$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa File: 46847ea1-119e-3b8f-8b5b-eb0480651a31.roa (raw, json) Hash identifier: rrD8LYnHbj3q1WeIfSJ8hwVLCwWzKS8SMzqPfzc2bvY= Subject key identifier: E4:5B:82:A0:8C:33:16:79:81:C4:76:E0:D8:34:CA:F4:5C:FC:F4:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA8341820DE95230C4FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.29.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a8:34:18:20:de:95:23:0c:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=70e5794f-d1f5-4326-87dc-949b6f6988a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:58:1a:17:b8:6d:e3:d3:93:36:73:6a:5e: 56:c4:f6:59:69:b5:2a:7c:2c:10:56:66:a5:b1:06: 2a:06:94:55:da:cf:2d:33:0e:38:01:02:57:25:de: 73:6f:f5:73:3d:6f:47:84:21:ac:fe:27:73:9b:53: 30:d7:47:ce:66:23:95:18:06:3e:a5:6a:e2:07:4c: 89:9e:3e:cd:3e:33:b4:6f:91:a3:21:c3:0f:23:3c: cf:11:09:fb:a4:9d:d1:45:30:fe:37:46:62:cf:c9: 55:53:17:d6:13:ef:b9:b6:e8:a5:74:ed:89:77:45: 6b:7e:9a:e3:b5:e5:45:c2:c8:6a:02:47:06:07:e7: 16:1e:94:20:ca:f2:d1:3c:54:a6:d7:8f:e5:dc:d8: 7c:0b:e7:0e:e0:c6:07:5c:46:f8:f5:78:d1:73:45: f7:16:f3:2e:96:f0:c4:a3:6f:85:07:70:bf:aa:77: 9b:36:04:ab:7c:cc:f4:3d:b8:96:43:96:97:9b:33: d8:bc:0d:e8:97:44:7e:07:52:43:5f:5d:39:f1:5c: e9:7d:23:f5:7e:1b:aa:45:23:30:6f:1e:ea:69:08: fb:28:42:3a:fe:6f:a6:33:b0:95:56:6d:f1:e6:37: b2:5f:b3:5a:00:1d:6f:84:2d:12:bd:1e:47:73:4a: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5B:82:A0:8C:33:16:79:81:C4:76:E0:D8:34:CA:F4:5C:FC:F4:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46847ea1-119e-3b8f-8b5b-eb0480651a31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:12:ed:d2:77:40:3a:e9:0a:db:7b:ac:c5:8c:0d:a4:4d:10: 13:54:8e:a6:63:5a:10:b4:24:8e:14:ac:2e:d9:1a:66:12:5b: 60:83:0c:e8:bb:e2:06:2d:30:31:15:11:e1:08:f2:f9:4d:47: fd:06:1d:61:a8:f1:ee:cb:15:18:c7:3f:1c:14:7e:6b:1b:36: 85:22:9d:0b:58:3d:b8:b5:f2:ec:10:9e:38:24:ce:44:9d:c6: 5a:89:07:f3:91:d5:66:31:a3:01:d6:46:f3:b5:67:0b:76:4f: 9d:43:59:a0:ec:20:23:51:e6:52:b2:24:68:9b:1f:f7:53:39: f7:e4:45:20:9e:15:8b:a0:58:ab:16:97:61:a9:86:97:37:42: dc:6c:48:27:32:97:1a:5f:9e:09:46:d9:ea:b9:ea:62:b3:c5: 50:eb:b9:1d:47:02:b1:ca:8b:02:79:97:ec:74:29:78:fe:fc: 8a:a6:fa:0f:f7:ac:44:01:36:3a:76:71:6f:90:39:0a:9f:87: be:f5:9f:52:b9:48:e5:d7:b7:49:b3:4b:26:e9:0e:f3:74:37: 5f:84:a1:03:12:b5:b8:89:a2:46:1d:d7:02:c9:ab:21:33:25: 83:f4:64:44:a7:e0:4b:7c:9d:5e:1e:c2:30:40:d3:e9:dc:0d: 77:99:ab:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKg0GCDelSMMT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzBlNTc5NGYtZDFmNS00MzI2LTg3ZGMtOTQ5YjZmNjk4OGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oRYGhe4bePTkzZzal5WxPZZabUqfCwQVmal sQYqBpRV2s8tMw44AQJXJd5zb/VzPW9HhCGs/idzm1Mw10fOZiOVGAY+pWriB0yJ nj7NPjO0b5GjIcMPIzzPEQn7pJ3RRTD+N0Ziz8lVUxfWE++5tuildO2Jd0Vrfprj teVFwshqAkcGB+cWHpQgyvLRPFSm14/l3Nh8C+cO4MYHXEb49XjRc0X3FvMulvDE o2+FB3C/qnebNgSrfMz0PbiWQ5aXmzPYvA3ol0R+B1JDX1058VzpfSP1fhuqRSMw bx7qaQj7KEI6/m+mM7CVVm3x5jeyX7NaAB1vhC0SvR5Hc0pnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORbgqCMMxZ5gcR24Ng0yvRc/PQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY4NDdlYTEtMTE5ZS0z YjhmLThiNWItZWIwNDgwNjUxYTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4S7dJ3QDrpCtt7rMWMDaRNEBNUjqZjWhC0JI4UrC7ZGmYSW2CDDOi7 4gYtMDEVEeEI8vlNR/0GHWGo8e7LFRjHPxwUfmsbNoUinQtYPbi18uwQnjgkzkSd xlqJB/OR1WYxowHWRvO1Zwt2T51DWaDsICNR5lKyJGibH/dTOffkRSCeFYugWKsW l2Gphpc3QtxsSCcylxpfnglG2eq56mKzxVDruR1HArHKiwJ5l+x0KXj+/Iqm+g/3 rEQBNjp2cW+QOQqfh771n1K5SOXXt0mzSybpDvN0N1+EoQMStbiJokYd1wLJqyEz JYP0ZESn4Et8nV4ewjBA0+ncDXeZq+Y= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:11 2025 by rpki-client