$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa File: d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa (raw, json) Hash identifier: UotaNmHfD6UGFAqiQqUrhcEXk2mD9FcfMFet+/6dqnk= Subject key identifier: CD:29:97:F8:C4:DF:1B:79:B8:FB:BB:22:87:D0:F2:00:94:ED:DD:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC0D1B62E32BD14C95180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c0:d1:b6:2e:32:bd:14:c9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=e0f9bf39-f65c-4d6c-ac8a-4ee4a4591237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:2b:6c:da:b5:8c:a4:28:a8:2b:31:6b:75: fa:55:da:d9:c3:9a:c5:df:4a:0b:13:84:63:36:00: 1a:89:dc:36:43:8e:f4:72:fc:c8:7a:87:42:5e:bc: d2:50:64:05:28:c8:16:e4:f5:53:b6:0b:20:d1:28: 93:7f:32:91:2a:65:97:a2:6b:1c:3b:70:d8:7f:50: a1:04:8c:cc:9d:36:72:48:f1:36:b7:63:8d:92:bb: 8d:37:51:55:f5:51:86:27:84:76:d4:ae:0b:da:07: 05:3b:2c:a4:73:24:d5:71:87:7a:5a:44:86:ba:f4: aa:52:5d:0a:f6:1d:9c:c9:95:d9:7a:19:d8:17:7e: ff:79:bd:be:52:77:4f:e5:da:5f:0f:95:de:aa:2a: ae:97:56:d8:56:5e:59:fc:5e:80:af:57:60:54:d6: 77:fd:0c:b8:1a:72:72:21:0f:a8:8f:83:0a:ab:b8: 8a:f5:6c:c3:72:bd:5c:ce:47:8d:ad:6c:e6:85:7c: ee:83:53:fa:bc:79:6e:5e:e8:54:3a:5b:46:4c:f5: 18:e4:36:f4:5e:20:26:7d:2d:6f:6c:6e:4a:7f:54: e8:d2:db:c5:08:a4:14:4b:05:13:3c:6b:13:73:31: 9b:c4:9a:9e:fd:86:e9:90:2f:9e:62:df:e6:0f:2e: 45:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:29:97:F8:C4:DF:1B:79:B8:FB:BB:22:87:D0:F2:00:94:ED:DD:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4dcc5a4-6a15-328f-a323-99a1d1204df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:aa:9e:f7:e6:27:e0:3c:c2:d3:1d:59:55:dd:c1:7c:d3:1d: a4:73:8e:16:a9:ed:23:d8:44:d1:80:78:45:91:d4:dd:ad:57: fc:ee:d3:74:1b:cd:18:a2:f1:0f:82:b4:ad:a6:00:61:28:a4: 82:4d:ca:90:31:fd:98:46:f5:5c:c4:ed:9b:9b:59:37:67:c3: d8:7d:59:b5:6b:44:82:ed:08:a6:d8:66:15:0d:30:40:02:e1: dd:aa:0a:e7:51:7c:e0:4e:72:37:ad:0d:5c:b2:87:e1:3b:ee: 59:96:98:38:4f:de:08:c0:3a:cd:c0:48:aa:eb:b8:72:53:25: 8d:b1:e6:c5:c1:0b:ac:84:48:59:14:d6:78:6e:a7:87:5c:94: 6a:22:d6:59:4e:1d:24:da:0f:fa:d5:2d:ce:fe:7b:b2:d9:64: 97:da:fe:ec:cd:b9:d9:9d:15:6a:3f:93:41:cc:7c:72:00:dd: 91:9d:54:46:44:9f:cc:d0:84:4b:b0:93:80:70:64:7d:31:e7: a9:27:f1:be:3b:55:b0:4c:4a:94:78:1c:20:41:da:6f:54:de: 9b:09:1b:74:76:ce:fd:16:c2:52:b6:eb:65:c4:43:50:38:15: 8e:01:31:5f:5b:2b:c4:b7:0e:44:9b:a5:b3:c4:fa:a2:4e:bd: 91:df:49:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMDRti4yvRTJUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZTBmOWJmMzktZjY1Yy00ZDZjLWFjOGEtNGVlNGE0NTkxMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiArbNq1jKQoqCsxa3X6VdrZw5rF30oLE4Rj NgAaidw2Q470cvzIeodCXrzSUGQFKMgW5PVTtgsg0SiTfzKRKmWXomscO3DYf1Ch BIzMnTZySPE2t2ONkruNN1FV9VGGJ4R21K4L2gcFOyykcyTVcYd6WkSGuvSqUl0K 9h2cyZXZehnYF37/eb2+UndP5dpfD5Xeqiqul1bYVl5Z/F6Ar1dgVNZ3/Qy4GnJy IQ+oj4MKq7iK9WzDcr1czkeNrWzmhXzug1P6vHluXuhUOltGTPUY5Db0XiAmfS1v bG5Kf1To0tvFCKQUSwUTPGsTczGbxJqe/YbpkC+eYt/mDy5FzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0pl/jE3xt5uPu7IofQ8gCU7d2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRkY2M1YTQtNmExNS0z MjhmLWEzMjMtOTlhMWQxMjA0ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqqnvfmJ+A8wtMdWVXdwXzTHaRzjhap7SPYRNGAeEWR1N2tV/zu03Qb zRii8Q+CtK2mAGEopIJNypAx/ZhG9VzE7ZubWTdnw9h9WbVrRILtCKbYZhUNMEAC 4d2qCudRfOBOcjetDVyyh+E77lmWmDhP3gjAOs3ASKrruHJTJY2x5sXBC6yESFkU 1nhup4dclGoi1llOHSTaD/rVLc7+e7LZZJfa/uzNudmdFWo/k0HMfHIA3ZGdVEZE n8zQhEuwk4BwZH0x56kn8b47VbBMSpR4HCBB2m9U3psJG3R2zv0WwlK262XEQ1A4 FY4BMV9bK8S3DkSbpbPE+qJOvZHfSdE= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:09 2025 by rpki-client