$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa File: 6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa (raw, json) Hash identifier: sW3c0nx1M0vkRNFmkyavx0hucL1kW/eLd5mIP3f0XQ4= Subject key identifier: 5D:FB:5E:D0:05:5B:2A:13:05:CA:8F:D7:B1:49:68:53:23:4C:E9:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CF516379356A186FA53E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.30.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:f5:16:37:93:56:a1:86:fa:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=e9e680a2-4d77-4aec-9433-78d357e9d01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:b8:4d:46:16:5b:89:dd:35:de:9c:a3:fb: d5:e1:a4:87:cc:39:0d:16:79:55:21:2c:d2:3a:2f: c8:87:e6:f8:7c:41:2c:62:79:03:5e:df:12:80:36: 93:6a:c4:b1:58:60:c2:64:69:e3:ee:0f:11:f8:4d: 1e:bf:9d:9c:e0:41:be:85:60:ab:0e:c8:5f:68:4e: 4e:cc:a5:eb:da:27:30:f3:f5:b0:79:fb:ae:8a:b1: 56:74:2b:e8:fc:67:9c:75:ae:18:8e:51:fa:cf:79: a0:4d:32:7d:b2:80:b3:3e:e3:aa:76:78:49:68:ef: 16:0a:c3:59:20:1c:41:32:c0:1e:d6:21:b2:9a:64: b1:26:ed:f0:af:ca:3e:1a:65:12:d9:3f:00:14:74: 56:2a:fd:19:0d:62:54:3d:54:0e:ed:c7:e7:d8:e6: a6:42:fa:f7:83:08:0b:30:1c:98:e6:82:d8:06:18: 57:fb:4e:d4:ba:6d:45:54:d5:ee:92:9f:33:c0:f6: 86:ff:9c:ac:c0:a8:d9:36:7b:aa:69:cd:b1:f3:11: ad:5b:a8:d5:97:b1:77:2b:7f:79:c7:2b:58:9a:c7: 31:93:ff:40:82:cf:d8:13:e2:3a:e9:7a:df:05:26: 7c:69:87:8a:90:75:a4:73:9e:7d:5b:65:94:db:03: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:5E:D0:05:5B:2A:13:05:CA:8F:D7:B1:49:68:53:23:4C:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6435e90f-1d14-3798-8de3-aafd7f7e2f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:cc:80:53:fb:78:cf:e9:b5:e6:0f:91:df:51:39:76:f7:7c: 72:e8:4d:c9:38:e0:51:7e:29:1c:55:33:8b:d7:a2:16:69:23: 3d:41:d4:bc:6a:de:06:43:3b:e4:91:36:37:de:72:79:49:6a: 44:ee:a9:24:85:42:2b:58:a9:28:d4:d2:7b:d4:eb:ad:a5:6a: b6:99:53:12:82:6a:f0:d2:69:8d:17:72:e6:2b:a6:fd:e7:04: c9:cb:b7:94:c8:47:f5:b2:ea:b9:4d:3f:41:38:5b:6e:54:98: ad:2c:99:88:6a:25:4a:5e:20:ec:e6:fc:bb:a8:34:e7:02:0c: a0:ab:f9:87:37:6c:fa:bd:8f:63:c6:1b:66:bc:c3:16:6e:7c: 68:dc:b7:b8:00:5b:03:a9:d5:43:41:db:c6:7e:07:fb:5a:b9: 4d:44:f6:c8:ca:65:d1:be:ce:3e:4a:01:ce:7e:33:da:e7:42: b0:cd:ed:97:02:55:4d:e6:2e:97:d3:08:24:55:d7:a6:df:81: f4:51:5a:14:d3:ab:eb:ee:ef:7e:78:3b:75:91:31:32:f5:a4: 80:2b:d1:53:6d:d0:6d:ff:b2:c1:0a:2a:4d:d3:e8:fd:1f:5a: 9e:1d:23:ad:56:5d:c6:41:55:d2:d7:24:d4:8b:0e:b5:32:56: 2e:b7:f9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXPUWN5NWoYb6U+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZTllNjgwYTItNGQ3Ny00YWVjLTk0MzMtNzhkMzU3ZTlkMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5u4TUYWW4ndNd6co/vV4aSHzDkNFnlVISzS Oi/Ih+b4fEEsYnkDXt8SgDaTasSxWGDCZGnj7g8R+E0ev52c4EG+hWCrDshfaE5O zKXr2icw8/WwefuuirFWdCvo/Gecda4YjlH6z3mgTTJ9soCzPuOqdnhJaO8WCsNZ IBxBMsAe1iGymmSxJu3wr8o+GmUS2T8AFHRWKv0ZDWJUPVQO7cfn2OamQvr3gwgL MByY5oLYBhhX+07Uum1FVNXukp8zwPaG/5yswKjZNnuqac2x8xGtW6jVl7F3K395 xytYmscxk/9Ags/YE+I66XrfBSZ8aYeKkHWkc559W2WU2wN3mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF37XtAFWyoTBcqP17FJaFMjTOlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQzNWU5MGYtMWQxNC0z Nzk4LThkZTMtYWFmZDdmN2UyZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTMgFP7eM/pteYPkd9ROXb3fHLoTck44FF+KRxVM4vXohZpIz1B1Lxq 3gZDO+SRNjfecnlJakTuqSSFQitYqSjU0nvU662laraZUxKCavDSaY0XcuYrpv3n BMnLt5TIR/Wy6rlNP0E4W25UmK0smYhqJUpeIOzm/LuoNOcCDKCr+Yc3bPq9j2PG G2a8wxZufGjct7gAWwOp1UNB28Z+B/tauU1E9sjKZdG+zj5KAc5+M9rnQrDN7ZcC VU3mLpfTCCRV16bfgfRRWhTTq+vu7354O3WRMTL1pIAr0VNt0G3/ssEKKk3T6P0f Wp4dI61WXcZBVdLXJNSLDrUyVi63+fA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:49 2025 by rpki-client