$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa File: 97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa (raw, json) Hash identifier: +BHLmau6oRFe3wGn949PT5lzG7HAErxctZ03+IjTatY= Subject key identifier: CB:0A:B3:44:72:14:1B:03:E4:46:90:65:6B:F6:0D:48:85:C9:48:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A629078DF9B26F4FA2A921720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.30.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:78:df:9b:26:f4:fa:2a:92:17:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0e1a4330-3d45-4099-ad25-aa5d7c4b6163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:e8:2f:d3:36:d4:e7:d8:94:47:bf:24:b1: 27:b6:9a:85:81:cc:48:c3:6e:0f:e8:7d:66:03:96: f0:8b:3a:e9:68:c1:cf:03:f8:ea:01:e4:37:15:4f: c1:09:18:13:74:c0:d5:72:07:b9:d1:4a:cc:f0:fd: 5c:c8:3c:30:01:65:fa:4d:60:c1:76:f5:2b:f5:77: be:61:6e:55:29:58:bf:03:cd:f5:7e:50:3a:ef:7e: 0a:ef:36:41:76:e1:f4:50:8a:fc:75:21:75:77:6a: 01:51:15:2c:e8:5b:97:fb:03:35:f1:d3:9e:7f:bf: 3f:77:e0:a4:02:b4:ea:7c:f6:b2:22:7b:b2:66:00: 3f:b4:48:b1:72:98:f9:a4:a3:0a:4d:c6:98:01:02: 63:e9:6f:6e:ff:59:3b:07:b0:d2:33:9f:de:96:a5: 85:66:86:46:a9:11:9d:17:29:eb:a0:17:27:e7:c8: 87:c3:aa:92:95:9c:ec:9f:75:4f:85:a0:f3:c5:d9: 7d:9a:df:14:81:e5:af:4e:63:bf:a9:d3:2a:49:2a: d5:2d:e0:03:fc:4e:7e:75:20:60:72:15:84:37:63: c9:7b:a5:08:5a:64:f1:45:d9:53:d1:2a:68:a6:1b: a3:d9:52:85:21:2a:b5:8a:26:8b:d1:dc:d3:f1:8f: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0A:B3:44:72:14:1B:03:E4:46:90:65:6B:F6:0D:48:85:C9:48:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/97cf68a0-17a2-3492-84ae-1b0f9df5f4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:24:04:f7:81:5e:13:17:d0:7e:76:ea:b6:4b:7f:e3:12:9a: b9:27:94:c4:34:7d:90:c1:ec:1c:70:fa:ad:d3:1d:d8:9b:99: 0d:0c:cc:87:d7:59:61:99:c8:ed:3c:75:e2:4f:a1:63:3f:0e: 63:07:c6:67:bf:64:2d:66:84:5b:b5:29:24:76:95:82:d4:a5: 5f:00:d5:e0:95:e9:3d:c1:38:b6:0a:ac:5e:6c:e8:c8:73:30: e1:a9:46:d8:69:ef:8d:65:77:e0:fb:94:6c:0e:ee:f5:c8:d3: 67:b1:35:9f:60:70:9c:70:05:a6:90:f0:91:c5:a0:1e:b7:cb: 98:4e:86:f8:8c:29:4a:5a:a0:2b:40:f6:f1:88:3f:c3:0d:cb: f4:7f:08:e2:1c:b0:ef:ea:c2:ea:ab:ca:fe:ba:49:1c:b3:56: 85:d1:be:16:fd:b5:29:cf:9e:91:90:b0:b9:57:51:e1:e0:fc: 79:78:db:2d:95:a9:a4:02:c8:89:1a:23:77:5c:62:71:96:cd: 96:a1:44:ba:4a:41:03:8d:dd:84:65:24:56:17:a6:b3:37:d4: a8:c1:8f:7c:21:a0:91:bc:58:3a:73:4b:9d:dd:f0:60:90:ea: 31:d3:d7:b9:f6:a7:18:22:8c:82:5e:ea:a9:af:90:59:6c:62: 57:fb:54:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikHjfmyb0+iqSFyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MGUxYTQzMzAtM2Q0NS00MDk5LWFkMjUtYWE1ZDdjNGI2MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzToL9M21OfYlEe/JLEntpqFgcxIw24P6H1m A5bwizrpaMHPA/jqAeQ3FU/BCRgTdMDVcge50UrM8P1cyDwwAWX6TWDBdvUr9Xe+ YW5VKVi/A831flA6734K7zZBduH0UIr8dSF1d2oBURUs6FuX+wM18dOef78/d+Ck ArTqfPayInuyZgA/tEixcpj5pKMKTcaYAQJj6W9u/1k7B7DSM5/elqWFZoZGqRGd FynroBcn58iHw6qSlZzsn3VPhaDzxdl9mt8UgeWvTmO/qdMqSSrVLeAD/E5+dSBg chWEN2PJe6UIWmTxRdlT0Spophuj2VKFISq1iiaL0dzT8Y+jlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsKs0RyFBsD5EaQZWv2DUiFyUiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTdjZjY4YTAtMTdhMi0z NDkyLTg0YWUtMWIwZjlkZjVmNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx4yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQkBPeBXhMX0H526rZLf+MSmrknlMQ0fZDB7Bxw+q3THdibmQ0MzIfX WWGZyO08deJPoWM/DmMHxme/ZC1mhFu1KSR2lYLUpV8A1eCV6T3BOLYKrF5s6Mhz MOGpRthp741ld+D7lGwO7vXI02exNZ9gcJxwBaaQ8JHFoB63y5hOhviMKUpaoCtA 9vGIP8MNy/R/COIcsO/qwuqryv66SRyzVoXRvhb9tSnPnpGQsLlXUeHg/Hl42y2V qaQCyIkaI3dcYnGWzZahRLpKQQON3YRlJFYXprM31KjBj3whoJG8WDpzS53d8GCQ 6jHT17n2pxgijIJe6qmvkFlsYlf7VAw= -----END CERTIFICATE-----Generated at Wed Jul 9 13:22:29 2025 by rpki-client