:e3:93:4c:3c:8c:a7:94:c7:3a:b8:f7:d2:45:bc: 0e:5f:69:3a:84:0e:d8:89:4c:ac:da:ef:33:50:ce: e1:6c:c0:cb:e4:7d:b3:09:dc:f9:51:cf:d7:f3:78: b2:5f:e6:8f:e0:07:75:29:aa:41:6f:22:f7:b6:07: 40:74:20:0b:e5:75:84:69:ec:15:40:38:5c:7e:a3: 02:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:88:19:C7:01:A4:46:96:4C:21:B0:09:90:6F:BF:AA:1F:FE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c7:ac:25:78:1c:63:ed:46:47:66:d2:fa:f6:05:83:f4:29: 6c:48:32:8a:ea:11:78:5f:8c:52:f9:dd:e9:02:e2:95:9e:46: 60:15:18:82:a6:0a:df:67:90:91:1c:23:10:3c:99:71:43:86: 5d:fe:6c:e6:e5:4c:55:1c:59:2b:b3:0b:7b:b6:40:03:b6:2d: 76:d0:28:27:9e:09:92:27:56:d2:c6:8c:f6:11:12:00:43:53: 3b:e2:56:f0:92:b5:c9:10:cd:6c:47:f1:f3:88:e1:b5:fe:a1: 1e:20:f9:0d:e3:fe:31:bc:82:fb:f7:e4:53:1b:ad:94:2d:61: 0a:0b:45:65:23:b4:a7:81:6e:bd:d5:d4:3d:d7:77:60:64:a8: 6d:be:58:8f:e6:f0:e1:d6:65:bb:17:ec:a5:3a:55:75:b0:ae: f5:b1:92:b5:b4:eb:ac:0e:72:51:56:60:90:75:d0:e5:76:b0: 4d:7b:65:c1:f3:10:5c:9b:2c:5e:9f:c9:75:17:4b:8e:2f:f3: 24:2f:d8:f3:01:ca:37:fd:8f:58:ad:38:28:eb:2e:0c:e7:3a: ca:ad:f1:7f:d7:4c:41:9e:70:2e:d3:82:27:2e:f8:88:09:78: c4:23:c6:56:47:4d:38:00:fa:b9:e8:a9:94:a9:a3:53:95:1e: 3b:30:51:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGAyR98GFWDso2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjBmOWIyZTEtZWVlZC00OWQxLTg1ZDUtZDUwYTI5OGQ3YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiUAe5azpQpuZAStk/zIW1bjLl4oEciNpPFR AfeLnwM0rBUIrqqTndDyFtVpJidZyEJKl4rTp2X6zpp7+Yt4gdzEI3ktI+eD4JsU H6rV4vZTBHnwMy2GPPXaAzHF+G2CnQuHmdkuSRXhPI7GPX80kERqg99Y74Ectqrq eYGPeIN78NuTrV/YpwTeBbfR0Aqo8cPLM12PAFuZQKEt7meUSijbLDdGEH8QTnXC Q+hxJ6HuvQcT45NMPIynlMc6uPfSRbwOX2k6hA7YiUys2u8zUM7hbMDL5H2zCdz5 Uc/X83iyX+aP4Ad1KapBbyL3tgdAdCAL5XWEaewVQDhcfqMC8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKniBnHAaRGlkwhsAmQb7+qH/7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTdjZjY4YTAtMTdhMi0z NDkyLTg0YWUtMWIwZjlkZjVmNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx4yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfHrCV4HGPtRkdm0vr2BYP0KWxIMorqEXhfjFL53ekC4pWeRmAVGIKm Ct9nkJEcIxA8mXFDhl3+bOblTFUcWSuzC3u2QAO2LXbQKCeeCZInVtLGjPYREgBD UzviVvCStckQzWxH8fOI4bX+oR4g+Q3j/jG8gvv35FMbrZQtYQoLRWUjtKeBbr3V 1D3Xd2BkqG2+WI/m8OHWZbsX7KU6VXWwrvWxkrW066wOclFWYJB10OV2sE17ZcHz EFybLF6fyXUXS44v8yQv2PMByjf9j1itOCjrLgznOsqt8X/XTEGecC7Tgicu+IgJ eMQjxlZHTTgA+rnoqZSpo1OVHjswUQQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:21 2025 by rpki-client