$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa File: 5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa (raw, json) Hash identifier: 4Sup7ZNzvr+365Vob9cWz8QaxigoPXWAVy16kT4Ayik= Subject key identifier: 1F:BC:91:2D:9A:95:9D:93:43:A8:7E:E4:F5:36:D5:F2:3B:24:A1:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821A9F6DAA9B8BA21042500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 71.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:a9:f6:da:a9:b8:ba:21:04:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=ddb02c92-c9f3-466a-a1e2-4bf85fe30dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:e0:b4:13:37:86:0a:8e:42:37:49:6d:c8: a1:6c:e3:04:e8:8a:2a:f9:12:61:ae:ca:ac:ab:b1: 42:45:1b:2b:10:28:f2:38:37:12:42:09:0f:a5:ce: 00:99:7b:fb:51:01:41:67:f5:5a:0b:88:71:3d:55: eb:14:44:39:ba:2d:43:f1:17:48:3f:c2:2a:db:d5: 5f:13:1e:90:cc:bb:c7:22:ff:91:30:11:fe:6a:59: 2f:63:08:c1:6b:25:cb:f8:84:c5:67:8d:40:af:2b: 3a:26:7d:85:6c:e0:d7:02:09:fb:f4:8e:9d:bf:af: fb:b0:95:a3:c8:a6:9f:b9:80:38:a0:27:e0:f7:bd: 08:b3:75:ca:e3:69:f3:b8:d3:12:26:ac:c2:df:c0: 28:09:4a:0a:7e:5d:2b:2b:97:b6:02:bb:92:da:4f: 6d:5c:30:f9:8d:30:b2:89:7d:d9:26:9c:82:33:de: 82:8d:01:ca:f9:5f:fb:0d:cf:29:d6:9f:e5:04:39: 46:0d:3c:40:77:18:f7:be:bc:33:ee:3d:85:25:10: eb:76:05:a9:54:fa:6a:b2:ac:52:14:ad:8f:2f:06: 23:e9:6c:3f:42:45:68:9b:fb:c1:4e:0d:5f:a1:18: 8d:7f:62:48:47:a7:b4:42:04:8c:2d:3a:2e:79:df: 4f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:91:2D:9A:95:9D:93:43:A8:7E:E4:F5:36:D5:F2:3B:24:A1:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f458baa-9da2-3084-a8ff-69b74d41f8d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c3:50:5f:90:8a:60:5e:82:43:91:87:2b:d2:7b:6c:b3:07: b7:1b:01:e3:2f:a6:88:16:ce:34:91:c9:53:e9:b1:48:ef:68: b2:8e:90:45:39:16:23:5c:d2:aa:c9:6c:6b:ae:f1:ed:52:e3: 82:35:04:3f:af:e1:f1:7b:ae:b8:01:2e:1b:53:08:4c:54:d3: 04:2b:3d:84:53:97:e5:23:b3:6b:9a:dc:f4:0b:4c:10:0d:bd: ee:67:f2:ae:93:cf:74:39:6a:a6:c9:43:67:12:8e:26:e9:8e: be:26:15:d3:9d:cd:34:de:95:36:27:c1:31:7e:b6:0a:41:18: 4e:47:9e:42:42:20:2d:c4:7e:23:85:64:aa:ec:ac:27:7b:92: 8c:3d:04:2f:0a:68:6d:dd:d7:6c:33:10:03:53:23:71:1a:51: 8e:d3:51:a5:f9:b7:26:37:b3:56:e5:eb:a8:80:26:1f:47:a3: 99:f1:e2:05:55:dd:03:0c:3e:06:ca:0f:d7:6a:59:f6:2b:09: ff:58:b3:be:b7:65:cc:16:0c:f8:97:3f:db:4b:48:88:26:d5: ee:af:bb:63:81:2f:07:f0:d1:38:bf:5c:c3:bb:18:9b:1a:81: fe:64:89:e4:9d:9d:6d:82:37:99:da:8e:4c:14:10:b6:eb:8a: 00:98:ba:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ian22qm4uiEEJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGRiMDJjOTItYzlmMy00NjZhLWExZTItNGJmODVmZTMwZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS/gtBM3hgqOQjdJbcihbOME6Ioq+RJhrsqs q7FCRRsrECjyODcSQgkPpc4AmXv7UQFBZ/VaC4hxPVXrFEQ5ui1D8RdIP8Iq29Vf Ex6QzLvHIv+RMBH+alkvYwjBayXL+ITFZ41Arys6Jn2FbODXAgn79I6dv6/7sJWj yKafuYA4oCfg970Is3XK42nzuNMSJqzC38AoCUoKfl0rK5e2AruS2k9tXDD5jTCy iX3ZJpyCM96CjQHK+V/7Dc8p1p/lBDlGDTxAdxj3vrwz7j2FJRDrdgWpVPpqsqxS FK2PLwYj6Ww/QkVom/vBTg1foRiNf2JIR6e0QgSMLToued9PYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+8kS2alZ2TQ6h+5PU21fI7JKF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY0NThiYWEtOWRhMi0z MDg0LWE4ZmYtNjliNzRkNDFmOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERx/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvDUF+QimBegkORhyvSe2yzB7cbAeMvpogWzjSRyVPpsUjvaLKOkEU5 FiNc0qrJbGuu8e1S44I1BD+v4fF7rrgBLhtTCExU0wQrPYRTl+Ujs2ua3PQLTBAN ve5n8q6Tz3Q5aqbJQ2cSjibpjr4mFdOdzTTelTYnwTF+tgpBGE5HnkJCIC3EfiOF ZKrsrCd7kow9BC8KaG3d12wzEANTI3EaUY7TUaX5tyY3s1bl66iAJh9Ho5nx4gVV 3QMMPgbKD9dqWfYrCf9Ys763ZcwWDPiXP9tLSIgm1e6vu2OBLwfw0Ti/XMO7GJsa gf5kieSdnW2CN5najkwUELbrigCYugc= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:39 2025 by rpki-client