$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba56bca8-2139-3331-aef8-42bee1491424.roa File: ba56bca8-2139-3331-aef8-42bee1491424.roa (raw, json) Hash identifier: fCa10wagcM+NUF/z80QUOTkIR9vhz3AOy9RUtYK8WEY= Subject key identifier: C7:3F:6B:E3:88:E4:3D:5C:67:D7:13:7E:4F:3B:0C:56:F5:56:54:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B278FDEFA2E65047EF85E6880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba56bca8-2139-3331-aef8-42bee1491424.roa Signing time: Thu 11 Sep 2025 02:34:06 +0000 ROA not before: Thu 11 Sep 2025 02:34:06 +0000 ROA not after: Wed 10 Dec 2025 03:34:06 +0000 asID: 7029 IP address blocks: 71.31.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:8f:de:fa:2e:65:04:7e:f8:5e:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 02:34:06 2025 GMT Not After : Dec 10 03:34:06 2025 GMT Subject: CN=a12e5a62-2c8e-4e48-b108-3fab29743ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:f2:f1:c9:7c:fa:b8:c1:24:84:a8:6b:9a: be:bd:02:e0:d4:80:19:6c:7d:d3:33:fd:2c:35:b6: 3f:e6:27:bb:68:c9:d4:ed:8d:85:b9:43:3a:0b:e5: 8c:d1:c4:59:a0:4b:be:7b:e2:20:6d:ec:69:45:c4: c0:11:77:e2:8c:36:59:f8:0f:06:43:b3:27:7b:8a: 90:95:d6:d0:38:22:9f:40:50:20:3f:06:e4:e5:e3: 0b:dc:bf:83:4c:ba:7a:13:8a:59:12:f2:f9:a7:19: cc:8d:53:cf:3a:2b:4d:4b:0a:0c:c4:c4:b8:ce:1f: f4:7b:95:77:ee:58:60:ba:7f:28:53:e0:40:c4:d5: 5b:7d:d0:71:68:26:18:c8:7e:b2:fa:31:22:de:de: 2c:2c:17:12:13:ff:5f:f5:1b:61:8d:f1:e9:42:d3: bd:61:c9:85:d3:ce:63:b4:1f:e2:11:cc:97:a0:36: 2d:4b:7a:03:15:d7:4b:36:b8:08:2d:0d:81:9e:76: d1:18:dd:1f:e6:58:59:57:23:3c:0d:41:9e:9a:b0: 5e:5b:c0:d8:d5:8a:53:59:8a:b2:f2:84:67:6e:31: b9:d7:31:b8:0c:6d:58:63:4d:53:6a:9a:7d:84:ff: b1:1f:cd:86:18:06:bb:e1:40:2d:2a:e5:dc:2c:89: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3F:6B:E3:88:E4:3D:5C:67:D7:13:7E:4F:3B:0C:56:F5:56:54:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba56bca8-2139-3331-aef8-42bee1491424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5c:96:d9:a4:eb:e6:36:21:aa:7d:2c:84:dd:d6:6e:28:b7: 8e:46:9a:bc:a6:9f:68:19:be:a1:ed:bf:29:e6:77:27:3f:29: b6:77:e7:0c:0c:bd:c6:db:3a:42:c9:e9:f4:d9:e6:10:42:04: 4b:0a:d0:a5:ef:09:47:a8:16:2f:26:aa:45:31:70:56:d5:66: 80:81:85:98:a1:80:4d:93:68:8b:d8:cf:a9:02:1f:01:d3:a0: 9c:40:ff:0f:e6:b6:66:6b:69:fe:61:32:f6:35:de:7e:f2:ea: c7:1a:dc:88:19:7d:32:d5:69:47:c4:20:02:d9:e1:63:18:b6: 9c:43:94:f6:7a:01:a9:94:5c:4e:ca:c8:37:af:38:7e:9f:1b: 4a:40:7a:49:c5:51:d8:20:b0:1f:94:6e:3a:26:ea:1b:a1:fe: c8:b1:34:88:e6:58:c1:b8:9a:1e:84:2f:b2:d1:bf:c6:1f:f4: 09:c9:e1:e9:a5:bc:ec:40:be:31:34:73:2c:f6:94:fd:b4:e5: 2a:91:c4:21:63:50:34:6f:13:57:49:0e:f0:04:9c:b1:56:81: 83:b6:10:58:1b:5d:67:03:b5:7e:42:ff:36:d1:94:7e:c1:03: 6a:4a:5c:d5:76:6f:03:ca:c9:f6:4b:d6:2d:dd:16:ed:97:a6: 5f:25:f4:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnj976LmUEfvheaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMTAyMzQwNloXDTI1MTIxMDAzMzQwNlowLzEtMCsGA1UEAxMk YTEyZTVhNjItMmM4ZS00ZTQ4LWIxMDgtM2ZhYjI5NzQzYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigLy8cl8+rjBJISoa5q+vQLg1IAZbH3TM/0s NbY/5ie7aMnU7Y2FuUM6C+WM0cRZoEu+e+IgbexpRcTAEXfijDZZ+A8GQ7Mne4qQ ldbQOCKfQFAgPwbk5eML3L+DTLp6E4pZEvL5pxnMjVPPOitNSwoMxMS4zh/0e5V3 7lhgun8oU+BAxNVbfdBxaCYYyH6y+jEi3t4sLBcSE/9f9RthjfHpQtO9YcmF085j tB/iEcyXoDYtS3oDFddLNrgILQ2BnnbRGN0f5lhZVyM8DUGemrBeW8DY1YpTWYqy 8oRnbjG51zG4DG1YY01Tapp9hP+xH82GGAa74UAtKuXcLInegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc/a+OI5D1cZ9cTfk87DFb1VlTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmE1NmJjYTgtMjEzOS0z MzMxLWFlZjgtNDJiZWUxNDkxNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx9xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApcltmk6+Y2Iap9LITd1m4ot45Gmrymn2gZvqHtvynmdyc/KbZ35wwM vcbbOkLJ6fTZ5hBCBEsK0KXvCUeoFi8mqkUxcFbVZoCBhZihgE2TaIvYz6kCHwHT oJxA/w/mtmZraf5hMvY13n7y6sca3IgZfTLVaUfEIALZ4WMYtpxDlPZ6AamUXE7K yDevOH6fG0pAeknFUdggsB+Ubjom6huh/sixNIjmWMG4mh6EL7LRv8Yf9AnJ4eml vOxAvjE0cyz2lP205SqRxCFjUDRvE1dJDvAEnLFWgYO2EFgbXWcDtX5C/zbRlH7B A2pKXNV2bwPKyfZL1i3dFu2Xpl8l9II= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:30 2025 by rpki-client