$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa File: 05cff55e-3007-36c6-b796-ac74cbc05295.roa (raw, json) Hash identifier: r4hCriNdaVmPT6jenfUzeJA4uXu+J09NT3r4mjgZrFU= Subject key identifier: 8C:E5:5F:32:47:61:E4:A0:09:69:33:DB:93:E7:33:D8:9C:F6:94:06 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40493071F04DA284E6F430 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.28.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:49:30:71:f0:4d:a2:84:e6:f4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=fd4ef93f-d87a-4b6b-8c21-9848728af142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:2d:f0:c4:95:f8:a2:42:67:51:1b:21:0c: 5f:bc:15:76:95:26:43:e6:44:03:e0:7f:7f:d9:0c: a2:20:76:0e:8c:8d:e4:85:3b:60:70:35:ec:7c:83: 44:e7:57:e7:e7:c5:53:70:32:f6:83:e9:9a:d7:89: 9b:56:2e:3c:90:2f:e6:a0:2e:a3:b0:93:6b:48:98: 98:d8:10:6b:f9:a4:c9:f6:f0:63:a5:6f:64:56:c0: 5c:f0:f2:b7:8d:54:a4:fa:2c:70:f4:3b:78:f0:7f: 9d:21:9a:41:b8:22:2a:6c:d0:d3:34:9b:1b:95:2e: 1e:8a:67:f8:f9:39:08:73:74:08:b0:fc:5b:38:70: 99:4e:54:21:99:0d:b3:82:88:11:7b:b6:fa:21:bc: e9:a9:a0:2f:29:78:f6:42:78:5f:05:02:01:1a:3e: f7:cd:f4:cd:82:94:d0:ca:a1:c2:8e:8c:6e:f0:73: 6b:c8:20:9b:d5:39:29:1e:a6:02:3f:d6:31:e4:d3: cb:8a:b8:1f:01:c4:ed:56:c5:2e:61:f5:23:ea:8c: 50:72:ee:63:f1:42:ea:7c:9a:b9:8f:80:4d:c0:9e: a9:67:cd:83:f1:6b:45:da:66:2d:bc:92:8b:f9:4d: f4:a6:fd:90:e8:59:23:12:0c:a6:f1:de:3f:0e:a7: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:5F:32:47:61:E4:A0:09:69:33:DB:93:E7:33:D8:9C:F6:94:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05cff55e-3007-36c6-b796-ac74cbc05295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fc:b1:ee:eb:d8:e1:c9:3c:4f:9d:19:b2:e7:c4:69:66:24: 6a:b3:96:74:f1:f6:f7:9f:da:0c:7c:ff:b1:6e:87:e4:00:81: f8:e1:e2:41:c1:be:57:fb:9c:27:ce:b7:43:29:c0:d2:8c:cb: aa:7f:03:d6:b6:28:e2:71:4b:70:a4:e2:53:38:91:f2:84:61: f0:7e:07:a1:d6:04:ad:a1:6c:01:87:dc:ea:60:3a:5d:3d:73: 0f:62:67:2f:67:c9:a8:49:24:11:2b:19:f8:72:41:fd:40:af: d3:76:c3:9b:ac:0f:0a:ed:8c:19:a4:e0:e2:ac:a1:e9:52:ea: 4f:b8:f7:29:13:c7:c1:46:2e:15:0f:0d:fc:e8:51:10:fc:13: be:60:5d:e5:eb:77:3f:f9:2e:2f:1e:a3:07:a2:9d:5a:6b:01: 77:66:38:4f:4f:93:8f:3b:17:7f:4b:43:80:e2:6e:ee:02:34: da:3f:b1:12:7e:b0:0a:a2:76:5f:87:d3:b2:30:76:75:2f:c4: 2f:8a:d2:7b:78:8d:fc:dc:23:8c:8c:20:a4:2a:59:5a:06:73: 28:fa:7a:c8:b6:dc:38:ce:06:4b:8d:ac:95:04:15:bd:45:de: b3:e6:1b:be:20:dd:d2:93:f6:6d:83:35:08:88:4f:ff:8e:8f: 3d:38:50:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEkwcfBNooTm9DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ0ZWY5M2YtZDg3YS00YjZiLThjMjEtOTg0ODcyOGFmMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKIt8MSV+KJCZ1EbIQxfvBV2lSZD5kQD4H9/ 2QyiIHYOjI3khTtgcDXsfINE51fn58VTcDL2g+ma14mbVi48kC/moC6jsJNrSJiY 2BBr+aTJ9vBjpW9kVsBc8PK3jVSk+ixw9Dt48H+dIZpBuCIqbNDTNJsblS4eimf4 +TkIc3QIsPxbOHCZTlQhmQ2zgogRe7b6IbzpqaAvKXj2QnhfBQIBGj73zfTNgpTQ yqHCjoxu8HNryCCb1TkpHqYCP9Yx5NPLirgfAcTtVsUuYfUj6oxQcu5j8ULqfJq5 j4BNwJ6pZ82D8WtF2mYtvJKL+U30pv2Q6FkjEgym8d4/DqcJbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzlXzJHYeSgCWkz25PnM9ic9pQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDVjZmY1NWUtMzAwNy0z NmM2LWI3OTYtYWM3NGNiYzA1Mjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv8se7r2OHJPE+dGbLnxGlmJGqzlnTx9vef2gx8/7Fuh+QAgfjh4kHB vlf7nCfOt0MpwNKMy6p/A9a2KOJxS3Ck4lM4kfKEYfB+B6HWBK2hbAGH3OpgOl09 cw9iZy9nyahJJBErGfhyQf1Ar9N2w5usDwrtjBmk4OKsoelS6k+49ykTx8FGLhUP DfzoURD8E75gXeXrdz/5Li8eoweinVprAXdmOE9Pk487F39LQ4Dibu4CNNo/sRJ+ sAqidl+H07IwdnUvxC+K0nt4jfzcI4yMIKQqWVoGcyj6esi23DjOBkuNrJUEFb1F 3rPmG74g3dKT9m2DNQiIT/+Ojz04UCo= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:18 2025 by rpki-client