$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa File: d28833b1-82b4-3580-9997-e10e5e94eaf9.roa (raw, json) Hash identifier: HKRyVZFUcZDfZxpRK9UlPLcymU9qHTtlHJnqaE+UQAs= Subject key identifier: 99:32:83:9F:CA:B1:A6:19:7C:57:FE:AA:16:79:52:71:D8:D4:9F:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B1806EC45277F385BF8C6A182 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.30.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ec:45:27:7f:38:5b:f8:c6:a1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=fd992537-e698-41de-8d09-4e28e41d9cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:32:88:0b:04:81:31:41:c0:40:66:e6:ea: 02:8c:f4:d2:cf:f2:a7:05:bf:51:9a:66:b5:64:2b: 34:23:57:6f:d0:43:82:23:2e:31:63:29:80:b7:cd: 3b:b8:05:7b:c2:18:c8:4a:31:ed:52:f0:22:88:74: a4:cb:f1:f6:0d:5f:7e:82:04:86:1f:e3:c9:da:a6: 0d:ca:76:60:93:a5:71:bc:28:5e:79:f3:0c:60:81: aa:48:04:b7:90:9c:f2:7c:14:d7:57:61:6e:b0:c6: 0a:71:f1:a1:56:61:fa:78:7c:97:be:93:db:d8:f4: b0:b1:60:e0:6e:ca:d6:e9:5c:e0:8f:ab:7b:93:6d: 18:87:ad:a1:1b:b9:92:48:9e:57:19:36:5c:04:5f: c2:96:6f:13:5f:f3:44:bf:2e:b3:de:b6:de:a8:be: 0d:57:bb:a1:03:a1:a7:40:f9:18:bc:1f:72:39:3b: fc:78:c5:4c:40:aa:9e:e1:a3:88:e7:89:db:f5:73: 45:af:b6:fe:6d:80:e5:b0:03:d5:3f:f9:a0:65:6b: 87:9b:23:00:a2:02:89:e6:ee:df:c5:df:22:8e:b1: f8:ab:ea:ff:58:e1:6d:d1:ca:8b:ba:dc:dd:08:80: 14:a5:21:d3:37:f2:23:dd:d2:65:6b:33:ad:17:a1: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:32:83:9F:CA:B1:A6:19:7C:57:FE:AA:16:79:52:71:D8:D4:9F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d28833b1-82b4-3580-9997-e10e5e94eaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d3:3f:42:1c:bf:7f:82:96:e8:98:d8:1d:f5:19:82:46:55: 62:2c:7b:fb:38:7c:8f:67:d7:30:45:49:26:19:4a:91:d5:3e: 35:25:8e:a3:75:cf:8d:8a:1e:05:16:a1:72:fe:82:59:33:f4: 15:d0:c9:f9:e6:55:8e:10:99:d6:2c:c2:45:d2:fb:da:34:bb: 02:69:be:fa:aa:7b:20:ae:1e:31:22:0e:38:bb:91:59:70:5b: 4c:6b:07:ec:e8:d2:1a:b9:a0:c3:dc:5a:7f:89:4e:b9:6f:2a: 7d:4e:86:41:cc:04:f1:91:01:33:9d:77:89:8b:57:6d:86:fd: 7c:b3:d1:4c:d3:41:96:08:b3:82:22:8f:fd:36:2d:92:b2:89: 1e:f6:4c:00:16:4c:e1:b3:96:08:af:86:6e:dc:ae:06:17:7e: a8:75:48:6b:41:a6:39:2c:9a:30:5d:e3:20:b0:fb:8c:0f:d8: b4:ba:32:8a:1c:9f:99:1f:83:31:67:57:88:ba:94:9b:7f:ff: b5:04:84:57:24:ee:76:83:2a:e8:0b:79:ca:5a:d8:b3:5e:16: 0e:5b:01:30:80:d8:84:20:28:d6:82:fd:39:fe:8e:ac:14:03: b2:3a:27:67:c5:68:f2:6c:3e:38:2b:57:b0:5f:fa:51:3a:5f: a8:74:8f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuxFJ384W/jGoYIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmQ5OTI1MzctZTY5OC00MWRlLThkMDktNGUyOGU0MWQ5Y2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBMyiAsEgTFBwEBm5uoCjPTSz/KnBb9Rmma1 ZCs0I1dv0EOCIy4xYymAt807uAV7whjISjHtUvAiiHSky/H2DV9+ggSGH+PJ2qYN ynZgk6VxvCheefMMYIGqSAS3kJzyfBTXV2FusMYKcfGhVmH6eHyXvpPb2PSwsWDg bsrW6Vzgj6t7k20Yh62hG7mSSJ5XGTZcBF/Clm8TX/NEvy6z3rbeqL4NV7uhA6Gn QPkYvB9yOTv8eMVMQKqe4aOI54nb9XNFr7b+bYDlsAPVP/mgZWuHmyMAogKJ5u7f xd8ijrH4q+r/WOFt0cqLutzdCIAUpSHTN/Ij3dJlazOtF6FNrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkyg5/KsaYZfFf+qhZ5UnHY1J9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI4ODMzYjEtODJiNC0z NTgwLTk5OTctZTEwZTVlOTRlYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPTP0Icv3+CluiY2B31GYJGVWIse/s4fI9n1zBFSSYZSpHVPjUljqN1 z42KHgUWoXL+glkz9BXQyfnmVY4QmdYswkXS+9o0uwJpvvqqeyCuHjEiDji7kVlw W0xrB+zo0hq5oMPcWn+JTrlvKn1OhkHMBPGRATOdd4mLV22G/Xyz0UzTQZYIs4Ii j/02LZKyiR72TAAWTOGzlgivhm7crgYXfqh1SGtBpjksmjBd4yCw+4wP2LS6Mooc n5kfgzFnV4i6lJt//7UEhFck7naDKugLecpa2LNeFg5bATCA2IQgKNaC/Tn+jqwU A7I6J2fFaPJsPjgrV7Bf+lE6X6h0j/Q= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:16 2025 by rpki-client