$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa File: 9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa (raw, json) Hash identifier: Cf4Y0Zj+Szz9bEMLEeRNUtRZ3/H1u/NP6ckQvirsxVU= Subject key identifier: 6B:B1:02:AD:FF:89:B5:7D:0E:D0:E7:57:6B:41:27:1B:7B:3E:B6:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15CEF49CF7F866030A568 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 71.29.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5c:ef:49:cf:7f:86:60:30:a5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=5dd216ff-7055-4cd9-814d-cc82c4fb03ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:c1:9c:da:3c:66:45:e9:b9:1f:27:a7:ef: 41:07:49:4b:02:fb:75:ad:af:15:fd:d0:9c:2f:92: 15:53:0f:97:d6:38:ef:8d:4d:db:af:85:ca:71:fe: 48:e2:81:7c:48:84:79:c7:1a:51:32:90:8a:67:83: d6:02:84:8d:94:ad:6a:f0:ff:18:2d:5c:a2:49:7c: eb:0a:f8:19:d5:54:ee:13:3a:76:10:79:88:81:84: 07:00:8e:f2:ec:58:16:dd:7e:e6:f6:1f:27:de:33: 45:8c:4c:ab:df:be:e6:bb:d0:c2:8b:65:8d:9e:59: cb:52:4a:4f:91:22:b8:cd:1f:bb:26:93:df:2b:86: f5:ce:37:9a:77:00:59:02:fe:78:e1:89:d1:9a:a9: df:84:fb:8d:7b:5f:6a:cb:af:b6:1f:82:2c:28:ec: 46:06:ae:bc:28:2a:b1:50:4e:90:a6:22:7e:48:6b: 77:c3:69:94:3f:41:a2:a7:60:ae:5c:28:c8:29:26: f6:3e:dd:3e:b4:c9:79:f4:f6:27:61:9c:ea:93:ce: 29:bc:5e:9e:8d:37:7f:d8:6f:bd:d2:8b:1e:93:e8: 9a:dc:ee:05:33:3f:67:72:24:f8:c4:d3:f0:5f:34: 4e:66:c7:02:22:42:8c:11:e2:fd:f4:9c:43:c0:4e: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B1:02:AD:FF:89:B5:7D:0E:D0:E7:57:6B:41:27:1B:7B:3E:B6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9cbf8028-c871-33fb-9e2c-c30e54f030f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:eb:13:f3:8a:e5:67:ba:ae:6d:92:3e:59:96:d7:76:a6:3c: 5d:f0:5d:6f:9a:6a:9a:3a:83:6c:4a:66:de:fa:52:ef:19:b9: 72:1b:63:77:76:af:43:ea:41:fa:6e:20:1e:b2:32:22:75:c0: 4a:24:c2:3b:7a:ac:e4:9a:dd:d1:bd:a1:f8:7e:0e:63:f9:78: 66:c7:75:20:e5:f6:81:8f:5c:53:b7:37:c1:2b:e2:92:85:e5: ac:9a:63:87:ee:4e:bf:38:e1:e1:92:00:3c:6a:8d:56:12:4f: 85:a6:98:ac:19:01:b7:ad:47:65:e4:d4:cd:fb:95:04:5c:7a: d2:a1:32:a1:58:2d:0d:84:83:72:d6:8f:7a:9c:31:db:31:82: c5:7f:73:a8:62:0a:70:8d:40:9a:33:a9:fc:de:cb:ea:21:0d: 12:c0:10:91:7f:1b:73:71:cb:26:7c:a7:85:97:57:7a:0f:0b: 27:86:1b:66:1f:4c:a0:87:46:d4:6e:98:c4:86:d5:2b:3b:1a: 56:59:f8:29:e2:b9:ad:5a:d4:e1:ad:83:fd:3c:2e:8e:ff:be: 87:cf:39:86:90:e7:1b:94:5b:fd:22:ba:4f:b7:75:53:34:3b: 01:b5:49:03:e6:da:36:13:6f:74:69:11:32:a2:21:28:db:de: 30:6e:c8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVzvSc9/hmAwpWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWRkMjE2ZmYtNzA1NS00Y2Q5LTgxNGQtY2M4MmM0ZmIwM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMHBnNo8ZkXpuR8np+9BB0lLAvt1ra8V/dCc L5IVUw+X1jjvjU3br4XKcf5I4oF8SIR5xxpRMpCKZ4PWAoSNlK1q8P8YLVyiSXzr CvgZ1VTuEzp2EHmIgYQHAI7y7FgW3X7m9h8n3jNFjEyr377mu9DCi2WNnlnLUkpP kSK4zR+7JpPfK4b1zjeadwBZAv544YnRmqnfhPuNe19qy6+2H4IsKOxGBq68KCqx UE6QpiJ+SGt3w2mUP0Gip2CuXCjIKSb2Pt0+tMl59PYnYZzqk84pvF6ejTd/2G+9 0osek+ia3O4FMz9nciT4xNPwXzROZscCIkKMEeL99JxDwE4wPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuxAq3/ibV9DtDnV2tBJxt7PrY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWNiZjgwMjgtYzg3MS0z M2ZiLTllMmMtYzMwZTU0ZjAzMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvrE/OK5We6rm2SPlmW13amPF3wXW+aapo6g2xKZt76Uu8ZuXIbY3d2 r0PqQfpuIB6yMiJ1wEokwjt6rOSa3dG9ofh+DmP5eGbHdSDl9oGPXFO3N8Er4pKF 5ayaY4fuTr844eGSADxqjVYST4WmmKwZAbetR2Xk1M37lQRcetKhMqFYLQ2Eg3LW j3qcMdsxgsV/c6hiCnCNQJozqfzey+ohDRLAEJF/G3NxyyZ8p4WXV3oPCyeGG2Yf TKCHRtRumMSG1Ss7GlZZ+Cniua1a1OGtg/08Lo7/vofPOYaQ5xuUW/0iuk+3dVM0 OwG1SQPm2jYTb3RpETKiISjb3jBuyPI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:23:31 2025 by rpki-client