$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa File: 35790ca9-e5d7-31bf-8055-490fad2a9429.roa (raw, json) Hash identifier: cN6ZC1SyTvtRBWTBCyA9bC89n3J0B702bZf/GsYOAho= Subject key identifier: DF:A1:BD:36:9D:CC:C6:42:3B:E9:B3:C4:31:84:77:66:88:D6:02:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6631F8257992E25705AF6500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.28.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f8:25:79:92:e2:57:05:af:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=8809e1fa-65c9-4c57-84da-1adc0df8b1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:85:ef:c7:5d:e1:8d:32:23:61:60:b0:6c: b4:87:04:fc:b5:fb:a5:66:dd:0f:05:7b:2c:ab:14: f4:74:9c:b2:44:8a:e9:bc:89:5f:cd:ac:f7:8d:6d: 00:48:d0:82:89:56:c5:29:81:5c:08:5e:91:58:d3: 16:71:9a:ec:e9:d9:36:8b:fd:2e:bd:b6:f5:ff:8d: fd:55:8c:03:36:6a:e5:e5:32:03:c9:ed:07:b8:13: 2e:08:8f:8b:f3:c8:0d:90:c1:d4:33:08:8b:e3:31: 87:b5:5e:67:dc:bd:cd:05:91:8b:1d:55:27:d7:13: 6b:56:cb:ce:59:8d:4c:72:eb:f0:36:7e:18:08:55: c0:de:68:b3:fe:cb:62:d5:9d:c2:ed:80:75:2c:8e: 95:bc:31:fe:0a:e2:db:dd:aa:ed:df:cc:49:79:60: 44:13:43:e0:72:dc:7c:07:fc:7f:ff:5f:a4:80:ff: 40:f1:4e:65:10:c2:fa:39:ce:6b:b9:50:4f:88:ae: 3e:a6:fc:32:52:ed:b5:46:30:24:8d:60:a0:f5:e1: 03:85:71:3b:70:b9:64:6f:6a:e1:eb:8d:1e:21:ea: e9:45:05:c1:9d:82:b9:3c:b2:a4:bf:63:18:22:cd: 61:c8:c4:1c:65:82:63:92:26:c1:57:b9:4d:d4:1c: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A1:BD:36:9D:CC:C6:42:3B:E9:B3:C4:31:84:77:66:88:D6:02:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/35790ca9-e5d7-31bf-8055-490fad2a9429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fb:5b:82:55:4f:c7:0a:71:1f:7f:a3:6d:cc:bc:d8:1b:a7: 40:94:99:69:51:bd:6c:72:e1:3d:63:1f:da:de:d7:6a:55:3f: d0:12:27:e1:97:75:c7:10:a6:fe:ae:5d:e8:5c:61:59:e9:8a: 21:53:ae:93:78:92:b8:93:db:37:9f:0e:76:00:13:8e:be:f1: 60:53:9d:27:83:85:0f:79:93:74:53:fc:7f:19:e3:9b:70:41: 7f:62:19:a3:38:3f:e6:cb:6c:aa:2a:09:13:46:91:ac:16:7e: 90:4a:b5:b8:e5:5f:37:26:41:af:08:74:58:22:ac:db:34:ef: f9:a0:5c:70:e7:d5:7b:26:0f:8e:7b:47:46:29:cc:42:b9:eb: 8f:c8:7d:c3:24:d1:6f:85:3e:a8:c4:76:cf:bc:6f:8f:11:bd: 67:91:c3:8f:c6:52:d9:12:e4:04:17:e7:7e:92:bd:ed:72:3f: bb:e5:2f:78:01:57:a7:e5:5d:31:0f:c9:4f:5a:4f:b0:67:8e: 26:78:ab:8a:6b:00:5b:66:5f:fb:b1:e4:19:2a:32:67:02:52: 49:fe:a2:c4:9a:f9:7e:a6:fe:8a:ce:c7:59:d9:9f:02:7d:e9: c8:91:df:68:6f:18:5f:23:db:49:27:b9:ea:0a:54:f6:ce:06: 24:83:87:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfgleZLiVwWvZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ODgwOWUxZmEtNjVjOS00YzU3LTg0ZGEtMWFkYzBkZjhiMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7aF78dd4Y0yI2FgsGy0hwT8tfulZt0PBXss qxT0dJyyRIrpvIlfzaz3jW0ASNCCiVbFKYFcCF6RWNMWcZrs6dk2i/0uvbb1/439 VYwDNmrl5TIDye0HuBMuCI+L88gNkMHUMwiL4zGHtV5n3L3NBZGLHVUn1xNrVsvO WY1McuvwNn4YCFXA3miz/sti1Z3C7YB1LI6VvDH+CuLb3art38xJeWBEE0Pgctx8 B/x//1+kgP9A8U5lEML6Oc5ruVBPiK4+pvwyUu21RjAkjWCg9eEDhXE7cLlkb2rh 640eIerpRQXBnYK5PLKkv2MYIs1hyMQcZYJjkibBV7lN1ByZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+hvTadzMZCO+mzxDGEd2aI1gJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzU3OTBjYTktZTVkNy0z MWJmLTgwNTUtNDkwZmFkMmE5NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP7W4JVT8cKcR9/o23MvNgbp0CUmWlRvWxy4T1jH9re12pVP9ASJ+GX dccQpv6uXehcYVnpiiFTrpN4kriT2zefDnYAE46+8WBTnSeDhQ95k3RT/H8Z45tw QX9iGaM4P+bLbKoqCRNGkawWfpBKtbjlXzcmQa8IdFgirNs07/mgXHDn1XsmD457 R0YpzEK564/IfcMk0W+FPqjEds+8b48RvWeRw4/GUtkS5AQX536Sve1yP7vlL3gB V6flXTEPyU9aT7BnjiZ4q4prAFtmX/ux5BkqMmcCUkn+osSa+X6m/orOx1nZnwJ9 6ciR32hvGF8j20knueoKVPbOBiSDh8o= -----END CERTIFICATE-----Generated at Fri Oct 10 22:09:53 2025 by rpki-client