$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa File: 9313b4ea-b173-3272-af62-f83f52fcc22f.roa (raw, json) Hash identifier: QbXoTZw2J6sphj6nX58pliD0AG0ifdIVokepp60sXOg= Subject key identifier: 0E:6F:F6:6F:F4:6B:22:36:B1:9A:CD:41:4C:66:C8:BB:04:DD:90:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B7F525D7A93FCE1D88A49FC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.29.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5d:7a:93:fc:e1:d8:8a:49:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=05941de6-e2f5-4dab-ba8e-eacc8947ddd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:91:1b:ca:c3:e1:2d:93:cc:cb:7b:9b:42: 71:c5:8d:2c:03:44:4e:84:99:ce:a7:d5:04:d3:0e: 0b:61:a3:5f:1d:90:4e:bd:a6:de:23:01:81:b1:d5: 50:f9:c9:ca:60:7c:a6:ec:4c:41:57:e7:83:e2:30: 3d:86:bc:a8:bd:23:0c:4a:ba:0a:e9:0c:f0:76:0f: 28:03:d7:87:8d:aa:19:8b:13:72:02:b7:c6:7b:5a: ef:18:3b:a6:d3:60:d9:79:00:50:ff:f9:23:7b:17: 1c:04:6d:73:d6:20:1c:56:41:b4:6a:46:27:d5:27: 5e:52:61:3f:e8:2b:fb:11:94:a8:79:17:e4:b0:d2: 7d:ac:c5:c9:6f:bd:cc:f0:9a:25:17:6f:20:1c:94: f2:1a:99:d0:63:d0:2b:f9:e5:57:02:54:d9:ca:6a: cf:40:81:cc:82:db:46:ad:d9:34:f1:6a:aa:57:6f: 55:47:b1:23:fa:68:5a:54:bc:98:f9:f4:43:3d:be: df:8c:ed:d4:01:cb:21:0d:6d:86:7a:44:8e:13:ce: 7a:d2:10:2d:2e:9d:cf:85:d2:68:be:45:22:b2:5b: ab:ad:7a:f8:34:c3:4c:98:5f:91:2c:db:dc:b8:da: 12:33:73:58:2f:82:a3:c3:a2:35:da:fb:d2:cb:a6: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6F:F6:6F:F4:6B:22:36:B1:9A:CD:41:4C:66:C8:BB:04:DD:90:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9313b4ea-b173-3272-af62-f83f52fcc22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f0:c1:7e:d9:bc:a6:a1:0e:ba:38:ac:d6:29:d8:e3:2c:42: 7d:ce:5c:2c:fc:9b:30:3e:d6:95:f1:d8:c9:b3:14:1b:59:70: 31:11:7c:29:40:51:4a:28:83:23:c6:b1:74:e6:95:86:e4:05: cc:0d:db:17:c7:9a:2b:30:46:66:37:ec:9f:55:66:ca:65:49: 2f:49:67:96:c3:d3:a5:c3:77:10:35:37:86:d8:fd:b2:a1:b1: ba:a6:20:86:5b:91:6b:5a:50:15:07:41:16:b2:d0:37:59:f9: 44:e4:0e:48:34:63:a2:87:81:f0:7e:9b:59:94:47:46:6d:56: c0:e3:14:da:ec:92:2f:55:a6:2e:a3:98:0b:97:96:3d:8d:d3: 5b:f9:6a:e4:67:58:11:2a:50:79:c1:48:77:28:e6:c6:cd:c2: 72:3b:b3:83:4c:97:eb:4f:bc:e5:a3:47:95:17:da:2c:e0:a2: df:23:e5:89:a5:9b:7e:4a:9e:64:4c:06:93:11:66:a0:86:79: b0:e3:76:0f:ff:3d:fd:48:74:3d:2a:07:cb:7d:74:61:df:3d: 1f:f9:40:85:b3:0b:18:86:b9:5c:ca:2d:a5:cf:69:a6:9f:a9: f7:db:9d:0f:c1:d3:1d:2e:1a:aa:76:2c:58:01:17:05:5c:bc: 04:e9:fd:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ul16k/zh2IpJ/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MDU5NDFkZTYtZTJmNS00ZGFiLWJhOGUtZWFjYzg5NDdkZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr2RG8rD4S2TzMt7m0JxxY0sA0ROhJnOp9UE 0w4LYaNfHZBOvabeIwGBsdVQ+cnKYHym7ExBV+eD4jA9hryovSMMSroK6Qzwdg8o A9eHjaoZixNyArfGe1rvGDum02DZeQBQ//kjexccBG1z1iAcVkG0akYn1SdeUmE/ 6Cv7EZSoeRfksNJ9rMXJb73M8JolF28gHJTyGpnQY9Ar+eVXAlTZymrPQIHMgttG rdk08WqqV29VR7Ej+mhaVLyY+fRDPb7fjO3UAcshDW2GekSOE8560hAtLp3PhdJo vkUislurrXr4NMNMmF+RLNvcuNoSM3NYL4Kjw6I12vvSy6bulwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5v9m/0ayI2sZrNQUxmyLsE3ZCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxM2I0ZWEtYjE3My0z MjcyLWFmNjItZjgzZjUyZmNjMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfwwX7ZvKahDro4rNYp2OMsQn3OXCz8mzA+1pXx2MmzFBtZcDERfClA UUoogyPGsXTmlYbkBcwN2xfHmiswRmY37J9VZsplSS9JZ5bD06XDdxA1N4bY/bKh sbqmIIZbkWtaUBUHQRay0DdZ+UTkDkg0Y6KHgfB+m1mUR0ZtVsDjFNrski9Vpi6j mAuXlj2N01v5auRnWBEqUHnBSHco5sbNwnI7s4NMl+tPvOWjR5UX2izgot8j5Yml m35KnmRMBpMRZqCGebDjdg//Pf1IdD0qB8t9dGHfPR/5QIWzCxiGuVzKLaXPaaaf qffbnQ/B0x0uGqp2LFgBFwVcvATp/aM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:06 2025 by rpki-client