$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa File: bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa (raw, json) Hash identifier: 4ytmH+2/yyLVdVBf1eNEgW+hAoYgbmxmYN58Fp/EmFo= Subject key identifier: A0:06:85:FD:3B:9B:5F:7C:C3:8D:FF:2F:84:3A:4E:16:25:17:B1:69 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC751DBCFB542F0E8337C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.28.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:51:db:cf:b5:42:f0:e8:33:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=7b698d32-92d2-4118-bcdf-4be8e9f7a926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:11:e9:a0:48:d6:e4:07:b1:3b:2b:ea:4b:56: 20:52:4b:6f:58:d5:9a:66:79:e9:c6:04:eb:60:84: 01:13:ab:84:68:7a:3f:63:38:dc:fc:71:78:f1:2d: be:d5:f0:6f:44:7c:d5:42:34:dd:18:94:14:7b:5f: e1:ae:83:54:c0:aa:47:4e:75:34:54:be:e5:42:4d: 46:11:1f:b1:79:e3:95:7e:ef:48:64:8d:42:0d:7a: ce:70:3c:a4:d7:76:6d:61:77:0c:ca:c3:cb:d6:56: 4f:08:06:e3:65:d7:2e:bd:b4:52:1c:00:64:14:cb: 30:d2:0c:b4:bb:22:6e:e8:4e:b6:ce:a6:31:18:b4: 19:71:6b:93:d5:f6:f1:f0:b4:fc:d7:1d:b6:03:c8: d5:19:18:ae:bf:69:1a:1c:91:fb:fd:4f:e0:c6:56: 5e:ec:f2:3d:cd:0f:a0:a8:59:85:65:f7:c6:a4:84: 5b:48:47:73:13:83:95:f4:e2:75:13:db:e6:48:07: 7f:39:fd:1c:51:63:02:8e:28:d1:21:7e:fe:7b:d2: d4:48:1a:9f:31:5d:e9:f5:1e:76:22:bf:3d:45:3a: a5:68:cb:e3:d0:f1:77:c6:37:6d:b7:b5:cd:de:ac: e9:7b:de:55:6c:d0:71:53:89:19:39:c7:d4:74:5b: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:06:85:FD:3B:9B:5F:7C:C3:8D:FF:2F:84:3A:4E:16:25:17:B1:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd2d9f6b-8dbc-3771-8907-99b5e7bf1c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b3:6b:d9:01:14:34:eb:8c:43:34:d8:a8:ff:b0:95:ee:0d: cb:c9:96:61:9e:49:b7:68:b1:ae:86:55:f4:77:fb:18:38:fc: ad:4d:f1:58:3d:ef:7d:cf:c9:f3:c3:08:8e:65:1a:d9:df:89: ba:6a:35:6b:d2:ed:b2:9e:75:1d:fe:b4:83:ba:a5:10:c4:0f: 40:3d:11:c6:1d:e2:82:cd:65:63:a1:99:a3:39:ec:73:0e:4a: eb:01:c7:95:5b:81:ba:d8:61:d2:24:91:4a:36:ef:a9:a0:d3: c2:ca:0e:75:64:2f:80:48:55:bf:71:66:f7:c4:69:52:2b:42: 3c:5d:68:d0:bd:9e:f1:96:e7:91:06:79:fe:6c:8d:69:7c:23: f8:8b:8b:8d:ab:b3:0a:df:22:0c:6e:7d:83:f4:3a:5a:54:47: 5b:ef:e0:10:f2:46:0f:70:a1:31:df:50:a3:3d:b3:47:bc:c7: f6:43:c5:bd:aa:45:fa:8d:b3:6e:44:44:d6:81:e6:7c:d4:6d: 1b:a0:85:3e:29:d4:16:f8:f5:99:ae:6b:39:8a:cd:3f:49:86: 8d:b1:3f:ad:5a:02:87:e4:af:f7:f0:be:03:9d:18:77:c2:51: 41:d5:cb:c1:54:b3:82:ec:9f:d6:69:2b:ca:cf:29:80:8b:d4: b2:69:fd:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1Hbz7VC8OgzfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk N2I2OThkMzItOTJkMi00MTE4LWJjZGYtNGJlOGU5ZjdhOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxHpoEjW5AexOyvqS1YgUktvWNWaZnnpxgTr YIQBE6uEaHo/Yzjc/HF48S2+1fBvRHzVQjTdGJQUe1/hroNUwKpHTnU0VL7lQk1G ER+xeeOVfu9IZI1CDXrOcDyk13ZtYXcMysPL1lZPCAbjZdcuvbRSHABkFMsw0gy0 uyJu6E62zqYxGLQZcWuT1fbx8LT81x22A8jVGRiuv2kaHJH7/U/gxlZe7PI9zQ+g qFmFZffGpIRbSEdzE4OV9OJ1E9vmSAd/Of0cUWMCjijRIX7+e9LUSBqfMV3p9R52 Ir89RTqlaMvj0PF3xjdtt7XN3qzpe95VbNBxU4kZOcfUdFsT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAGhf07m198w43/L4Q6ThYlF7FpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQyZDlmNmItOGRiYy0z NzcxLTg5MDctOTliNWU3YmYxYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWza9kBFDTrjEM02Kj/sJXuDcvJlmGeSbdosa6GVfR3+xg4/K1N8Vg9 733PyfPDCI5lGtnfibpqNWvS7bKedR3+tIO6pRDED0A9EcYd4oLNZWOhmaM57HMO SusBx5VbgbrYYdIkkUo276mg08LKDnVkL4BIVb9xZvfEaVIrQjxdaNC9nvGW55EG ef5sjWl8I/iLi42rswrfIgxufYP0OlpUR1vv4BDyRg9woTHfUKM9s0e8x/ZDxb2q RfqNs25ERNaB5nzUbRughT4p1Bb49ZmuazmKzT9Jho2xP61aAofkr/fwvgOdGHfC UUHVy8FUs4Lsn9ZpK8rPKYCL1LJp/fQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:14:44 2025 by rpki-client