$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa File: 88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa (raw, json) Hash identifier: WZnP3n3CFOF9LsvvrQd0Vxp/8sg4Q134KVS6GbAZ5iQ= Subject key identifier: 92:ED:0E:46:74:C7:FB:3F:9B:3A:86:9F:7B:16:19:A0:5E:CB:69:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94421DC17A6D7FD935986E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1d:c1:7a:6d:7f:d9:35:98:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=5844be72-4e7f-4329-bbd3-02eb431404c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:9f:4e:37:bb:7b:b9:27:2d:dd:36:5e:29:d0: c2:9b:ba:36:f3:fa:da:b5:59:1d:b0:bb:81:c7:56: ca:e7:c7:c2:d4:3a:52:09:de:c0:7c:5f:a7:d7:11: 1e:06:fa:14:9f:3b:f0:e3:2a:16:85:ea:4b:a1:38: 4f:d5:29:04:c4:d7:ad:c9:c2:9f:06:ea:91:79:bf: ce:c7:03:30:82:c5:30:da:fb:ba:cb:fc:fb:10:a0: 47:90:d4:63:f9:d3:3d:b5:47:73:82:3d:b0:f6:52: 8f:bb:6d:79:8c:4b:c2:10:cf:93:2e:56:aa:26:39: e3:0a:c1:7d:df:7b:a8:22:5e:5a:f8:c5:ca:a2:41: 0f:a1:36:79:b4:6e:96:f5:ab:2d:d6:df:13:02:c7: 34:91:ba:96:75:0c:76:de:52:06:4f:90:bb:82:d9: 43:db:a9:91:24:27:b1:31:31:f0:b1:a9:43:be:3b: a9:89:b9:e0:69:4e:eb:1a:e1:83:85:50:c3:b5:54: b2:dc:b5:35:9a:d5:30:54:ff:e5:75:7a:d0:12:e1: f0:47:e0:c7:d0:1b:7a:09:78:cb:56:9a:3f:ad:89: b5:4c:96:01:68:a6:14:7c:04:41:9c:86:03:36:02: 3b:7c:31:0c:c0:c9:bf:72:95:2b:37:e0:5f:8a:ff: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:0E:46:74:C7:FB:3F:9B:3A:86:9F:7B:16:19:A0:5E:CB:69:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88c3c23b-8422-30f0-a806-c7f1213f6ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:18:24:9b:f3:05:c8:8e:0d:1d:ab:6e:6a:83:e4:55:7b:03: 4a:5e:3e:f2:2b:51:bd:8f:c0:7a:52:c4:a2:85:10:cf:df:85: 3c:7e:41:2b:2a:fa:02:3c:7b:11:1a:d4:78:65:25:02:bf:78: de:5a:44:bf:d5:40:16:6c:c3:71:51:ed:0a:ad:d6:eb:b0:40: e2:ac:74:fe:2b:98:0f:11:b3:a2:e7:d0:a2:e0:d6:27:f7:5e: c1:5f:9a:8a:a6:d8:92:4a:8e:1b:79:72:08:9f:a8:19:f5:6e: b8:28:74:26:27:3c:80:d3:0a:3d:aa:ef:8f:e1:0c:d2:38:be: 52:ed:be:98:ee:86:66:7f:b2:55:d9:dc:0f:51:3c:19:3e:31: 94:20:c2:57:0e:e4:49:42:8d:02:1d:92:f1:a4:f3:42:ac:9c: 1a:9a:c7:d6:47:47:f6:7f:ba:1a:ef:17:c9:9e:c9:72:b0:4f: 69:9f:e8:93:88:7c:b4:87:78:a4:33:2d:9a:06:18:b1:7e:d3: 72:3e:25:b0:81:24:37:cf:c7:45:33:64:6e:f8:1f:b6:63:bf: bc:6d:c9:ae:ad:b7:40:9a:48:30:57:af:c6:02:28:e8:e9:d8: 21:32:21:a7:1e:38:92:73:ea:a9:16:cb:e9:12:f5:c5:2d:ad: c1:59:0b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh3Bem1/2TWYbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NTg0NGJlNzItNGU3Zi00MzI5LWJiZDMtMDJlYjQzMTQwNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Z9ON7t7uSct3TZeKdDCm7o28/ratVkdsLuB x1bK58fC1DpSCd7AfF+n1xEeBvoUnzvw4yoWhepLoThP1SkExNetycKfBuqReb/O xwMwgsUw2vu6y/z7EKBHkNRj+dM9tUdzgj2w9lKPu215jEvCEM+TLlaqJjnjCsF9 33uoIl5a+MXKokEPoTZ5tG6W9ast1t8TAsc0kbqWdQx23lIGT5C7gtlD26mRJCex MTHwsalDvjupibngaU7rGuGDhVDDtVSy3LU1mtUwVP/ldXrQEuHwR+DH0Bt6CXjL Vpo/rYm1TJYBaKYUfARBnIYDNgI7fDEMwMm/cpUrN+Bfiv+dTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLtDkZ0x/s/mzqGn3sWGaBey2nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODhjM2MyM2ItODQyMi0z MGYwLWE4MDYtYzdmMTIxM2Y2ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsYJJvzBciODR2rbmqD5FV7A0pePvIrUb2PwHpSxKKFEM/fhTx+QSsq +gI8exEa1HhlJQK/eN5aRL/VQBZsw3FR7Qqt1uuwQOKsdP4rmA8Rs6Ln0KLg1if3 XsFfmoqm2JJKjht5cgifqBn1brgodCYnPIDTCj2q74/hDNI4vlLtvpjuhmZ/slXZ 3A9RPBk+MZQgwlcO5ElCjQIdkvGk80KsnBqax9ZHR/Z/uhrvF8meyXKwT2mf6JOI fLSHeKQzLZoGGLF+03I+JbCBJDfPx0UzZG74H7Zjv7xtya6tt0CaSDBXr8YCKOjp 2CEyIaceOJJz6qkWy+kS9cUtrcFZC74= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:32 2025 by rpki-client