$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d98ffe9-7003-3078-9deb-8ec252d88329.roa File: 6d98ffe9-7003-3078-9deb-8ec252d88329.roa (raw, json) Hash identifier: j13hwzQLxh0DM9dqKLFjIdAWc0XEZIK2qlfbhYPfIIw= Subject key identifier: 1B:3B:BF:9D:F5:BA:77:B0:EF:CF:CB:68:76:2A:B3:6A:9A:77:F7:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B2066DFCF0AF3A06D0410C890 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d98ffe9-7003-3078-9deb-8ec252d88329.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.29.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:df:cf:0a:f3:a0:6d:04:10:c8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=3622d557-e2cf-4a79-bdeb-909bf90d1d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c5:0d:f5:d2:de:82:9b:79:df:2a:d5:88:3d: dc:5c:7b:01:43:02:63:d6:7f:fe:95:77:9c:13:94: 4b:2f:c5:4c:9c:10:26:4b:f1:e5:8e:95:2e:98:28: 47:2a:7b:78:ba:3b:49:80:ae:dd:a3:49:ee:5b:4e: 87:bf:3e:0c:e5:94:4a:9f:82:fd:97:5e:f4:cb:d5: 16:0a:2e:23:99:7a:04:23:f5:65:83:e9:9b:0c:97: db:d9:01:3c:84:47:1b:84:36:f7:49:23:bf:30:bd: 3f:fe:8c:9c:77:b1:2b:8f:e1:12:87:ce:c8:7d:38: 07:98:21:11:d7:d6:64:d6:49:20:29:b6:84:9c:a3: 94:3d:7a:f8:79:5a:64:eb:93:f6:14:06:42:a1:8b: bc:40:7e:8b:05:47:41:72:47:68:20:eb:64:10:f6: df:56:77:dd:d8:dd:38:6d:8e:92:4a:9a:d5:7f:62: f0:be:41:85:c8:86:ca:4b:2d:06:00:d2:da:9e:28: b4:d5:c1:e9:1f:7c:36:c6:00:60:9d:0a:2f:6d:41: 7e:4e:55:a2:c9:ee:13:f5:0d:48:24:7e:65:1e:cf: e6:d1:88:59:e4:43:3f:a6:18:9e:0f:0f:f3:6d:78: 36:68:7b:52:e7:c5:d5:05:75:70:b6:3d:09:78:ef: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:BF:9D:F5:BA:77:B0:EF:CF:CB:68:76:2A:B3:6A:9A:77:F7:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6d98ffe9-7003-3078-9deb-8ec252d88329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:34:c1:7c:6b:0a:43:95:22:ee:05:9c:7d:34:95:af:07:f1: 9f:59:cc:9a:d4:b0:b5:57:ca:37:77:d2:0f:f1:46:41:a1:9e: 44:b2:31:dc:cd:12:c2:ad:a0:95:d8:dc:d5:d3:78:d5:ad:6a: 55:fc:c4:5c:5f:d8:d6:87:12:f2:9b:c4:60:30:6e:63:a7:b0: 3d:ec:ea:c3:e8:f5:46:78:ef:bc:12:43:a9:07:48:b0:6e:dd: c1:9d:89:de:5e:e9:b8:38:09:a1:ca:c0:eb:6f:7f:cc:37:49: ae:72:f7:c6:34:e9:25:b9:58:64:03:dd:f3:ba:a9:d7:b8:61: 50:85:06:ce:b6:06:fa:1c:57:9d:d7:e4:dd:55:f6:ea:02:75: 4a:a0:f5:38:c8:82:98:46:82:98:bc:c8:fa:37:c8:c2:0a:9b: 6f:c8:dd:5d:2b:a1:63:85:88:f6:c4:c3:ab:16:5c:21:29:ae: 3c:27:44:11:24:08:59:87:b0:95:99:07:20:e5:f2:91:b6:df: 9a:ea:75:01:ef:6e:ec:d4:92:36:28:b4:98:2b:2a:47:56:f4: f8:fe:cd:69:ed:9a:99:04:bb:e0:f1:af:84:92:b2:c0:35:76: 67:06:af:4f:2a:b0:2b:64:56:26:4d:a6:cb:36:ef:11:5d:18: 08:bd:d4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZt/PCvOgbQQQyJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk MzYyMmQ1NTctZTJjZi00YTc5LWJkZWItOTA5YmY5MGQxZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UN9dLegpt53yrViD3cXHsBQwJj1n/+lXec E5RLL8VMnBAmS/HljpUumChHKnt4ujtJgK7do0nuW06Hvz4M5ZRKn4L9l170y9UW Ci4jmXoEI/Vlg+mbDJfb2QE8hEcbhDb3SSO/ML0//oycd7Erj+ESh87IfTgHmCER 19Zk1kkgKbaEnKOUPXr4eVpk65P2FAZCoYu8QH6LBUdBckdoIOtkEPbfVnfd2N04 bY6SSprVf2LwvkGFyIbKSy0GANLanii01cHpH3w2xgBgnQovbUF+TlWiye4T9Q1I JH5lHs/m0YhZ5EM/phieDw/zbXg2aHtS58XVBXVwtj0JeO+EcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs7v531unew78/LaHYqs2qad/dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmQ5OGZmZTktNzAwMy0z MDc4LTlkZWItOGVjMjUyZDg4MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM0wXxrCkOVIu4FnH00la8H8Z9ZzJrUsLVXyjd30g/xRkGhnkSyMdzN EsKtoJXY3NXTeNWtalX8xFxf2NaHEvKbxGAwbmOnsD3s6sPo9UZ477wSQ6kHSLBu 3cGdid5e6bg4CaHKwOtvf8w3Sa5y98Y06SW5WGQD3fO6qde4YVCFBs62BvocV53X 5N1V9uoCdUqg9TjIgphGgpi8yPo3yMIKm2/I3V0roWOFiPbEw6sWXCEprjwnRBEk CFmHsJWZByDl8pG235rqdQHvbuzUkjYotJgrKkdW9Pj+zWntmpkEu+Dxr4SSssA1 dmcGr08qsCtkViZNpss27xFdGAi91MQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:08:48 2025 by rpki-client