$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa File: 568233e0-8076-307e-941b-cf901e9814cd.roa (raw, json) Hash identifier: psMnL7qZyePIuNOzw9dUD3sqP+lnmQF4llcjGPO+kvg= Subject key identifier: C2:92:DB:D1:D6:BA:6F:30:13:C0:7A:EE:F9:79:76:D7:7B:84:00:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2066E04653DF5A668C2E6040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e0:46:53:df:5a:66:8c:2e:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=1fb3e519-4bdf-47fd-8115-2127f20281eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:d2:79:3c:f0:e2:fb:37:bc:58:72:71:6b: 1d:6c:0f:11:7a:68:a0:ae:0f:ce:82:df:f0:83:21: c0:cd:75:95:9d:60:2e:3f:5e:d4:60:d2:bf:1a:a1: 54:aa:42:7b:8d:f7:f5:b7:2a:2e:91:71:70:0f:75: 38:fc:7a:47:2b:df:19:b0:b6:2d:42:a3:33:17:16: da:f4:7d:ad:cf:bd:00:f3:87:17:47:41:79:6d:26: e0:81:4b:74:9b:8a:fd:34:d7:db:0e:c3:ff:08:b2: f6:38:23:5b:6c:9a:51:2a:c0:45:c7:4c:73:f7:96: 9b:01:be:1f:a3:23:df:f2:c6:1f:64:58:50:bd:b7: 9d:c4:38:2a:69:07:55:b6:2c:a1:07:55:07:15:e2: 42:bb:72:2f:86:f5:42:26:cc:61:88:d8:6e:c5:60: 0e:16:42:20:4f:eb:85:f0:2e:3b:b8:a3:c4:19:9a: ec:80:6f:e7:76:08:8d:9e:ac:ed:d2:eb:1e:0c:7a: 30:09:59:18:5d:98:20:ec:b4:70:03:99:7d:97:7d: 3f:87:cb:37:cf:22:85:13:29:4b:1e:88:f4:9e:d4: e0:cc:a4:6a:0f:58:5b:b9:20:85:4a:b4:66:4e:4d: 1a:e5:05:c1:9c:98:ac:b4:cc:7e:1f:7d:de:1b:d6: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:92:DB:D1:D6:BA:6F:30:13:C0:7A:EE:F9:79:76:D7:7B:84:00:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/568233e0-8076-307e-941b-cf901e9814cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9b:4c:de:97:50:b4:9a:f8:31:2f:92:85:29:6a:68:19:fe: 6b:be:82:68:c6:5b:fc:00:4f:f1:84:91:cd:f7:a6:39:46:65: c9:86:c3:7f:8b:ff:bb:47:a5:ae:a5:04:f7:b8:64:5f:00:78: b1:2a:09:71:c0:96:42:1a:f0:e9:02:e2:45:1b:b0:38:4e:00: 7a:60:b0:6d:56:4a:b9:12:c9:ce:6b:47:b8:13:df:50:ef:59: 37:2a:f6:4c:8f:28:26:34:33:e8:ce:9b:51:67:94:a4:d3:98: bf:8e:cd:7c:90:11:1b:2c:3d:e4:0a:98:b9:cc:71:d3:7c:1e: 5e:84:2b:14:60:a3:8c:87:21:b9:2b:01:d5:24:ca:5a:27:33: 5e:da:4c:ed:99:fd:f2:3f:75:40:9b:18:96:92:b5:ce:79:6d: 0e:69:43:1f:fb:4b:e4:4b:b7:20:81:5a:35:90:cd:79:92:77: 4b:1b:41:f2:28:8e:cb:a6:a5:09:4e:df:ca:c1:fa:7b:4d:1b: 4b:b9:7b:9e:37:cc:e7:83:b5:e9:01:44:54:6d:53:87:82:3f: a4:3d:ea:07:7e:2d:15:35:19:fa:36:7b:73:5f:57:c3:08:f5: bc:43:2e:12:a0:61:a8:19:ce:90:fa:49:a2:65:eb:49:4f:e6: 94:11:e7:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuBGU99aZowuYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MWZiM2U1MTktNGJkZi00N2ZkLTgxMTUtMjEyN2YyMDI4MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHPSeTzw4vs3vFhycWsdbA8Remigrg/Ogt/w gyHAzXWVnWAuP17UYNK/GqFUqkJ7jff1tyoukXFwD3U4/HpHK98ZsLYtQqMzFxba 9H2tz70A84cXR0F5bSbggUt0m4r9NNfbDsP/CLL2OCNbbJpRKsBFx0xz95abAb4f oyPf8sYfZFhQvbedxDgqaQdVtiyhB1UHFeJCu3IvhvVCJsxhiNhuxWAOFkIgT+uF 8C47uKPEGZrsgG/ndgiNnqzt0useDHowCVkYXZgg7LRwA5l9l30/h8s3zyKFEylL Hoj0ntTgzKRqD1hbuSCFSrRmTk0a5QXBnJistMx+H33eG9awhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKS29HWum8wE8B67vl5dtd7hAC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MjMzZTAtODA3Ni0z MDdlLTk0MWItY2Y5MDFlOTgxNGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFObTN6XULSa+DEvkoUpamgZ/mu+gmjGW/wAT/GEkc33pjlGZcmGw3+L /7tHpa6lBPe4ZF8AeLEqCXHAlkIa8OkC4kUbsDhOAHpgsG1WSrkSyc5rR7gT31Dv WTcq9kyPKCY0M+jOm1FnlKTTmL+OzXyQERssPeQKmLnMcdN8Hl6EKxRgo4yHIbkr AdUkylonM17aTO2Z/fI/dUCbGJaStc55bQ5pQx/7S+RLtyCBWjWQzXmSd0sbQfIo jsumpQlO38rB+ntNG0u5e543zOeDtekBRFRtU4eCP6Q96gd+LRU1Gfo2e3NfV8MI 9bxDLhKgYagZzpD6SaJl60lP5pQR558= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:41 2025 by rpki-client