$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa File: 4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa (raw, json) Hash identifier: UBwzbpFJ1UD6Ezwv2NKWuePZAeSWsK807WAzJfd6xRg= Subject key identifier: 94:AC:44:AF:DD:3C:9B:06:02:B6:EA:1F:4F:88:CF:51:96:B2:93:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA8211A74252C15346EBC Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.28.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a8:21:1a:74:25:2c:15:34:6e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=a8cd63d3-81dc-4b58-b201-6139e39ac37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:af:33:ed:4a:34:1b:27:37:2a:91:70:72: dc:97:9b:7a:56:94:11:62:0d:88:9a:96:ae:0b:0b: 99:b4:35:9c:4f:4c:11:17:cc:d7:c4:20:96:9b:c5: 1c:dc:dd:e6:dc:32:7f:cc:c8:7d:04:55:0f:ce:be: 3f:a4:35:b7:49:9e:61:a0:13:23:3b:21:71:84:6c: cd:05:66:14:c7:c8:ae:8b:cb:1d:4a:ea:85:66:3c: 38:9f:c0:96:18:a1:e7:91:f3:ac:4b:9e:02:c2:16: 81:dd:4a:c5:73:aa:33:bc:ab:32:5f:42:7a:33:a4: 78:39:b0:4a:85:df:2e:c6:2f:95:b1:6e:01:a4:b9: 4c:36:8e:98:ee:f5:3f:cd:ad:ae:32:fa:c4:37:a7: 1c:80:36:1e:04:7f:af:aa:90:5c:37:7d:45:ae:51: cb:1c:ea:93:bc:df:f2:3e:12:b5:cf:d2:6a:8f:51: 4b:80:51:00:72:4c:0a:45:22:44:7a:c0:5f:89:d3: d3:ea:5f:03:43:49:bb:7f:58:8c:be:db:86:d2:56: 0e:b4:0d:50:a6:16:9b:be:ae:c7:27:be:aa:9c:cc: 9a:e5:9d:59:59:33:83:19:df:bc:c7:28:a1:b6:ca: 00:15:7e:2e:7f:cd:40:c5:9d:66:f8:8b:65:f9:5f: f9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:44:AF:DD:3C:9B:06:02:B6:EA:1F:4F:88:CF:51:96:B2:93:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4f273e7c-1e43-3bc4-a0e5-530b48f6ddca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:30:c7:15:cc:40:69:fe:36:57:2b:61:47:d1:1c:a8:7c:c7: 31:ad:ec:ce:db:16:ec:4e:0b:0a:c8:a8:33:ba:43:f7:bf:e7: d3:1c:17:a7:95:c6:84:8a:5a:7d:b7:93:5f:f6:21:13:ab:c1: be:74:f2:b3:95:26:12:f8:8c:45:75:79:9f:9d:65:22:ef:59: 56:38:fb:9c:09:38:cd:b5:bc:fc:d1:93:d4:f6:79:ec:b2:27: 3d:91:36:32:fd:f0:cd:6e:6d:fb:91:ad:e3:3e:33:ee:d9:7a: de:b1:e3:42:57:9f:b6:e8:5a:9c:49:8d:ba:f9:9e:8a:3f:32: b3:8a:a5:43:d9:ba:fa:71:8e:5e:13:45:d1:0f:04:0c:e8:63: ab:d0:06:2b:a6:a4:96:f6:93:92:c9:0c:78:1b:fa:47:75:11: 42:7f:26:d5:d9:15:00:15:35:d5:7d:98:47:08:73:16:83:6d: f4:95:4a:23:7c:c1:9f:1a:b9:c9:ab:d2:af:fb:74:2e:27:9f: 9e:58:39:cd:c7:c8:94:32:a1:8e:89:fa:c7:b5:44:30:e9:95: da:9c:a6:49:9d:a3:eb:bd:83:5b:be:7b:b9:98:1b:e4:e0:b8: ca:15:f9:53:78:ba:65:1a:b0:fc:52:ed:29:e9:9e:1a:79:ab: 95:89:88:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKghGnQlLBU0brwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YThjZDYzZDMtODFkYy00YjU4LWIyMDEtNjEzOWUzOWFjMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3qvM+1KNBsnNyqRcHLcl5t6VpQRYg2Impau CwuZtDWcT0wRF8zXxCCWm8Uc3N3m3DJ/zMh9BFUPzr4/pDW3SZ5hoBMjOyFxhGzN BWYUx8iui8sdSuqFZjw4n8CWGKHnkfOsS54CwhaB3UrFc6ozvKsyX0J6M6R4ObBK hd8uxi+VsW4BpLlMNo6Y7vU/za2uMvrEN6ccgDYeBH+vqpBcN31FrlHLHOqTvN/y PhK1z9Jqj1FLgFEAckwKRSJEesBfidPT6l8DQ0m7f1iMvtuG0lYOtA1Qphabvq7H J76qnMya5Z1ZWTODGd+8xyihtsoAFX4uf81AxZ1m+Itl+V/5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSsRK/dPJsGArbqH0+Iz1GWspNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGYyNzNlN2MtMWU0My0z YmM0LWEwZTUtNTMwYjQ4ZjZkZGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMwxxXMQGn+NlcrYUfRHKh8xzGt7M7bFuxOCwrIqDO6Q/e/59McF6eV xoSKWn23k1/2IROrwb508rOVJhL4jEV1eZ+dZSLvWVY4+5wJOM21vPzRk9T2eeyy Jz2RNjL98M1ubfuRreM+M+7Zet6x40JXn7boWpxJjbr5noo/MrOKpUPZuvpxjl4T RdEPBAzoY6vQBiumpJb2k5LJDHgb+kd1EUJ/JtXZFQAVNdV9mEcIcxaDbfSVSiN8 wZ8aucmr0q/7dC4nn55YOc3HyJQyoY6J+se1RDDpldqcpkmdo+u9g1u+e7mYG+Tg uMoV+VN4umUasPxS7Snpnhp5q5WJiBk= -----END CERTIFICATE-----Generated at Fri Oct 10 22:19:13 2025 by rpki-client