$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa File: 4193fa81-f8ac-363a-9704-2c5c108fed13.roa (raw, json) Hash identifier: bJcsAHG9KsBMuwBCb0op3VRNkvLavjPij2/Rlg3RGl8= Subject key identifier: F3:89:A5:52:F7:8F:AD:06:42:A8:8A:F8:A9:63:84:21:E5:D4:01:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B0746CA7380F82D660ED376C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 7029 IP address blocks: 71.30.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:ca:73:80:f8:2d:66:0e:d3:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=249acf15-1519-4d7e-8a6a-df143f2e8e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:09:bc:88:8b:17:70:c8:d6:6a:30:88:b4:88: a3:00:27:a7:5e:0f:05:3d:ec:8d:e1:9d:20:cf:d1: e0:b5:a9:83:b2:49:47:44:bf:c7:0f:e1:32:46:64: c1:81:5a:15:12:f4:3a:71:c6:ee:6a:82:80:b8:97: 50:dd:4d:f6:bd:a6:1f:f2:7e:9e:21:ab:8d:bf:62: 0b:a9:13:1a:75:28:ab:8b:69:fe:65:cf:c4:68:78: bc:f9:d2:96:59:5b:cd:f8:d5:27:8e:0f:10:53:30: dc:25:d5:aa:71:8a:5d:5f:72:b9:bd:96:3e:dd:6a: 40:25:3a:26:9d:0b:4c:36:e1:2d:8a:b6:ed:49:5f: b7:f7:a2:17:13:8b:3d:25:b1:11:47:b4:83:6a:7f: 0f:bd:50:84:70:d8:0d:c8:d5:c6:29:d5:ba:5f:5e: c6:c3:2b:f0:df:a3:b5:67:a8:cf:f5:e0:f4:49:c7: 94:c0:47:a4:23:3d:7d:40:f2:a5:c3:cf:3e:02:95: 5f:55:35:c9:89:31:4e:e2:10:c0:6e:0f:83:9c:f2: 46:61:9e:d5:37:ed:77:97:9a:76:a6:a2:f2:bd:17: 3c:89:c6:57:75:69:52:89:e4:0f:5e:1c:5b:21:34: d8:94:c2:b1:1b:1f:fc:4e:02:86:76:3b:04:c4:5c: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:A5:52:F7:8F:AD:06:42:A8:8A:F8:A9:63:84:21:E5:D4:01:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4193fa81-f8ac-363a-9704-2c5c108fed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fd:21:e4:21:09:e5:45:23:31:92:f0:41:4b:f7:f3:64:8b: bf:21:f5:e1:9b:1c:05:55:68:95:03:b2:3e:7b:2c:8c:5b:18: 80:56:9e:1f:7a:1d:f8:b0:9c:ad:1e:ab:ee:e8:d5:69:14:3e: d6:38:0c:f1:eb:44:dc:4e:13:db:f4:d4:82:c7:db:ca:dd:cf: 50:46:0a:df:8b:d7:ef:f4:d8:2e:a7:a1:c7:a1:b1:1f:c1:75: 99:29:d3:75:3a:96:f9:5b:09:32:e3:bd:8f:6d:36:0a:8d:01: 52:69:6a:21:fc:ea:e7:0c:11:bf:27:bf:4b:05:f4:17:4e:47: 4e:6d:ac:c3:e3:e6:30:6a:a8:ef:83:0d:ea:ab:4b:91:cc:be: 5d:4d:98:8b:29:d0:00:e5:a9:4a:2e:2e:61:2e:52:9e:b5:83: f4:0f:fb:e7:a6:e9:56:97:33:5c:b2:21:7a:7c:d8:31:68:b0: e9:98:f5:bb:fb:d8:25:c1:bb:92:f2:26:b2:ba:b5:48:74:a2: 3f:95:fc:77:61:9c:81:a5:17:39:64:89:e0:78:f3:5c:e3:6f: f0:cd:cb:58:77:ec:81:4a:47:1d:ae:c1:65:2e:dd:cc:83:d1: d7:ff:15:73:e4:05:d1:8d:cc:95:ad:52:f9:cc:3d:13:78:96: c8:f1:6b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRspzgPgtZg7TdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MjQ5YWNmMTUtMTUxOS00ZDdlLThhNmEtZGYxNDNmMmU4ZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gm8iIsXcMjWajCItIijACenXg8FPeyN4Z0g z9HgtamDsklHRL/HD+EyRmTBgVoVEvQ6ccbuaoKAuJdQ3U32vaYf8n6eIauNv2IL qRMadSiri2n+Zc/EaHi8+dKWWVvN+NUnjg8QUzDcJdWqcYpdX3K5vZY+3WpAJTom nQtMNuEtirbtSV+396IXE4s9JbERR7SDan8PvVCEcNgNyNXGKdW6X17Gwyvw36O1 Z6jP9eD0SceUwEekIz19QPKlw88+ApVfVTXJiTFO4hDAbg+DnPJGYZ7VN+13l5p2 pqLyvRc8icZXdWlSieQPXhxbITTYlMKxGx/8TgKGdjsExFxPUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOJpVL3j60GQqiK+KljhCHl1AEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDE5M2ZhODEtZjhhYy0z NjNhLTk3MDQtMmM1YzEwOGZlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX9IeQhCeVFIzGS8EFL9/Nki78h9eGbHAVVaJUDsj57LIxbGIBWnh96 HfiwnK0eq+7o1WkUPtY4DPHrRNxOE9v01ILH28rdz1BGCt+L1+/02C6nocehsR/B dZkp03U6lvlbCTLjvY9tNgqNAVJpaiH86ucMEb8nv0sF9BdOR05trMPj5jBqqO+D DeqrS5HMvl1NmIsp0ADlqUouLmEuUp61g/QP++em6VaXM1yyIXp82DFosOmY9bv7 2CXBu5LyJrK6tUh0oj+V/HdhnIGlFzlkieB481zjb/DNy1h37IFKRx2uwWUu3cyD 0df/FXPkBdGNzJWtUvnMPRN4lsjxa/o= -----END CERTIFICATE-----Generated at Sat Oct 11 00:19:05 2025 by rpki-client