$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed4691a3-1641-3112-923f-00bb5e1c5cb7.roa File: ed4691a3-1641-3112-923f-00bb5e1c5cb7.roa (raw, json) Hash identifier: jFOu1Ub/vosE7xIzDAvBZvcAfCJQow5G9EniWuAcyt8= Subject key identifier: A0:B6:50:73:63:B6:CD:9B:BB:FC:E3:15:0E:7E:28:C1:10:4C:43:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA0A9B06FF72E54D45780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed4691a3-1641-3112-923f-00bb5e1c5cb7.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.31.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a0:a9:b0:6f:f7:2e:54:d4:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0769778a-286e-4df9-8f6e-77637478060f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:a9:35:99:11:e0:33:1c:a2:6b:de:34:71: e8:2c:c3:d6:c3:95:12:9d:53:db:c1:f3:8d:76:39: 22:da:8b:f5:1d:51:4b:3e:a7:18:76:5d:a7:79:0a: 03:65:36:63:a1:cf:d1:8a:b4:28:82:da:83:5e:cf: 0e:6a:88:68:35:4a:9d:7a:b1:a6:e2:1d:d3:10:1a: 43:7a:28:21:8b:a7:f4:9d:73:93:c7:46:4a:ae:4f: 8d:43:52:a3:33:6a:3a:ee:77:94:2e:37:19:b5:84: 8c:6c:ff:0e:1f:be:4b:62:28:93:58:34:16:e7:58: c4:9a:3e:ac:c5:bc:27:15:d5:43:38:84:b6:da:28: fe:39:6e:58:13:0f:90:0f:66:23:a8:90:59:cb:55: a7:9c:99:85:47:43:65:4d:95:eb:51:58:ac:ae:73: d2:be:f2:3e:02:13:50:6f:66:02:c7:a1:81:6b:f4: 44:b5:4c:3e:de:37:38:5d:48:cc:d6:b2:1c:22:38: 73:7e:ab:ba:49:26:02:d1:c8:b6:16:68:1f:89:d7: 08:5b:ce:d4:3a:f5:79:9b:93:2c:a7:f8:22:af:7b: 11:61:4f:0f:04:de:54:10:4d:96:a1:9f:46:87:22: 6f:34:7e:8f:9d:df:2a:ad:39:fb:44:dc:5c:42:e6: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B6:50:73:63:B6:CD:9B:BB:FC:E3:15:0E:7E:28:C1:10:4C:43:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed4691a3-1641-3112-923f-00bb5e1c5cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:97:73:02:2d:da:6d:37:b6:ec:d9:4e:fc:12:2b:93:39:cc: d8:10:40:f6:3f:a0:6e:15:aa:51:04:b3:41:7b:43:ec:59:cf: 34:72:86:d8:e0:7d:b2:61:e1:9c:fa:8b:72:82:10:07:9d:52: e3:f1:4f:35:7e:87:e6:a9:33:1d:6a:ae:81:c8:8d:c2:a5:05: 78:cb:39:3e:98:59:f5:45:41:3d:a5:04:2b:51:4c:45:99:b8: 1d:13:98:35:fd:bf:0a:da:c8:4f:3c:81:cc:31:2e:8a:79:b3: c0:e9:f6:fd:06:05:d3:89:a0:6d:20:0f:9a:ba:c4:7c:9b:1b: 8c:be:fe:35:f4:c5:65:cf:e6:35:5e:84:35:c4:d1:ec:71:2c: 8d:65:81:6a:64:89:75:56:10:32:b6:ad:ed:77:df:62:69:6e: 6b:18:34:74:dc:1e:d0:5c:3b:fb:5d:e1:4b:58:a4:b9:bd:e4: 86:fb:31:73:5c:d3:44:68:8c:d4:ac:61:88:ac:31:ef:7a:5b: 9c:3f:3f:59:ac:c6:6a:b2:c5:5a:12:9d:c8:43:97:ae:04:41: 20:7f:be:0d:7b:ba:cf:de:94:87:a0:b5:c4:ee:8d:c8:27:85: ff:3b:dc:d2:12:e2:ea:ae:37:c7:cc:b5:67:9a:78:a5:e8:7d: e0:44:ac:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKCpsG/3LlTUV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDc2OTc3OGEtMjg2ZS00ZGY5LThmNmUtNzc2Mzc0NzgwNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVOpNZkR4DMcomveNHHoLMPWw5USnVPbwfON djki2ov1HVFLPqcYdl2neQoDZTZjoc/RirQogtqDXs8OaohoNUqderGm4h3TEBpD eighi6f0nXOTx0ZKrk+NQ1KjM2o67neULjcZtYSMbP8OH75LYiiTWDQW51jEmj6s xbwnFdVDOIS22ij+OW5YEw+QD2YjqJBZy1WnnJmFR0NlTZXrUVisrnPSvvI+AhNQ b2YCx6GBa/REtUw+3jc4XUjM1rIcIjhzfqu6SSYC0ci2FmgfidcIW87UOvV5m5Ms p/gir3sRYU8PBN5UEE2WoZ9GhyJvNH6Pnd8qrTn7RNxcQuZCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC2UHNjts2bu/zjFQ5+KMEQTEPTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQ0NjkxYTMtMTY0MS0z MTEyLTkyM2YtMDBiYjVlMWM1Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISXcwIt2m03tuzZTvwSK5M5zNgQQPY/oG4VqlEEs0F7Q+xZzzRyhtjg fbJh4Zz6i3KCEAedUuPxTzV+h+apMx1qroHIjcKlBXjLOT6YWfVFQT2lBCtRTEWZ uB0TmDX9vwrayE88gcwxLop5s8Dp9v0GBdOJoG0gD5q6xHybG4y+/jX0xWXP5jVe hDXE0exxLI1lgWpkiXVWEDK2re1332JpbmsYNHTcHtBcO/td4UtYpLm95Ib7MXNc 00RojNSsYYisMe96W5w/P1msxmqyxVoSnchDl64EQSB/vg17us/elIegtcTujcgn hf873NIS4uquN8fMtWeaeKXofeBErKg= -----END CERTIFICATE-----Generated at Sat Oct 11 00:06:38 2025 by rpki-client