$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa File: f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa (raw, json) Hash identifier: tskIQbZ3EN+r+DDdKaSHqY/Gpv7fjkVwEptZzYaczOg= Subject key identifier: 03:01:EE:82:C9:68:FC:E7:60:EE:83:5B:06:9E:94:E1:2B:07:01:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC7726A139CF57B7805BF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.30.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:72:6a:13:9c:f5:7b:78:05:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=bf52c80c-de1c-4a43-afa3-4c83d20fb572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:89:4a:44:6b:54:14:c8:89:05:33:60:2e: 00:62:b0:0c:f5:c9:52:73:39:00:c6:42:99:bf:e1: 79:f0:10:35:e0:63:60:7f:de:c9:db:b8:71:ae:21: d3:17:57:1f:72:a7:db:2f:90:be:48:bc:b7:48:14: 3a:f9:81:f9:da:fa:1c:92:e4:8f:eb:55:6a:43:d9: 89:79:82:d3:a9:7b:0b:a4:b4:76:39:e3:9e:4c:77: 09:95:45:4e:8c:66:dd:1f:12:c4:fb:88:1e:10:00: 8f:f2:a7:39:74:e2:98:7f:ea:ca:76:e3:7b:b2:50: 01:d9:da:8b:95:a3:fe:58:39:34:7a:fc:e0:9e:78: 4c:26:ea:79:65:72:bf:a8:98:20:c4:39:89:0d:5e: 2b:96:f0:06:09:69:d5:4f:cb:1d:fd:25:2f:94:38: 83:66:91:b4:ba:5f:81:68:23:01:95:1a:4b:4b:94: 77:01:f3:f5:d2:2e:5d:4d:6a:74:1a:48:d3:b0:f2: 4c:94:d9:1d:08:af:74:4f:9d:6a:03:59:05:e8:68: 28:59:c8:23:24:10:55:45:c5:79:cc:e8:c6:ef:88: 5d:bf:eb:1e:72:5d:2e:f3:51:82:8b:83:7f:30:82: 09:d2:a3:3a:bf:97:6a:0f:e6:05:58:77:e6:99:b3: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:EE:82:C9:68:FC:E7:60:EE:83:5B:06:9E:94:E1:2B:07:01:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f74f3cd1-67a8-3614-90b3-1b61b19231bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a9:7a:3d:d2:c1:62:10:df:ea:60:b4:c1:de:58:a7:a5:c5: ba:62:8d:ae:d8:27:7a:85:7c:e8:83:b7:83:07:3e:8c:d7:dd: 2f:86:e0:65:b4:af:d1:47:a4:82:f5:ef:c0:a5:4a:52:12:f5: d1:4c:b9:fc:ea:28:a7:89:8c:39:d8:17:50:cc:16:cc:8e:e1: 3c:93:9f:2f:cd:f6:9a:23:ea:d0:dd:9f:bb:48:1e:df:d6:d1: 3c:a5:f5:bb:40:33:95:8f:67:c4:0c:dd:5d:49:96:f2:28:77: 19:88:35:88:fa:6c:d7:f4:26:50:40:d7:8e:cc:66:a7:bc:e7: f0:77:23:35:ad:4c:b5:fa:92:30:b4:18:f4:a4:da:67:11:ea: 2d:b1:fe:08:24:8b:5c:2c:83:2b:e7:9f:95:01:fb:7a:7b:a6: 4d:41:bc:ea:04:fc:c7:9d:ed:11:88:11:e2:ad:31:8d:1b:03: 2c:b8:c4:a6:78:e8:a5:8d:17:85:4b:78:24:33:76:11:de:ee: b0:5d:ee:81:8d:a5:1f:0b:bc:f2:1b:b9:a3:bd:f1:e0:52:64: ca:94:19:94:fd:6d:58:1a:47:f2:24:db:64:ca:ae:af:f1:0e: 34:08:94:b2:ac:7a:66:13:08:48:9d:e4:f1:a5:cd:50:a2:26: f4:a2:c2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3JqE5z1e3gFv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YmY1MmM4MGMtZGUxYy00YTQzLWFmYTMtNGM4M2QyMGZiNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/mJSkRrVBTIiQUzYC4AYrAM9clSczkAxkKZ v+F58BA14GNgf97J27hxriHTF1cfcqfbL5C+SLy3SBQ6+YH52vockuSP61VqQ9mJ eYLTqXsLpLR2OeOeTHcJlUVOjGbdHxLE+4geEACP8qc5dOKYf+rKduN7slAB2dqL laP+WDk0evzgnnhMJup5ZXK/qJggxDmJDV4rlvAGCWnVT8sd/SUvlDiDZpG0ul+B aCMBlRpLS5R3AfP10i5dTWp0GkjTsPJMlNkdCK90T51qA1kF6GgoWcgjJBBVRcV5 zOjG74hdv+secl0u81GCi4N/MIIJ0qM6v5dqD+YFWHfmmbNOQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMB7oLJaPznYO6DWwaelOErBwHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc0ZjNjZDEtNjdhOC0z NjE0LTkwYjMtMWI2MWIxOTIzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJapej3SwWIQ3+pgtMHeWKelxbpija7YJ3qFfOiDt4MHPozX3S+G4GW0 r9FHpIL178ClSlIS9dFMufzqKKeJjDnYF1DMFsyO4TyTny/N9poj6tDdn7tIHt/W 0Tyl9btAM5WPZ8QM3V1JlvIodxmINYj6bNf0JlBA147MZqe85/B3IzWtTLX6kjC0 GPSk2mcR6i2x/ggki1wsgyvnn5UB+3p7pk1BvOoE/Med7RGIEeKtMY0bAyy4xKZ4 6KWNF4VLeCQzdhHe7rBd7oGNpR8LvPIbuaO98eBSZMqUGZT9bVgaR/Ik22TKrq/x DjQIlLKsemYTCEid5PGlzVCiJvSiwtY= -----END CERTIFICATE-----Generated at Sat Oct 11 00:08:32 2025 by rpki-client