$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa File: 68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa (raw, json) Hash identifier: 7NSpUcfoygXgMK1WypyisGJdXOEMdov5XFuzRZHH48U= Subject key identifier: EE:4A:DC:4D:87:2D:99:0F:03:DB:D4:46:15:B7:7A:64:2C:D2:2D:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD8870F0F6C5EC43162E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:88:70:f0:f6:c5:ec:43:16:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=e273495c-9327-4dad-9d35-cdef88028c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:7f:24:2d:ac:85:7b:b4:a3:5c:02:67:77: 1e:97:6d:9f:89:e2:54:5e:67:99:e2:a6:b7:e5:5e: 76:6a:f1:42:74:bf:71:f8:7b:b3:69:94:10:e7:34: 66:68:ab:d0:a8:fc:ea:3e:06:8f:35:ae:40:ab:c2: b4:47:d2:87:52:d8:71:39:98:0a:ac:2c:d1:4b:a8: fb:cc:ea:7b:9b:6b:30:f8:90:25:44:32:7d:1b:21: da:16:44:d2:50:35:63:b8:49:f2:66:83:59:22:49: e6:c5:50:57:3b:af:ee:49:ee:35:34:86:ae:f2:56: 00:cc:a5:20:f9:00:89:5d:eb:9a:b6:2b:7e:68:fe: 58:7d:01:bb:a6:d0:61:0d:be:a2:de:6d:a6:10:7b: 3a:8c:18:dd:64:04:38:52:d5:ce:72:d1:22:19:45: 16:e5:04:46:84:54:93:10:f6:c6:54:ff:16:7d:56: 70:a8:5f:5d:f0:17:d7:09:2f:ae:d0:21:db:64:a9: e2:fa:37:3f:66:60:de:b1:3e:90:66:13:7f:e1:2d: c4:b8:9d:2e:2b:aa:5d:d4:ce:0a:98:f1:64:ba:6d: 6e:3b:c1:f3:c8:17:2f:1d:d3:a6:10:57:4d:69:d0: 58:32:74:56:af:bc:7e:b4:5f:7e:f5:62:7b:39:7a: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4A:DC:4D:87:2D:99:0F:03:DB:D4:46:15:B7:7A:64:2C:D2:2D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:dd:38:b1:43:cf:a1:10:cc:45:af:9a:e9:a3:f4:e4:1d:2d: f6:55:8d:b0:42:54:f5:38:b8:6c:82:6b:33:52:e4:ce:f7:4f: 8c:80:50:b8:b4:a5:e7:d2:60:a9:70:2e:79:18:93:ce:32:bc: de:9d:46:a8:46:d9:31:56:e2:f1:c3:05:00:d5:ba:c3:6a:99: 6f:43:c1:bd:d6:bf:3e:21:73:aa:b1:26:8b:08:5c:82:06:b8: ba:9f:22:e3:fa:59:9c:76:6a:76:73:13:ad:42:aa:fc:ea:4f: 2a:b7:02:25:74:59:ae:aa:c0:4d:65:8d:3f:c5:dc:0d:dd:75: 08:d2:e9:f4:41:f5:e4:5b:72:40:2d:1c:5b:96:fe:2a:26:9b: 7f:0f:74:d7:54:03:da:b2:b1:4e:50:67:a8:3c:85:55:ee:20: ea:56:ba:ec:6e:31:34:26:93:91:6d:9f:9e:30:f3:97:99:2e: 21:f4:9c:3b:74:d5:b2:a5:4a:c2:e6:06:e1:8d:27:2e:f6:5c: ac:ba:85:8e:56:f2:31:65:1c:63:54:f4:94:a7:8c:05:82:09: c6:47:17:ea:9d:a2:01:41:00:39:af:89:04:16:d9:5d:81:4c: e1:c3:b8:84:db:0a:6f:0c:9c:86:f9:4d:c8:ce:86:09:61:3e: 7e:6d:fe:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Yhw8PbF7EMWLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTI3MzQ5NWMtOTMyNy00ZGFkLTlkMzUtY2RlZjg4MDI4YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YB/JC2shXu0o1wCZ3cel22fieJUXmeZ4qa3 5V52avFCdL9x+HuzaZQQ5zRmaKvQqPzqPgaPNa5Aq8K0R9KHUthxOZgKrCzRS6j7 zOp7m2sw+JAlRDJ9GyHaFkTSUDVjuEnyZoNZIknmxVBXO6/uSe41NIau8lYAzKUg +QCJXeuatit+aP5YfQG7ptBhDb6i3m2mEHs6jBjdZAQ4UtXOctEiGUUW5QRGhFST EPbGVP8WfVZwqF9d8BfXCS+u0CHbZKni+jc/ZmDesT6QZhN/4S3EuJ0uK6pd1M4K mPFkum1uO8HzyBcvHdOmEFdNadBYMnRWr7x+tF9+9WJ7OXrvBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5K3E2HLZkPA9vURhW3emQs0i0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg4NTBjMTUtYWE1Ni0z ZWNkLWJhOGQtMDdlNGY2OWZjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzdOLFDz6EQzEWvmumj9OQdLfZVjbBCVPU4uGyCazNS5M73T4yAULi0 pefSYKlwLnkYk84yvN6dRqhG2TFW4vHDBQDVusNqmW9Dwb3Wvz4hc6qxJosIXIIG uLqfIuP6WZx2anZzE61CqvzqTyq3AiV0Wa6qwE1ljT/F3A3ddQjS6fRB9eRbckAt HFuW/iomm38PdNdUA9qysU5QZ6g8hVXuIOpWuuxuMTQmk5Ftn54w85eZLiH0nDt0 1bKlSsLmBuGNJy72XKy6hY5W8jFlHGNU9JSnjAWCCcZHF+qdogFBADmviQQW2V2B TOHDuITbCm8MnIb5TcjOhglhPn5t/gU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:39 2025 by rpki-client