$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa File: 4cde9440-2e2e-3453-bb86-60dbbef890f0.roa (raw, json) Hash identifier: SEM75dmhLfGoVy2vXxlMJvz8NFx36bR33nX/bo1zOyM= Subject key identifier: B9:73:47:92:A4:4D:D0:B9:BE:25:1A:39:A8:0F:21:31:2D:A6:01:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B821D80CBAA222E7F53120000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 7029 IP address blocks: 71.30.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:80:cb:aa:22:2e:7f:53:12:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=17e375d4-b92a-42c8-98f2-1ccfde2fe912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:bd:dc:a2:a4:da:00:7e:ca:b4:1a:51:ee: 64:5b:57:13:5a:6d:59:9a:f5:3b:53:34:7d:90:08: 1e:4a:af:c7:fa:c6:48:6c:9f:ce:6e:05:d4:c6:ac: 74:8d:b9:ed:90:04:57:f9:6c:e3:e6:cb:dd:62:5f: 02:ae:89:0a:5f:58:39:eb:73:06:c4:bf:04:1b:b2: 86:fb:96:ff:ed:d1:ee:8a:e4:67:d0:ef:c8:08:1f: 6d:b7:1b:07:69:bc:56:e7:8b:c5:70:af:b2:9b:f9: 0f:a1:1c:92:01:b9:49:4c:04:d8:d2:72:09:44:ab: 37:b8:d7:50:4c:74:1d:a3:8b:16:5e:9f:2c:ce:10: 3a:7e:2b:1f:8a:73:f0:39:03:cb:fa:d4:70:a1:ba: 68:47:a0:6d:f9:1e:48:be:bd:f7:ec:6f:7b:09:00: c7:bc:99:91:80:82:66:39:e3:8a:a1:78:01:ee:9b: 70:b0:dd:30:b3:ea:4a:7b:02:39:67:f3:a7:76:96: 56:10:bb:1c:ed:92:2c:de:46:14:d7:d6:7c:d0:4b: 10:c6:52:ec:25:7d:f3:b7:4e:64:e0:9e:f5:1c:f2: 12:b9:6f:c0:e1:c6:60:6a:48:56:91:23:24:97:ff: 07:6c:c6:43:2c:95:af:8e:13:89:b0:67:cb:eb:8e: 79:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:47:92:A4:4D:D0:B9:BE:25:1A:39:A8:0F:21:31:2D:A6:01:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4cde9440-2e2e-3453-bb86-60dbbef890f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:5e:aa:d5:2b:e4:13:6e:4c:f7:be:d2:24:fd:f7:f3:1c:19: 17:8b:f0:df:af:18:b9:65:33:b3:21:7b:19:b8:10:c4:fc:cb: 1c:93:6c:e7:93:44:39:2c:82:22:3e:95:6e:20:e6:3e:51:42: 69:de:20:33:7e:56:0d:69:99:1a:73:2a:fc:41:ee:64:6b:a5: 2f:b8:1c:50:ec:57:d4:91:ee:f1:e5:31:3b:af:68:37:c9:35: 47:bc:dd:a8:3e:60:8b:90:d5:4d:84:cc:33:77:73:b0:a8:67: 90:b2:91:24:e0:c3:3b:e1:53:49:9a:db:7f:66:f6:3f:87:19: 8f:53:9f:0d:7c:7b:61:07:b8:62:3b:a9:70:3b:55:e2:f0:f6: 7c:3e:aa:73:bf:60:a4:6e:ec:1d:65:b0:7b:bc:ae:39:13:fb: 30:ff:d9:c6:08:bc:0f:48:72:a2:81:c3:29:4b:61:17:d9:25: 44:0e:64:a9:aa:39:15:66:5a:f1:3a:15:c5:e4:3f:d2:37:f3: 99:bb:99:3c:e1:1f:17:63:3f:51:f4:98:a8:3a:2a:89:b2:fb: 76:84:c5:95:69:fd:7b:bf:56:b5:50:3f:35:41:e0:a4:00:e3: f7:96:dc:69:5b:75:be:06:b1:60:29:2a:cf:cd:26:90:71:14: 93:6d:66:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYDLqiIuf1MSAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MTdlMzc1ZDQtYjkyYS00MmM4LTk4ZjItMWNjZmRlMmZlOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNS93KKk2gB+yrQaUe5kW1cTWm1ZmvU7UzR9 kAgeSq/H+sZIbJ/ObgXUxqx0jbntkARX+Wzj5svdYl8CrokKX1g563MGxL8EG7KG +5b/7dHuiuRn0O/ICB9ttxsHabxW54vFcK+ym/kPoRySAblJTATY0nIJRKs3uNdQ THQdo4sWXp8szhA6fisfinPwOQPL+tRwobpoR6Bt+R5Ivr337G97CQDHvJmRgIJm OeOKoXgB7ptwsN0ws+pKewI5Z/OndpZWELsc7ZIs3kYU19Z80EsQxlLsJX3zt05k 4J71HPISuW/A4cZgakhWkSMkl/8HbMZDLJWvjhOJsGfL6455hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlzR5KkTdC5viUaOagPITEtpgE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGNkZTk0NDAtMmUyZS0z NDUzLWJiODYtNjBkYmJlZjg5MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABheqtUr5BNuTPe+0iT99/McGReL8N+vGLllM7Mhexm4EMT8yxyTbOeT RDksgiI+lW4g5j5RQmneIDN+Vg1pmRpzKvxB7mRrpS+4HFDsV9SR7vHlMTuvaDfJ NUe83ag+YIuQ1U2EzDN3c7CoZ5CykSTgwzvhU0ma239m9j+HGY9Tnw18e2EHuGI7 qXA7VeLw9nw+qnO/YKRu7B1lsHu8rjkT+zD/2cYIvA9IcqKBwylLYRfZJUQOZKmq ORVmWvE6FcXkP9I385m7mTzhHxdjP1H0mKg6Komy+3aExZVp/Xu/VrVQPzVB4KQA 4/eW3Glbdb4GsWApKs/NJpBxFJNtZl8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:58 2025 by rpki-client