$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6be842-7159-3ffe-8ed1-10aab98cfe34.roa File: bb6be842-7159-3ffe-8ed1-10aab98cfe34.roa (raw, json) Hash identifier: oq3KVBNFFCv2n5WAkT9eAFOxBV2nLlYFe5qQM/NXSAY= Subject key identifier: C4:AE:37:FB:21:64:EF:BB:29:C7:C6:BB:D0:75:D7:A7:AD:27:8D:08 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5FC5CE7BC10E81552ED72700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6be842-7159-3ffe-8ed1-10aab98cfe34.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 7029 IP address blocks: 71.30.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:ce:7b:c1:0e:81:55:2e:d7:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=dae14883-b6e9-47b4-a925-04e7501bf824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:72:50:59:7a:8b:00:69:60:67:69:e3:b8: 19:6b:1b:de:db:27:79:c4:4c:a3:7a:a5:fa:6e:f0: 22:fc:9c:e9:00:a5:d4:21:8c:c3:31:7a:82:9d:fc: a2:e0:69:58:bf:06:7c:66:a5:98:51:a7:5c:c0:6b: f5:d5:90:44:e1:97:04:b8:f1:5a:f3:a0:ac:6b:2f: e4:f1:a7:83:bf:20:0c:b3:5b:16:b7:94:32:68:24: e5:0e:f4:2f:e6:80:08:e8:d5:b3:1d:9b:2a:cd:be: 41:c9:ce:71:b6:b1:ae:64:5b:b6:b8:93:fa:aa:c1: dc:fa:6f:f8:60:e0:3c:9d:91:a6:e9:36:db:72:70: f4:49:e4:04:ab:48:cd:a2:99:92:d5:2e:d5:e6:ab: c5:76:97:f2:81:4b:b4:65:c1:d3:53:a0:30:fd:07: 25:2b:33:dd:1d:16:b7:e0:2e:8f:f6:09:be:4b:77: 69:f4:06:c9:5d:35:62:a7:40:42:a8:89:50:71:c0: 3f:4b:9b:fd:d3:c7:c8:41:a7:9b:48:08:c9:7b:ee: cb:c7:75:8d:c7:c1:8b:4f:e1:0b:4c:ed:8f:51:9d: ef:a5:72:35:ee:87:61:db:cb:15:19:22:83:98:9d: 7b:da:13:5a:58:ab:a9:fc:3a:32:be:21:78:25:67: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AE:37:FB:21:64:EF:BB:29:C7:C6:BB:D0:75:D7:A7:AD:27:8D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb6be842-7159-3ffe-8ed1-10aab98cfe34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:92:ea:b1:ec:b5:9a:94:77:ab:2f:d2:0b:91:9a:75:34:d3: 7f:7b:3b:ca:fc:37:20:6c:db:cf:ee:a1:e7:6c:ec:26:fd:27: 59:be:96:3e:1f:d0:43:05:14:90:21:c6:b7:03:e1:1f:fd:bd: b3:a6:e0:26:a3:da:b0:fa:a6:0e:6c:c8:0f:85:27:31:f9:0b: 9c:59:26:de:0c:f9:e9:8b:a3:b3:75:02:29:8f:9e:8e:34:0f: 7c:06:d3:07:9e:40:52:96:0b:03:fe:c9:41:85:55:2e:ce:86: b1:a5:dd:23:21:d3:3b:27:00:c3:2b:e4:68:ee:46:81:43:31: 3a:9a:b8:0e:1d:c6:22:dc:31:68:16:05:bc:24:17:f7:5a:88: 06:00:87:90:62:e6:a6:5f:8b:82:00:22:1b:de:99:7d:99:0c: f1:cc:a5:4b:fd:2a:a8:be:f1:d9:4e:40:ef:f2:79:c1:77:26: 6e:f2:4b:24:49:aa:63:3b:af:8b:3c:51:8c:1d:a6:92:34:3f: 83:40:4b:47:7f:51:80:c8:c9:cc:8f:08:3e:f2:89:29:64:3a: 99:35:15:18:2e:70:3a:34:68:a4:43:3c:72:25:4d:30:a9:43: 51:55:6f:07:0f:d3:48:23:dd:b5:fc:0b:7b:8b:7d:60:8a:99: 70:61:96:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxc57wQ6BVS7XJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZGFlMTQ4ODMtYjZlOS00N2I0LWE5MjUtMDRlNzUwMWJmODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvVyUFl6iwBpYGdp47gZaxve2yd5xEyjeqX6 bvAi/JzpAKXUIYzDMXqCnfyi4GlYvwZ8ZqWYUadcwGv11ZBE4ZcEuPFa86Csay/k 8aeDvyAMs1sWt5QyaCTlDvQv5oAI6NWzHZsqzb5Byc5xtrGuZFu2uJP6qsHc+m/4 YOA8nZGm6TbbcnD0SeQEq0jNopmS1S7V5qvFdpfygUu0ZcHTU6Aw/QclKzPdHRa3 4C6P9gm+S3dp9AbJXTVip0BCqIlQccA/S5v908fIQaebSAjJe+7Lx3WNx8GLT+EL TO2PUZ3vpXI17odh28sVGSKDmJ172hNaWKup/DoyviF4JWepwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSuN/shZO+7KcfGu9B116etJ40IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmI2YmU4NDItNzE1OS0z ZmZlLThlZDEtMTBhYWI5OGNmZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmS6rHstZqUd6sv0guRmnU00397O8r8NyBs28/uoeds7Cb9J1m+lj4f 0EMFFJAhxrcD4R/9vbOm4Caj2rD6pg5syA+FJzH5C5xZJt4M+emLo7N1AimPno40 D3wG0weeQFKWCwP+yUGFVS7OhrGl3SMh0zsnAMMr5GjuRoFDMTqauA4dxiLcMWgW BbwkF/daiAYAh5Bi5qZfi4IAIhvemX2ZDPHMpUv9Kqi+8dlOQO/yecF3Jm7ySyRJ qmM7r4s8UYwdppI0P4NAS0d/UYDIycyPCD7yiSlkOpk1FRgucDo0aKRDPHIlTTCp Q1FVbwcP00gj3bX8C3uLfWCKmXBhltA= -----END CERTIFICATE-----Generated at Wed Jul 9 13:22:30 2025 by rpki-client