$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa File: d1b55f89-5ffd-3a4b-8e48-37e825835068.roa (raw, json) Hash identifier: fULifPCaZektY6cBoKP3OrNyt1tQbp7lP/WMhhh3lHI= Subject key identifier: 5B:4D:93:54:9C:48:F7:09:96:25:6B:59:FB:9B:CF:54:4A:AF:9C:8F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9E0A92F272AFD2A2C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.30.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9e:0a:92:f2:72:af:d2:a2:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=d654d3a2-85e6-4e0f-a417-0832184f9c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:c8:ed:cc:d8:7f:a7:e9:de:c4:45:d1:37: f7:13:3d:f4:86:6e:14:37:e6:71:4a:79:4f:21:2a: b0:fc:12:63:f2:a4:38:48:65:80:cc:28:2f:36:e2: 83:89:4a:b5:ea:0c:16:e4:46:1c:a4:4e:79:03:dd: 4f:96:14:cd:a9:e6:b8:54:31:4b:8e:72:96:b8:9a: 7b:4c:d5:7e:27:42:80:6c:85:e6:6b:99:78:ed:f6: 80:d6:e0:6f:15:a3:b5:7a:42:b6:7f:c6:da:64:60: 73:09:aa:1a:7d:0b:8e:e9:cf:a8:64:c7:bc:7c:4e: 00:92:a4:6e:4c:e8:33:1f:93:cd:dc:94:2c:f9:12: 37:8e:5b:ce:3a:c8:47:e6:f1:64:59:76:25:7f:2d: 24:8e:7e:19:0c:d7:7e:c9:10:60:d7:80:97:c9:dd: 26:e2:32:55:5c:b0:78:1b:6f:4d:5c:56:20:5d:f9: d9:cb:95:bc:0d:09:74:a2:5f:0b:23:5e:32:2f:a0: 53:d1:2d:be:f7:95:31:55:85:f2:ea:8d:6d:cd:55: 2a:57:aa:52:e5:97:c8:99:cd:47:3c:bc:56:02:5f: 29:dd:e1:64:5a:d6:9f:e5:ee:77:0d:93:a1:84:5d: 55:eb:00:b0:68:60:8d:49:8f:dc:51:46:e2:ba:af: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:93:54:9C:48:F7:09:96:25:6B:59:FB:9B:CF:54:4A:AF:9C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1b55f89-5ffd-3a4b-8e48-37e825835068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ae:1e:04:bf:d6:b5:21:fe:c1:64:26:9e:d1:e7:1a:96:f0: 03:e5:25:b0:87:25:4e:91:49:ba:05:6a:c5:42:f2:6a:65:84: 9e:6e:5f:b8:97:c1:fd:0b:4a:5d:d2:3f:17:7a:1b:b8:4a:05: ac:2b:8c:27:06:4d:6e:c9:5c:38:40:3f:5f:e4:87:ab:60:c5: df:83:d7:a6:ca:f2:32:30:1b:bc:1a:06:1e:d6:4d:c6:44:c8: 8c:95:57:e2:84:ce:be:25:e1:20:6a:11:00:0e:d3:80:7f:63: 15:f4:56:5c:7d:15:09:59:47:80:2e:60:76:ec:b1:9e:ba:50: 1b:ca:73:75:63:3c:71:99:03:16:3e:02:52:39:e9:7a:09:4c: 60:94:71:61:72:0e:dd:10:8c:60:bc:ab:ce:2c:93:a9:e2:f0: eb:d8:61:c3:83:1a:76:dc:12:6e:fd:72:05:ef:0f:f7:82:95: d8:59:2a:7f:8a:d7:f2:27:6e:eb:28:12:74:9a:49:4e:fd:73: 51:91:5d:b6:8d:60:77:a0:eb:c3:ef:f4:39:51:d5:c6:0f:88: 47:47:0b:49:67:55:ea:71:97:9f:f4:cc:97:e4:30:57:2b:24: f3:f1:2f:6c:a7:aa:fa:c0:b7:8a:a3:68:b8:4a:d1:a0:af:55: c0:a9:e4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ4KkvJyr9KixIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDY1NGQzYTItODVlNi00ZTBmLWE0MTctMDgzMjE4NGY5YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmevI7czYf6fp3sRF0Tf3Ez30hm4UN+ZxSnlP ISqw/BJj8qQ4SGWAzCgvNuKDiUq16gwW5EYcpE55A91PlhTNqea4VDFLjnKWuJp7 TNV+J0KAbIXma5l47faA1uBvFaO1ekK2f8baZGBzCaoafQuO6c+oZMe8fE4AkqRu TOgzH5PN3JQs+RI3jlvOOshH5vFkWXYlfy0kjn4ZDNd+yRBg14CXyd0m4jJVXLB4 G29NXFYgXfnZy5W8DQl0ol8LI14yL6BT0S2+95UxVYXy6o1tzVUqV6pS5ZfImc1H PLxWAl8p3eFkWtaf5e53DZOhhF1V6wCwaGCNSY/cUUbiuq9q0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtNk1ScSPcJliVrWfubz1RKr5yPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFiNTVmODktNWZmZC0z YTRiLThlNDgtMzdlODI1ODM1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWuHgS/1rUh/sFkJp7R5xqW8APlJbCHJU6RSboFasVC8mplhJ5uX7iX wf0LSl3SPxd6G7hKBawrjCcGTW7JXDhAP1/kh6tgxd+D16bK8jIwG7waBh7WTcZE yIyVV+KEzr4l4SBqEQAO04B/YxX0Vlx9FQlZR4AuYHbssZ66UBvKc3VjPHGZAxY+ AlI56XoJTGCUcWFyDt0QjGC8q84sk6ni8OvYYcODGnbcEm79cgXvD/eCldhZKn+K 1/InbusoEnSaSU79c1GRXbaNYHeg68Pv9DlR1cYPiEdHC0lnVepxl5/0zJfkMFcr JPPxL2ynqvrAt4qjaLhK0aCvVcCp5C8= -----END CERTIFICATE-----Generated at Fri Oct 10 17:53:59 2025 by rpki-client