$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa File: acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa (raw, json) Hash identifier: yMJQTDjFgpTetBqbIgzPL+Dgxc8cu7/E08ZPQI7fFRE= Subject key identifier: D2:DF:61:51:47:72:48:68:D2:E8:2D:39:A9:FF:8C:E5:B1:A9:18:05 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B68FCA9D7154B34737E6C6080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.30.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a9:d7:15:4b:34:73:7e:6c:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=dc4e1d4b-aff3-4022-bfea-da70fb08461c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:96:a0:a1:1c:72:64:15:9a:3a:67:fe:7b: ee:5f:3b:2f:99:ac:b1:a1:aa:a0:d1:02:5e:ef:74: ff:19:e0:0f:37:8c:89:f3:76:fd:a3:ac:4a:37:ee: 06:03:99:c4:fa:17:6a:1f:50:1e:4e:ff:c5:bc:66: 30:0b:f3:82:b0:1c:85:14:b2:1e:16:5a:66:62:77: 69:e3:c4:c0:9a:fb:fd:b5:aa:a1:68:39:5b:5e:71: cc:60:fb:f7:d3:75:d8:02:9e:8c:e1:fd:40:7b:c4: 43:b6:f9:a6:0b:b8:d3:63:4f:bd:16:75:a2:09:5f: ed:dc:5c:bb:9b:a0:3e:d7:7d:9f:f4:8e:cc:d9:f4: 37:54:fc:ed:4b:e1:84:47:8f:be:69:c5:64:48:2b: 01:59:7c:b5:7b:45:4a:b8:56:85:51:92:30:f5:91: 6e:62:2e:58:97:69:e6:2d:32:b9:05:57:7f:2f:d0: 0e:02:30:e3:f8:6f:fc:b3:43:8a:87:b2:b0:80:8c: 57:20:2e:b5:cd:68:2d:30:10:92:47:3c:cc:e5:c2: ba:2d:ad:f9:3a:1b:52:ea:e1:5c:13:98:f9:aa:28: a9:e6:3a:60:b3:60:f5:f9:fb:62:ab:27:c4:94:44: 08:6c:ad:bb:b8:e0:ae:9c:c8:97:d1:d8:a0:f6:8c: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DF:61:51:47:72:48:68:D2:E8:2D:39:A9:FF:8C:E5:B1:A9:18:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acfdb318-e82c-36c9-ac4e-5636ec475ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:50:52:f5:85:e3:00:a9:4b:09:11:d8:69:fe:a5:ca:aa:7b: f8:a9:e6:b2:37:55:6b:c2:83:39:81:25:bd:86:f5:ea:27:47: 1e:2f:d8:b7:7c:fc:69:26:95:a3:98:3f:d2:53:fc:c4:e4:81: ef:7c:85:34:ba:94:9a:9a:3f:c3:1d:1d:73:4d:f7:71:74:fb: 19:a5:8a:08:a3:6f:0b:78:c3:41:26:40:c1:a0:30:53:ab:be: 37:b1:21:c1:13:15:a9:39:f6:17:9c:97:07:0e:dd:b9:ee:6a: 4b:15:3b:1e:5a:bd:bf:f7:99:a2:3b:74:9e:33:06:6c:af:a4: 43:54:0c:33:80:dd:b8:c5:e0:18:3a:26:77:3f:49:2d:e2:3e: 02:d7:46:c6:e3:5f:1d:61:50:ef:60:81:83:51:5f:c7:40:b2: 09:c6:9a:ae:7d:8b:ee:4f:41:cc:7b:52:f6:01:e7:d4:7a:50: ae:8c:12:8a:51:61:34:07:8c:38:96:d6:99:46:1a:93:b3:ca: ef:e8:0c:10:7d:52:43:fb:cf:7b:3e:c5:14:ce:b4:18:dd:e3: 5e:0c:60:ca:79:1d:b2:cd:7e:e3:1f:35:c9:28:d3:eb:7f:64: be:21:35:2a:e5:12:ca:68:f1:a9:3a:df:3b:bf:cc:2b:12:2f: bd:00:68:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KnXFUs0c35sYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ZGM0ZTFkNGItYWZmMy00MDIyLWJmZWEtZGE3MGZiMDg0NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApISWoKEccmQVmjpn/nvuXzsvmayxoaqg0QJe 73T/GeAPN4yJ83b9o6xKN+4GA5nE+hdqH1AeTv/FvGYwC/OCsByFFLIeFlpmYndp 48TAmvv9taqhaDlbXnHMYPv303XYAp6M4f1Ae8RDtvmmC7jTY0+9FnWiCV/t3Fy7 m6A+132f9I7M2fQ3VPztS+GER4++acVkSCsBWXy1e0VKuFaFUZIw9ZFuYi5Yl2nm LTK5BVd/L9AOAjDj+G/8s0OKh7KwgIxXIC61zWgtMBCSRzzM5cK6La35OhtS6uFc E5j5qiip5jpgs2D1+ftiqyfElEQIbK27uOCunMiX0dig9ozHvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLfYVFHckho0ugtOan/jOWxqRgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNmZGIzMTgtZTgyYy0z NmM5LWFjNGUtNTYzNmVjNDc1ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERQUvWF4wCpSwkR2Gn+pcqqe/ip5rI3VWvCgzmBJb2G9eonRx4v2Ld8 /GkmlaOYP9JT/MTkge98hTS6lJqaP8MdHXNN93F0+xmligijbwt4w0EmQMGgMFOr vjexIcETFak59heclwcO3bnuaksVOx5avb/3maI7dJ4zBmyvpENUDDOA3bjF4Bg6 Jnc/SS3iPgLXRsbjXx1hUO9ggYNRX8dAsgnGmq59i+5PQcx7UvYB59R6UK6MEopR YTQHjDiW1plGGpOzyu/oDBB9UkP7z3s+xRTOtBjd414MYMp5HbLNfuMfNcko0+t/ ZL4hNSrlEspo8ak63zu/zCsSL70AaJk= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:14 2025 by rpki-client