$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa File: 7c01087c-083d-3c5b-872e-09444b7eb99f.roa (raw, json) Hash identifier: CwM+dpv8JHm4J9K+1BpXBcdfp+vC5bJpQqw2cgHn8bo= Subject key identifier: 8B:94:24:E8:27:08:53:B8:AA:B1:88:E7:EC:01:8C:29:B5:B8:D2:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B28C6EC6097D72B4D18ADB980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ec:60:97:d7:2b:4d:18:ad:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=f20d674a-c4f1-4e84-9762-83405ddc677d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:61:58:b6:2b:79:3e:90:3c:72:9a:8c:fe: ae:a6:82:c4:d0:fc:c3:59:66:d1:51:0a:d6:d6:c4: f8:0c:f4:fe:b9:c7:08:c9:54:89:01:45:62:a9:68: 40:bb:4f:02:81:ab:bd:2f:28:e5:31:71:27:05:72: 77:af:3e:86:1e:11:6d:0f:90:8f:d4:5d:ad:dd:f3: 17:02:b0:61:33:0c:3a:0f:53:bf:14:a3:52:d8:3b: 6f:fa:d3:75:94:6f:eb:f9:8e:c8:41:61:35:db:d5: c5:4a:99:1e:7c:3d:a4:72:ac:4e:74:e8:e1:5a:9a: 8c:42:1f:83:2e:41:ac:77:1f:d5:5c:8b:95:25:3b: 4f:ed:45:d9:d4:b8:1a:a6:4b:07:3e:42:80:c3:38: 31:4f:44:1d:f5:d2:7e:08:b7:bc:03:5e:3d:21:d2: d7:e1:d2:63:a9:23:50:a4:2f:8c:b3:f5:ac:8b:d0: d3:ff:09:04:4b:f2:e1:31:dc:ab:d6:6c:8a:a0:dd: 33:6a:ca:47:e1:9d:01:54:7b:a7:d3:c5:71:43:14: 47:59:a9:cd:db:06:c5:a9:f7:0b:42:6e:f9:f4:a2: d8:3e:5e:b4:b3:81:5b:30:9d:06:1a:36:ce:fd:bf: 78:0d:ae:19:87:73:70:f4:3d:c3:0d:e6:c1:98:13: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:94:24:E8:27:08:53:B8:AA:B1:88:E7:EC:01:8C:29:B5:B8:D2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c01087c-083d-3c5b-872e-09444b7eb99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:95:24:a0:97:e4:85:8b:54:35:45:46:67:b8:42:b1:aa:42: 29:6e:be:d8:07:2e:04:66:a8:77:02:d2:fe:bc:e1:ab:b6:49: 9c:96:f7:33:0e:cc:e7:8f:ba:d1:56:1b:2b:96:8d:8d:57:08: 67:4c:cb:81:43:60:77:4a:bf:7e:0c:99:77:dc:45:87:63:89: b9:72:ea:fc:40:40:2d:15:ac:c1:4f:bc:6e:1c:4d:6a:90:bc: 1f:00:43:0a:64:af:d8:2b:a1:b4:f0:0e:48:9f:b6:71:a6:8d: 52:dd:d3:a2:59:8b:67:a7:38:74:dc:95:62:a9:6d:a9:0c:db: 41:36:9d:23:94:22:f7:e6:60:23:dd:e8:db:53:d7:0c:02:1a: 02:40:78:a2:20:a0:cf:3a:f5:50:27:13:20:89:1a:af:6d:21: c7:a6:da:1f:1d:a4:f5:49:8c:5c:b1:42:27:cf:91:2a:b5:d7: cb:84:a7:d7:b5:70:46:a0:95:4a:06:61:64:07:3d:5a:b7:51: 96:d8:ac:36:9c:b2:92:5a:2c:52:32:b1:50:f0:8e:36:d9:93: 85:dd:cb:45:e5:fc:6a:bb:ff:8b:93:70:bb:0e:c3:4d:a6:ff: 3e:02:49:f4:61:b0:f2:20:08:32:88:a8:62:f1:e0:8b:26:ae: fe:0b:6c:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuxgl9crTRituYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjIwZDY3NGEtYzRmMS00ZTg0LTk3NjItODM0MDVkZGM2NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8thWLYreT6QPHKajP6upoLE0PzDWWbRUQrW 1sT4DPT+uccIyVSJAUViqWhAu08Cgau9LyjlMXEnBXJ3rz6GHhFtD5CP1F2t3fMX ArBhMww6D1O/FKNS2Dtv+tN1lG/r+Y7IQWE129XFSpkefD2kcqxOdOjhWpqMQh+D LkGsdx/VXIuVJTtP7UXZ1LgapksHPkKAwzgxT0Qd9dJ+CLe8A149IdLX4dJjqSNQ pC+Ms/Wsi9DT/wkES/LhMdyr1myKoN0zaspH4Z0BVHun08VxQxRHWanN2wbFqfcL Qm759KLYPl60s4FbMJ0GGjbO/b94Da4Zh3Nw9D3DDebBmBPMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuUJOgnCFO4qrGI5+wBjCm1uNKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2MwMTA4N2MtMDgzZC0z YzViLTg3MmUtMDk0NDRiN2ViOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOVJKCX5IWLVDVFRme4QrGqQiluvtgHLgRmqHcC0v684au2SZyW9zMO zOePutFWGyuWjY1XCGdMy4FDYHdKv34MmXfcRYdjibly6vxAQC0VrMFPvG4cTWqQ vB8AQwpkr9grobTwDkiftnGmjVLd06JZi2enOHTclWKpbakM20E2nSOUIvfmYCPd 6NtT1wwCGgJAeKIgoM869VAnEyCJGq9tIcem2h8dpPVJjFyxQifPkSq118uEp9e1 cEaglUoGYWQHPVq3UZbYrDacspJaLFIysVDwjjbZk4Xdy0Xl/Gq7/4uTcLsOw02m /z4CSfRhsPIgCDKIqGLx4Ismrv4LbIM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:29 2025 by rpki-client