$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53497d18-330e-32e0-95f3-f660cff679d2.roa File: 53497d18-330e-32e0-95f3-f660cff679d2.roa (raw, json) Hash identifier: LAR0GZTwxGhz4IHohH9rrK4TdeQlCUqFzaWeFI3ms0k= Subject key identifier: B4:69:63:09:A8:FF:3A:1C:20:34:A8:95:35:77:C5:16:15:F7:93:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15B323F11B85B3E44DE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53497d18-330e-32e0-95f3-f660cff679d2.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 71.7.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5b:32:3f:11:b8:5b:3e:44:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=a1d27517-019b-4939-bfdf-6a24c61d4d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:81:9f:97:f5:a3:8c:35:88:ac:03:02:9b: fb:c6:8a:26:f6:22:34:00:fa:5c:14:57:75:14:e0: 4b:c9:6b:10:95:ec:ef:20:59:08:0d:22:b1:69:d5: 0c:bf:9d:09:2c:eb:24:ff:fe:e6:fd:c1:6a:b9:ce: ed:72:1a:a3:8b:1d:b8:39:4e:ae:63:3e:e3:4a:38: 71:de:f0:46:0f:79:ea:6f:f7:4b:52:86:12:28:c6: 7d:90:9c:58:f3:bb:3e:11:07:38:93:be:2b:ee:06: d6:fa:63:b6:9d:18:b9:6b:b0:3c:1b:90:85:fe:47: ed:70:8e:65:db:08:d2:b8:b0:e6:b4:0e:5e:71:d2: b1:9a:2a:f7:b5:e7:44:1b:97:0d:49:12:32:68:9c: b3:5c:4f:2a:9b:93:02:a8:2d:32:11:7a:76:c3:d6: f7:eb:56:34:e5:66:e5:26:91:27:8d:e5:0d:da:6b: 8c:f7:e5:ca:6f:9e:f1:e7:08:49:8e:4e:e0:21:9f: 89:a9:22:eb:85:4b:f1:3b:87:dd:78:ca:f8:73:ee: bb:cd:79:b6:02:4c:45:05:5c:90:21:13:b6:c6:b7: 44:63:df:f0:cb:e8:ac:2d:c1:9b:35:e8:9a:c7:5f: 7e:0e:fa:36:d3:1d:68:94:67:ec:54:01:e0:8d:85: 76:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:69:63:09:A8:FF:3A:1C:20:34:A8:95:35:77:C5:16:15:F7:93:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/53497d18-330e-32e0-95f3-f660cff679d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e6:cc:69:54:3f:a0:d9:16:6d:d7:c7:05:ea:28:68:11:bb: 80:8d:42:4c:83:ae:06:6d:23:54:c1:a5:4d:8a:6c:c2:51:f2: 41:1a:48:45:41:bd:ed:b8:01:e3:dc:0e:02:ee:1a:aa:0c:1f: 31:c7:0d:38:77:a1:d3:d1:60:03:ef:9b:8b:56:aa:8c:98:9f: 42:60:a5:37:fd:d1:70:3c:43:1f:31:4c:f1:55:8b:d3:49:8b: eb:8e:fc:78:0f:9c:86:26:0f:1d:62:25:ba:5c:b7:e5:b0:a1: 69:29:b1:cb:f0:19:72:d4:5f:33:f1:be:f1:e7:ed:14:4f:38: d3:d6:75:b2:46:7c:85:d8:18:f4:c3:cf:cf:b6:4d:5e:44:37: 4b:c9:a6:db:16:9d:9c:1a:00:bd:80:9e:de:88:7c:e2:a2:30: 59:0d:07:f7:d2:31:f9:8d:12:0d:3e:f1:8c:02:46:fd:54:0e: e2:c5:6e:53:ca:92:19:1c:71:f7:42:c4:98:3e:2a:0e:4b:b2: 07:73:b0:09:6f:5f:f6:26:e4:28:f2:b5:3a:48:5d:f3:9f:16: f5:69:31:00:d5:9f:57:e4:ae:c9:b4:90:b4:b3:3a:16:3e:c7: 71:ea:bc:1f:8e:61:9a:98:c0:d1:ff:5a:e1:3f:0e:9b:c7:a8: 5f:66:08:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVsyPxG4Wz5E3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTFkMjc1MTctMDE5Yi00OTM5LWJmZGYtNmEyNGM2MWQ0ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUuBn5f1o4w1iKwDApv7xoom9iI0APpcFFd1 FOBLyWsQlezvIFkIDSKxadUMv50JLOsk//7m/cFquc7tchqjix24OU6uYz7jSjhx 3vBGD3nqb/dLUoYSKMZ9kJxY87s+EQc4k74r7gbW+mO2nRi5a7A8G5CF/kftcI5l 2wjSuLDmtA5ecdKxmir3tedEG5cNSRIyaJyzXE8qm5MCqC0yEXp2w9b361Y05Wbl JpEnjeUN2muM9+XKb57x5whJjk7gIZ+JqSLrhUvxO4fdeMr4c+67zXm2AkxFBVyQ IRO2xrdEY9/wy+isLcGbNeiax19+Dvo20x1olGfsVAHgjYV27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRpYwmo/zocIDSolTV3xRYV95OfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTM0OTdkMTgtMzMwZS0z MmUwLTk1ZjMtZjY2MGNmZjY3OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRwdoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3mzGlUP6DZFm3XxwXqKGgRu4CNQkyDrgZtI1TBpU2KbMJR8kEaSEVB ve24AePcDgLuGqoMHzHHDTh3odPRYAPvm4tWqoyYn0JgpTf90XA8Qx8xTPFVi9NJ i+uO/HgPnIYmDx1iJbpct+WwoWkpscvwGXLUXzPxvvHn7RRPONPWdbJGfIXYGPTD z8+2TV5EN0vJptsWnZwaAL2Ant6IfOKiMFkNB/fSMfmNEg0+8YwCRv1UDuLFblPK khkccfdCxJg+Kg5LsgdzsAlvX/Ym5CjytTpIXfOfFvVpMQDVn1fkrsm0kLSzOhY+ x3HqvB+OYZqYwNH/WuE/DpvHqF9mCJE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:07:53 2025 by rpki-client