$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ec2fb27-821a-39db-ab2f-f174e76ee474.roa File: 0ec2fb27-821a-39db-ab2f-f174e76ee474.roa (raw, json) Hash identifier: 1kj+gDqCg+gCMlkQv1DhhIPFpPVOYGtMy/lc3t4DwYA= Subject key identifier: C6:03:C0:92:8A:5B:00:72:35:93:B1:AB:60:B2:1C:9A:E6:28:7E:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15B8A9A1DF4F078BB2C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ec2fb27-821a-39db-ab2f-f174e76ee474.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 71.29.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5b:8a:9a:1d:f4:f0:78:bb:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=96e5f612-099e-435c-ab89-06144fe8c08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:9a:d2:83:6c:3d:73:3b:6c:0a:09:61:f1: 5f:09:92:bd:df:94:65:76:de:36:d9:65:80:9f:b9: 72:f4:6f:10:9f:48:f8:c7:d7:9d:e5:c8:44:52:78: 3b:8a:31:4b:64:75:4d:d1:fe:5c:84:a8:07:53:72: fa:3b:9a:ba:77:bb:81:0b:f5:fc:87:41:00:5d:48: ce:41:39:bb:f3:bc:4a:41:e7:3f:e9:27:24:bb:37: ce:21:82:77:9d:12:eb:fe:a8:41:8a:a8:34:78:6e: 37:95:d1:30:24:e3:a3:60:9e:c5:15:65:2d:5b:84: 70:b9:64:74:48:df:07:52:1f:bf:cb:a8:0f:de:4e: 21:30:d0:75:92:e5:dc:3d:22:46:bf:36:5c:40:3e: 76:54:30:21:5c:1b:10:61:5b:2d:3c:a4:ed:1e:8d: 8d:87:bc:6e:2d:8c:5a:1c:42:6d:a1:cd:93:5c:9a: 34:bb:9e:10:e5:59:47:9b:13:79:06:e6:85:4b:c7: b6:d6:12:4a:a2:d7:0d:21:fc:37:0e:23:4d:fb:0e: 6a:12:28:51:44:a0:8c:72:49:58:84:00:92:9c:3b: 58:b3:24:b3:12:07:40:9c:b2:51:4d:15:68:e0:a1: 9f:8c:53:c1:99:8c:d2:4e:73:b9:3a:19:ec:b8:2e: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:03:C0:92:8A:5B:00:72:35:93:B1:AB:60:B2:1C:9A:E6:28:7E:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ec2fb27-821a-39db-ab2f-f174e76ee474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:36:91:ed:c2:66:48:0a:e9:11:7d:83:86:60:20:90:a2:1e: df:f6:3d:56:4b:31:2b:58:6f:ed:f2:da:9d:f2:89:58:d2:fe: ff:4c:11:91:d4:e5:71:af:b5:70:b3:05:27:08:7b:22:87:34: 87:ce:93:13:7c:eb:0c:4c:99:bb:0f:69:30:1b:c7:01:d2:c3: 70:5d:b0:e8:dc:04:92:3f:0c:0c:c2:0d:de:65:3a:04:1b:c3: 15:a8:20:76:53:21:ee:9f:2a:9b:b7:90:42:3f:54:92:7a:39: 04:c0:3f:bc:40:7c:96:21:19:32:ce:f4:4a:43:df:2d:8f:77: 73:45:c5:78:5d:4d:27:94:c3:0c:81:d7:14:b0:4c:9e:d9:20: 70:ab:da:17:ee:17:f7:4a:3b:84:69:a8:8e:11:34:5e:98:1e: 86:d6:33:12:b2:b7:eb:58:8f:5c:b1:3c:64:24:a8:da:28:d1: dd:c7:8a:e2:0f:d2:f7:7f:1f:33:95:b2:9f:23:48:40:6b:c3: 46:b2:a8:b4:92:1a:7e:95:40:d0:96:62:d5:9b:5a:14:97:d1: f4:65:fa:7c:f2:58:2a:ac:42:f7:43:f3:a4:02:83:97:e9:c3: 1a:89:f3:95:77:e3:ca:67:66:df:0d:2b:f8:15:f6:9b:9a:3d: be:b9:75:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVuKmh308Hi7LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTZlNWY2MTItMDk5ZS00MzVjLWFiODktMDYxNDRmZThjMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo2a0oNsPXM7bAoJYfFfCZK935Rldt422WWA n7ly9G8Qn0j4x9ed5chEUng7ijFLZHVN0f5chKgHU3L6O5q6d7uBC/X8h0EAXUjO QTm787xKQec/6SckuzfOIYJ3nRLr/qhBiqg0eG43ldEwJOOjYJ7FFWUtW4RwuWR0 SN8HUh+/y6gP3k4hMNB1kuXcPSJGvzZcQD52VDAhXBsQYVstPKTtHo2Nh7xuLYxa HEJtoc2TXJo0u54Q5VlHmxN5BuaFS8e21hJKotcNIfw3DiNN+w5qEihRRKCMcklY hACSnDtYsySzEgdAnLJRTRVo4KGfjFPBmYzSTnO5OhnsuC56ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYDwJKKWwByNZOxq2CyHJrmKH5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVjMmZiMjctODIxYS0z OWRiLWFiMmYtZjE3NGU3NmVlNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY2ke3CZkgK6RF9g4ZgIJCiHt/2PVZLMStYb+3y2p3yiVjS/v9MEZHU 5XGvtXCzBScIeyKHNIfOkxN86wxMmbsPaTAbxwHSw3BdsOjcBJI/DAzCDd5lOgQb wxWoIHZTIe6fKpu3kEI/VJJ6OQTAP7xAfJYhGTLO9EpD3y2Pd3NFxXhdTSeUwwyB 1xSwTJ7ZIHCr2hfuF/dKO4RpqI4RNF6YHobWMxKyt+tYj1yxPGQkqNoo0d3HiuIP 0vd/HzOVsp8jSEBrw0ayqLSSGn6VQNCWYtWbWhSX0fRl+nzyWCqsQvdD86QCg5fp wxqJ85V348pnZt8NK/gV9puaPb65deQ= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:36 2025 by rpki-client