$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa File: d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa (raw, json) Hash identifier: srtWZDQA0/CzYJBz+P5WORMjOkYnLb6Tsmza4fMFgE0= Subject key identifier: F7:CC:9F:2F:E7:FD:37:D9:07:1B:DF:E5:95:49:2A:BF:C6:19:55:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD898B62F3953767A09480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.30.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:89:8b:62:f3:95:37:67:a0:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9c2ffaab-6ab1-4073-b3cc-55c2f29a4536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:47:00:4e:5f:53:a4:4e:f6:30:f1:91:d5: 22:ad:6d:73:bf:60:d6:c6:70:6a:f4:0d:d7:03:a7: bf:d4:34:6d:a8:4b:01:aa:1d:a0:dd:6a:f6:83:d1: 21:b1:35:3a:a7:8d:76:7d:ea:9f:d0:11:3c:c2:ee: 1c:51:eb:54:63:3a:ba:09:5f:08:01:17:e7:24:cd: f1:e7:01:48:40:b2:91:fd:9e:ed:31:9d:3a:fd:58: 4b:ec:dc:0e:f2:73:4c:82:af:e7:6b:a1:cd:e5:c8: 80:a5:b1:1a:97:db:60:cb:59:02:8b:49:36:00:37: b0:98:b6:00:63:e3:dc:2a:5f:5e:97:47:cc:c1:84: 7a:9b:9d:e7:fe:48:ff:e3:56:d1:e9:90:d9:75:b0: f2:4d:12:9f:9d:75:0d:f1:6b:b8:a1:ec:c5:ba:58: a6:3e:02:7e:1d:d1:ab:25:d8:aa:2a:4a:a7:38:2b: e4:af:26:46:cf:ea:56:a3:5b:8e:4b:55:5b:ac:7e: 85:4e:0d:65:b0:ac:51:e6:57:b4:8b:67:4a:d5:b3: a1:81:4e:98:c4:75:c2:0d:7f:cd:8b:08:09:9f:6f: 1e:d6:71:93:55:77:24:c6:7a:3a:a9:58:6a:e1:7d: fd:72:c2:9b:05:10:95:8b:fb:20:33:1d:c0:a2:a5: e2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CC:9F:2F:E7:FD:37:D9:07:1B:DF:E5:95:49:2A:BF:C6:19:55:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4cea825-f022-3b4e-a082-1a1c88bc1c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c0:3a:65:72:4d:92:20:6f:ca:d8:c9:76:42:f9:df:e3:ea: 0b:5c:9c:2e:95:61:7f:42:86:77:a4:13:c2:c1:4d:be:2b:e2: e8:9f:5e:ad:75:bb:81:15:ed:01:2b:3b:7e:9c:d8:2d:aa:43: 2f:b5:b0:71:bc:e6:9d:32:cc:b0:8b:b3:e2:0d:2b:25:99:fb: 27:be:55:b6:f4:87:42:73:a4:a6:6d:58:67:97:d7:c2:eb:f6: 3e:a8:91:f1:4b:d0:a8:83:42:c6:29:18:c4:d0:8a:18:38:d3: ae:d0:16:d2:29:66:83:80:ce:9c:db:51:bc:de:bf:fd:ec:b8: 0b:b7:fa:9b:04:62:69:07:59:e0:75:2b:33:5b:59:2b:06:56: 7d:f9:e3:6d:c7:98:fa:56:75:8a:5a:2d:df:3d:22:5c:20:0a: 25:1f:f4:40:b6:70:d2:06:46:e2:9c:46:d6:33:1d:ab:5f:6a: 19:2b:67:f7:05:cb:f2:f7:6a:71:67:61:12:10:42:28:3a:d9: 24:80:c0:8c:44:b3:bd:07:34:86:7f:3c:4f:0f:fa:c0:a3:45: 06:bb:c4:31:0b:20:fa:d3:61:5c:a2:06:b2:2e:8b:4b:e6:2c: a0:40:ef:84:a3:dc:24:3e:65:a2:ad:a2:3a:2e:be:fc:ce:f4: ab:bd:f6:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YmLYvOVN2eglIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWMyZmZhYWItNmFiMS00MDczLWIzY2MtNTVjMmYyOWE0NTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg9HAE5fU6RO9jDxkdUirW1zv2DWxnBq9A3X A6e/1DRtqEsBqh2g3Wr2g9EhsTU6p412feqf0BE8wu4cUetUYzq6CV8IARfnJM3x 5wFIQLKR/Z7tMZ06/VhL7NwO8nNMgq/na6HN5ciApbEal9tgy1kCi0k2ADewmLYA Y+PcKl9el0fMwYR6m53n/kj/41bR6ZDZdbDyTRKfnXUN8Wu4oezFulimPgJ+HdGr JdiqKkqnOCvkryZGz+pWo1uOS1VbrH6FTg1lsKxR5le0i2dK1bOhgU6YxHXCDX/N iwgJn28e1nGTVXckxno6qVhq4X39csKbBRCVi/sgMx3AoqXi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfMny/n/TfZBxvf5ZVJKr/GGVWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRjZWE4MjUtZjAyMi0z YjRlLWEwODItMWExYzg4YmMxYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHAOmVyTZIgb8rYyXZC+d/j6gtcnC6VYX9ChnekE8LBTb4r4uifXq11 u4EV7QErO36c2C2qQy+1sHG85p0yzLCLs+INKyWZ+ye+Vbb0h0JzpKZtWGeX18Lr 9j6okfFL0KiDQsYpGMTQihg4067QFtIpZoOAzpzbUbzev/3suAu3+psEYmkHWeB1 KzNbWSsGVn35423HmPpWdYpaLd89IlwgCiUf9EC2cNIGRuKcRtYzHatfahkrZ/cF y/L3anFnYRIQQig62SSAwIxEs70HNIZ/PE8P+sCjRQa7xDELIPrTYVyiBrIui0vm LKBA74Sj3CQ+ZaKtojouvvzO9Ku99iM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:55 2025 by rpki-client