$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa File: 64b768fa-4325-324b-9c0e-4df1bbbb2738.roa (raw, json) Hash identifier: S9pEg1Us5O5re5rkoOYkOKF2y5I64bOcYIKz3fOZn3s= Subject key identifier: F4:69:6D:1C:1F:DE:52:1B:FD:57:A7:7C:FD:D4:36:F0:BC:ED:17:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD88EC84064EF5624CBE68 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:88:ec:84:06:4e:f5:62:4c:be:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=0f5cbed9-a79b-42b4-aa24-1e74c529e78c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:43:12:48:d2:6b:ef:62:f5:87:b3:38:13: 08:52:54:b1:5d:73:dc:03:64:ae:aa:e9:63:1d:33: 8b:a3:7c:2a:a7:62:6a:14:df:47:03:9a:e6:4d:4f: 44:f5:de:f3:db:09:bf:4c:3f:17:dc:78:15:68:40: e0:9f:a8:3f:bc:e0:74:3f:20:0c:da:cf:b0:5d:54: 54:e4:19:39:12:63:b1:48:66:62:42:73:22:bd:89: 36:cb:52:3a:5b:14:9c:72:7f:74:46:ba:13:95:34: cf:1b:0d:1f:2f:b0:49:59:ae:27:e1:e1:1c:a2:c0: fa:a3:4e:b2:b5:17:77:63:84:6b:08:77:98:34:d5: 56:6d:17:f0:b7:a1:89:18:43:01:d9:00:c7:60:84: b7:bf:75:34:7f:fa:96:ea:ab:a4:ac:8b:25:67:65: cb:a1:73:9d:dd:47:dd:70:ad:e2:57:00:26:77:ea: dc:8a:ca:8a:c3:dc:46:f6:b9:0f:72:b7:9a:7e:04: 99:b9:82:bd:20:5c:1d:88:3f:a9:42:ed:c3:4a:42: 9a:19:0c:1c:65:bd:5c:00:00:d2:f5:e6:15:8b:db: a7:0c:ed:bf:18:e9:32:ed:3f:67:d2:29:f4:80:f7: 73:bc:f0:0d:ab:5b:2d:5e:33:0c:24:61:79:5a:52: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:69:6D:1C:1F:DE:52:1B:FD:57:A7:7C:FD:D4:36:F0:BC:ED:17:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64b768fa-4325-324b-9c0e-4df1bbbb2738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ee:50:dd:be:2d:70:ec:75:45:3c:f9:52:6e:4d:91:3d:20: 26:45:cd:4d:0c:3a:c9:31:65:2a:77:c0:7b:80:b0:df:76:f0: 5e:57:96:08:39:8c:f9:78:38:4f:f4:55:68:d3:0e:59:ca:cf: a8:3b:63:cb:e8:37:23:ab:dd:03:5a:c9:d2:6a:58:d8:6c:58: f1:d5:c3:08:7c:a3:a1:49:e1:dc:ee:48:03:35:99:b9:2d:41: 4a:5d:2c:9e:2b:8c:dd:0a:5d:04:c2:81:1c:c6:82:bb:b9:93: e2:b1:a4:bc:05:55:a8:ae:19:2a:17:86:d1:1e:79:72:e9:32: 59:0a:99:7a:a2:e5:08:d7:90:b3:82:9f:7e:ae:41:b1:97:42: 36:ff:8f:3e:e7:82:13:be:8d:75:b5:be:ef:f7:75:1f:b9:d5: 1c:df:48:af:8c:cd:18:0c:59:3f:5b:8d:e2:1a:17:7a:c6:f4: 11:84:e6:4d:ea:de:e3:9a:9d:ed:80:b3:a4:3f:5a:28:99:c4: ca:da:e4:70:15:82:36:d1:b4:f3:bd:5d:4b:4e:8e:30:87:9e: ea:b9:22:fd:bd:4e:ac:85:73:44:63:28:67:04:76:6d:1f:a4: 91:5f:aa:e5:14:c7:41:e6:36:6e:70:9d:a3:4e:f8:c0:b4:96: 94:8b:5d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YjshAZO9WJMvmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MGY1Y2JlZDktYTc5Yi00MmI0LWFhMjQtMWU3NGM1MjllNzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW5DEkjSa+9i9YezOBMIUlSxXXPcA2Suqulj HTOLo3wqp2JqFN9HA5rmTU9E9d7z2wm/TD8X3HgVaEDgn6g/vOB0PyAM2s+wXVRU 5Bk5EmOxSGZiQnMivYk2y1I6WxSccn90RroTlTTPGw0fL7BJWa4n4eEcosD6o06y tRd3Y4RrCHeYNNVWbRfwt6GJGEMB2QDHYIS3v3U0f/qW6qukrIslZ2XLoXOd3Ufd cK3iVwAmd+rcisqKw9xG9rkPcreafgSZuYK9IFwdiD+pQu3DSkKaGQwcZb1cAADS 9eYVi9unDO2/GOky7T9n0in0gPdzvPANq1stXjMMJGF5WlIhWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRpbRwf3lIb/VenfP3UNvC87RcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRiNzY4ZmEtNDMyNS0z MjRiLTljMGUtNGRmMWJiYmIyNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7uUN2+LXDsdUU8+VJuTZE9ICZFzU0MOskxZSp3wHuAsN928F5Xlgg5 jPl4OE/0VWjTDlnKz6g7Y8voNyOr3QNaydJqWNhsWPHVwwh8o6FJ4dzuSAM1mbkt QUpdLJ4rjN0KXQTCgRzGgru5k+KxpLwFVaiuGSoXhtEeeXLpMlkKmXqi5QjXkLOC n36uQbGXQjb/jz7nghO+jXW1vu/3dR+51RzfSK+MzRgMWT9bjeIaF3rG9BGE5k3q 3uOane2As6Q/WiiZxMra5HAVgjbRtPO9XUtOjjCHnuq5Iv29TqyFc0RjKGcEdm0f pJFfquUUx0HmNm5wnaNO+MC0lpSLXTY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:47:20 2025 by rpki-client