$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37a1cda8-fa58-36db-8e49-76126d8fcc00.roa File: 37a1cda8-fa58-36db-8e49-76126d8fcc00.roa (raw, json) Hash identifier: 1f7M14J+0mT8Oia87U7JnpEe6H7R0riJVgjOvbRskDM= Subject key identifier: FB:B0:79:4D:46:90:11:3D:8A:D2:09:3E:E1:C3:EE:90:76:E0:EA:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA5F3D3CAE5556B3B7A30 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37a1cda8-fa58-36db-8e49-76126d8fcc00.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.30.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a5:f3:d3:ca:e5:55:6b:3b:7a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=f5e7a910-80d1-4655-9ce9-239c18225d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:7d:0c:45:5a:7b:19:05:13:e5:f0:b8:1e: 99:8c:85:49:b9:ee:d3:6c:d3:17:b2:40:c8:03:bb: 3c:bd:f7:88:f7:59:de:00:58:52:58:d8:36:18:9d: 0c:6a:92:c1:fb:6f:66:72:f1:8d:f6:a9:3a:9e:10: 68:35:80:65:3c:b9:22:98:fb:7c:3a:1c:ca:40:fe: 65:d5:3f:19:49:19:55:3d:eb:1d:87:f9:76:fd:3f: 4f:8a:06:1d:59:e6:bc:ad:f4:23:52:dd:41:50:6c: 8b:00:d3:38:41:94:30:d0:32:da:77:c5:54:e7:04: 02:35:b2:fc:70:b4:d6:b6:2c:d0:52:70:eb:9d:cb: ac:21:ba:cd:88:47:3b:c5:ee:8d:27:bd:87:c8:5f: 48:17:cd:5f:f0:c7:92:34:fb:9d:50:71:e0:69:6d: 1d:05:36:5b:46:bc:a9:2f:b7:c1:d8:57:89:95:df: 5f:00:42:26:0d:8c:d5:c8:77:ed:c8:e5:bf:f7:76: d3:0b:e6:ee:c8:82:3e:78:ac:7e:5e:f0:1b:4b:03: 4e:9e:a6:7c:d6:41:16:3c:37:33:29:2d:77:69:19: aa:39:6a:26:8f:58:78:27:66:fe:46:5b:43:ac:f1: 2d:cb:42:a6:1e:ff:2d:90:c9:2a:5e:7e:76:0c:0e: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B0:79:4D:46:90:11:3D:8A:D2:09:3E:E1:C3:EE:90:76:E0:EA:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37a1cda8-fa58-36db-8e49-76126d8fcc00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:02:24:d3:dc:88:11:c7:ee:90:b9:02:84:f6:b4:75:03:c6: 66:39:a3:85:52:54:89:06:fc:00:43:a8:22:f1:85:ac:f4:07: ec:48:db:8e:75:7c:7c:23:e1:55:40:a7:3b:f8:f7:9b:f6:cc: 38:a7:d3:18:a8:db:ac:e3:04:d3:6f:5a:ad:5f:81:53:b5:a3: a9:f3:df:68:6d:bc:5f:8b:8b:aa:2e:2a:8d:bf:e3:46:b9:aa: 0c:d5:41:d0:8e:4e:8c:ae:22:b5:38:ef:70:40:58:af:fd:91: 8c:00:4a:0d:06:1b:2c:64:8c:68:8b:3f:4b:ae:ee:2c:6f:02: 71:50:52:c2:23:04:c7:5e:8d:7f:e2:6f:76:1b:fb:c0:db:63: 10:02:98:79:ef:ff:bd:54:f9:22:ae:7b:6e:3c:18:91:cb:d7: 3c:dc:26:9d:b1:6c:d1:b7:0a:63:c0:52:f0:1b:08:04:ae:89: 65:cf:77:ae:5e:6a:c4:ea:44:f0:0c:c7:48:de:8d:fa:57:af: 62:8b:81:1a:c6:d9:24:4e:b2:0d:0c:fa:c3:db:cc:29:5b:e2: 59:d8:e8:b2:76:be:5a:b1:49:32:6f:04:b6:bf:91:ff:96:bd: 2f:a0:18:a2:15:e3:09:46:24:97:9d:d6:59:10:e0:be:69:67: ad:4d:4c:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKXz08rlVWs7ejAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjVlN2E5MTAtODBkMS00NjU1LTljZTktMjM5YzE4MjI1ZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNt9DEVaexkFE+XwuB6ZjIVJue7TbNMXskDI A7s8vfeI91neAFhSWNg2GJ0MapLB+29mcvGN9qk6nhBoNYBlPLkimPt8OhzKQP5l 1T8ZSRlVPesdh/l2/T9PigYdWea8rfQjUt1BUGyLANM4QZQw0DLad8VU5wQCNbL8 cLTWtizQUnDrncusIbrNiEc7xe6NJ72HyF9IF81f8MeSNPudUHHgaW0dBTZbRryp L7fB2FeJld9fAEImDYzVyHftyOW/93bTC+buyII+eKx+XvAbSwNOnqZ81kEWPDcz KS13aRmqOWomj1h4J2b+RltDrPEty0KmHv8tkMkqXn52DA4MfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuweU1GkBE9itIJPuHD7pB24OqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdhMWNkYTgtZmE1OC0z NmRiLThlNDktNzYxMjZkOGZjYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx6OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJICJNPciBHH7pC5AoT2tHUDxmY5o4VSVIkG/ABDqCLxhaz0B+xI2451 fHwj4VVApzv495v2zDin0xio26zjBNNvWq1fgVO1o6nz32htvF+Li6ouKo2/40a5 qgzVQdCOToyuIrU473BAWK/9kYwASg0GGyxkjGiLP0uu7ixvAnFQUsIjBMdejX/i b3Yb+8DbYxACmHnv/71U+SKue248GJHL1zzcJp2xbNG3CmPAUvAbCASuiWXPd65e asTqRPAMx0jejfpXr2KLgRrG2SROsg0M+sPbzClb4lnY6LJ2vlqxSTJvBLa/kf+W vS+gGKIV4wlGJJed1lkQ4L5pZ61NTJ8= -----END CERTIFICATE-----Generated at Fri Oct 10 22:14:42 2025 by rpki-client