$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa File: 555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa (raw, json) Hash identifier: jQP/OhqtexG1L4BF28iRv8GFZ+MhBbB+nguooYeByRY= Subject key identifier: FE:38:10:70:C4:03:19:C5:1A:02:E2:DE:1E:FE:2F:A5:37:E3:23:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715D07E63E79593D9BE5F2D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.29.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:07:e6:3e:79:59:3d:9b:e5:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=3ee55389-42c6-423e-b119-f231b2448a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4c:f2:04:4f:4d:a4:b0:90:2f:58:ed:ea:26: 73:43:d4:8d:2f:0c:0a:dc:49:f2:4d:d7:97:ea:5b: c9:73:ea:8e:45:7a:ca:9b:02:f2:ea:db:56:6d:39: a2:0e:a7:42:14:63:1b:7f:4e:f2:3b:34:93:39:07: a0:4d:53:99:01:39:ae:e9:9a:b4:d4:fc:e4:ba:22: 8e:59:a2:e1:33:ab:08:c4:50:30:5c:bd:e4:75:08: fa:65:59:4e:d0:3d:a7:56:6e:85:b3:1b:5b:d3:a7: 83:c0:04:7f:5c:73:4f:2b:73:df:f0:21:31:78:ff: a2:a1:f6:9e:8c:96:40:1d:88:b2:25:7e:ae:3f:c7: 5e:a7:33:91:3a:51:35:8a:1c:3c:60:fc:25:46:30: 35:cf:c7:37:fc:51:f0:ab:7f:5d:71:82:12:e5:7e: dd:6b:0f:c3:67:86:fb:a0:ea:8d:2b:c0:33:af:15: 4c:e0:9b:e9:87:2c:a3:62:2c:82:20:88:6e:38:14: 21:54:7e:44:22:a3:d7:f1:bb:98:3a:9f:78:c7:ef: c2:f5:ef:73:a6:8c:a6:60:96:e9:a7:e9:c7:f4:f5: 10:15:c3:63:52:7e:d1:4c:3c:65:86:f3:19:35:a5: e4:85:60:74:4e:0c:e0:83:3e:9d:0c:8d:2c:e5:94: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:38:10:70:C4:03:19:C5:1A:02:E2:DE:1E:FE:2F:A5:37:E3:23:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:cd:a3:ff:b6:7f:d3:63:4c:8f:ca:db:9a:35:1f:27:31:0f: 15:6a:05:58:55:c1:b8:52:a7:8a:32:c8:dc:83:f0:16:9a:46: ad:be:e9:0a:e6:16:a4:4f:98:64:ba:2b:5e:97:93:98:d8:ab: b8:18:ef:0a:3c:4b:1e:1a:a5:76:11:cf:20:90:17:01:84:bc: a6:63:1c:ef:86:b2:3c:79:53:23:d9:dc:13:98:b4:01:9e:f0: 31:70:d1:bb:4a:09:62:cb:88:39:1d:f6:03:92:06:40:9c:1b: 5c:71:1a:0a:89:03:c1:1c:fa:c2:5d:c0:16:69:31:20:31:f4: 50:a0:db:4a:7f:f5:f2:0a:82:1f:23:4e:97:a7:a7:a6:c4:9a: af:46:01:b9:0d:0f:a3:44:85:d2:82:ca:53:53:32:17:be:07: 42:d5:86:41:3e:53:54:09:e5:8b:44:96:01:18:e1:56:1e:65: 52:b1:bf:70:52:25:fa:8c:26:37:e1:e7:40:b4:22:d7:41:b2: 03:c6:9a:dd:26:8f:1e:6c:df:89:fd:77:f1:8f:fb:1d:20:f5: 43:89:9e:78:bc:98:be:33:a3:ca:80:50:b6:03:ed:66:c6:5f: 2f:e8:51:f4:8c:d4:e4:dc:9c:f5:d8:00:28:aa:94:a7:19:49: b9:a6:35:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQfmPnlZPZvl8tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk M2VlNTUzODktNDJjNi00MjNlLWIxMTktZjIzMWIyNDQ4YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUzyBE9NpLCQL1jt6iZzQ9SNLwwK3EnyTdeX 6lvJc+qORXrKmwLy6ttWbTmiDqdCFGMbf07yOzSTOQegTVOZATmu6Zq01PzkuiKO WaLhM6sIxFAwXL3kdQj6ZVlO0D2nVm6Fsxtb06eDwAR/XHNPK3Pf8CExeP+iofae jJZAHYiyJX6uP8depzOROlE1ihw8YPwlRjA1z8c3/FHwq39dcYIS5X7daw/DZ4b7 oOqNK8AzrxVM4JvphyyjYiyCIIhuOBQhVH5EIqPX8buYOp94x+/C9e9zpoymYJbp p+nH9PUQFcNjUn7RTDxlhvMZNaXkhWB0Tgzggz6dDI0s5ZS0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP44EHDEAxnFGgLi3h7+L6U34yM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU1ZmY5N2ItN2RiNS0z MGNjLThlMGMtZWE0MDJiNzc5ZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvNo/+2f9NjTI/K25o1HycxDxVqBVhVwbhSp4oyyNyD8BaaRq2+6Qrm FqRPmGS6K16Xk5jYq7gY7wo8Sx4apXYRzyCQFwGEvKZjHO+Gsjx5UyPZ3BOYtAGe 8DFw0btKCWLLiDkd9gOSBkCcG1xxGgqJA8Ec+sJdwBZpMSAx9FCg20p/9fIKgh8j Tpenp6bEmq9GAbkND6NEhdKCylNTMhe+B0LVhkE+U1QJ5YtElgEY4VYeZVKxv3BS JfqMJjfh50C0ItdBsgPGmt0mjx5s34n9d/GP+x0g9UOJnni8mL4zo8qAULYD7WbG Xy/oUfSM1OTcnPXYACiqlKcZSbmmNXU= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:54 2025 by rpki-client