$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa File: 8fe10703-6f23-359f-98b0-f95f4892cde6.roa (raw, json) Hash identifier: onfJCEWO5UbizfxY7ogVzDBR4nvvACZVdoOWUYAWhMo= Subject key identifier: 59:C4:8F:2D:5B:E6:6D:47:A0:C3:C0:3F:5E:55:95:11:92:95:43:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA80F412B74836AE06900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.28.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a8:0f:41:2b:74:83:6a:e0:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=92ac6838-905f-45a9-a6f4-7b0ccbbb6e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:af:76:71:ec:5f:0c:c4:c9:42:47:bf:4d: 10:3a:b0:4c:f7:b0:5c:e8:7c:79:fd:b8:cd:52:f6: 66:0f:6a:87:a7:97:e1:86:3c:87:96:57:cb:de:17: 94:a9:27:c1:d6:fb:82:ef:a9:c4:6a:0a:1e:c7:b2: cf:d7:f6:c7:08:eb:8c:55:ff:01:18:2d:59:53:33: 24:f1:fb:19:a7:01:11:b1:be:8e:47:46:8e:24:ec: 5a:e3:db:67:6b:a8:b5:ce:72:42:94:42:ef:48:c1: e3:3e:78:12:66:92:98:83:90:73:bd:8a:28:33:b7: f8:e7:7e:95:fa:aa:55:36:35:60:1c:70:ad:d6:e1: 01:b0:40:f5:e8:9f:d2:16:5a:9d:60:2b:59:96:6e: c7:62:ca:f7:79:f3:94:95:08:77:fd:56:01:66:00: be:1d:2f:9b:0d:68:99:8f:6d:e3:8e:e3:54:5b:e9: 04:19:b8:a9:0a:79:6b:63:e9:8d:f4:7b:e7:e2:10: 17:f2:b8:32:1f:28:06:2b:a9:ee:e9:38:2a:7e:47: d9:d1:df:73:d9:72:c6:dc:bf:d0:7c:7c:59:83:4f: 59:90:c0:15:6b:a3:13:a3:a1:25:8c:2e:c0:9a:29: 40:8a:d1:d4:83:46:9f:89:e1:08:e4:ac:03:4a:15: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C4:8F:2D:5B:E6:6D:47:A0:C3:C0:3F:5E:55:95:11:92:95:43:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe10703-6f23-359f-98b0-f95f4892cde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:24:7b:36:25:ab:f3:f8:07:8e:99:a7:64:c1:70:64:f0:af: 65:e0:23:63:8e:6d:92:c4:ba:08:83:dd:4a:f2:4c:db:8b:de: 90:dc:7f:4e:09:93:08:3d:98:58:48:f5:8c:52:c1:5f:07:3c: 51:38:cc:1f:47:f4:39:34:16:ba:52:10:c3:ac:e6:c3:99:0c: 6f:fa:48:23:1d:fe:c4:66:60:ef:ff:2c:3d:e7:d1:b0:72:26: ec:6d:22:67:6e:b6:29:87:3a:be:25:14:70:0c:13:6f:cc:7c: d6:ba:ba:21:2f:86:56:67:39:4b:67:93:7f:b9:dd:61:fe:f8: 94:96:f0:1d:43:9f:9e:a1:25:11:e3:30:e4:6a:e5:e5:fb:08: 41:5e:0c:07:91:aa:13:3c:ff:b0:9b:d1:17:bf:7f:72:2b:ce: 41:20:80:70:bc:28:9d:6c:55:7b:77:53:1e:50:89:29:d2:53: 3d:8d:9a:33:84:61:88:f7:d7:1e:ea:66:b5:18:e7:13:40:db: e7:03:76:25:d3:da:cf:e2:d5:13:55:90:2a:98:bf:13:6c:4c: 76:67:05:fe:10:a4:60:bd:16:bd:c1:67:84:36:9a:b8:7d:02: 36:81:2c:e9:2a:a4:9a:48:1a:b2:0c:3a:5a:ae:a5:4d:3f:1e: 49:9b:72:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKgPQSt0g2rgaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTJhYzY4MzgtOTA1Zi00NWE5LWE2ZjQtN2IwY2NiYmI2ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGuvdnHsXwzEyUJHv00QOrBM97Bc6Hx5/bjN UvZmD2qHp5fhhjyHllfL3heUqSfB1vuC76nEagoex7LP1/bHCOuMVf8BGC1ZUzMk 8fsZpwERsb6OR0aOJOxa49tna6i1znJClELvSMHjPngSZpKYg5BzvYooM7f4536V +qpVNjVgHHCt1uEBsED16J/SFlqdYCtZlm7HYsr3efOUlQh3/VYBZgC+HS+bDWiZ j23jjuNUW+kEGbipCnlrY+mN9Hvn4hAX8rgyHygGK6nu6TgqfkfZ0d9z2XLG3L/Q fHxZg09ZkMAVa6MTo6EljC7AmilAitHUg0afieEI5KwDShWKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnEjy1b5m1HoMPAP15VlRGSlUMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZlMTA3MDMtNmYyMy0z NTlmLTk4YjAtZjk1ZjQ4OTJjZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgkezYlq/P4B46Zp2TBcGTwr2XgI2OObZLEugiD3UryTNuL3pDcf04J kwg9mFhI9YxSwV8HPFE4zB9H9Dk0FrpSEMOs5sOZDG/6SCMd/sRmYO//LD3n0bBy JuxtImdutimHOr4lFHAME2/MfNa6uiEvhlZnOUtnk3+53WH++JSW8B1Dn56hJRHj MORq5eX7CEFeDAeRqhM8/7Cb0Re/f3IrzkEggHC8KJ1sVXt3Ux5QiSnSUz2NmjOE YYj31x7qZrUY5xNA2+cDdiXT2s/i1RNVkCqYvxNsTHZnBf4QpGC9Fr3BZ4Q2mrh9 AjaBLOkqpJpIGrIMOlqupU0/HkmbcnE= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:35 2025 by rpki-client