$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa File: 09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa (raw, json) Hash identifier: y+ojTZKHDRXUrwaSJ3s1CTUkHgpfT7AU1i79rJi68Tk= Subject key identifier: 2F:7E:D5:3F:5B:9F:FE:E2:C0:09:C2:E2:3B:5A:71:52:90:8F:05:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD89082BAEB21FA4584C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.28.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:89:08:2b:ae:b2:1f:a4:58:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=13a732d9-061b-4779-9319-a8c2084bcde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:05:d1:ac:7d:c3:d8:e0:21:dc:2f:b5:10: 9c:cf:e1:8b:62:4f:f2:a9:01:02:3f:be:13:fb:fb: 2c:c5:f9:26:09:c7:0b:6e:58:2d:c6:e7:95:61:70: 56:c1:fe:31:65:c4:23:25:a9:34:a4:80:95:c9:ed: 5b:05:1b:f9:35:e1:e6:9a:cf:d0:07:f1:b3:ef:ee: 00:6a:3c:ee:5f:fc:04:37:61:ae:59:73:cb:b8:40: 8b:06:5d:7a:5b:81:b7:53:12:70:ac:dd:e2:e0:81: 86:b4:11:da:6d:ba:16:cc:0d:8a:99:43:ea:26:6b: cf:89:96:e7:eb:61:a6:cb:3b:6d:89:bd:fd:8d:22: d9:77:87:e6:c8:35:4f:98:1b:9e:2b:ae:62:a1:5c: 82:a9:b0:ad:d4:cc:99:7b:ce:73:94:91:bf:32:82: d1:5e:df:c5:3e:d3:dc:e8:69:df:1f:ee:5e:f7:fa: ea:13:c9:b1:4b:1c:a2:90:63:1c:6e:2c:e2:bb:f6: 29:eb:85:57:c1:b9:b3:22:21:40:58:c9:81:5c:08: 1f:7c:cc:01:ab:1f:ed:fe:a9:cd:63:62:e3:6b:3b: 26:10:77:ca:42:f3:ee:f7:0a:83:0e:13:69:2f:36: 5e:95:69:f9:8a:b1:00:63:57:98:d1:1b:cc:8c:09: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7E:D5:3F:5B:9F:FE:E2:C0:09:C2:E2:3B:5A:71:52:90:8F:05:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/09a6a2d5-41f0-34ed-a96d-b751f0c89f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d7:51:7b:0a:77:fd:d0:82:6d:b5:44:8b:4d:df:4a:f8:5c: 36:e1:2b:e0:05:b8:06:c0:e7:9b:13:b7:90:e6:73:fc:4c:42: d6:5b:0b:60:45:61:f7:09:77:49:81:28:a3:4a:83:ec:d2:39: 64:c3:cf:5e:05:88:9b:74:c8:94:35:f8:01:d4:a4:95:31:be: f3:55:a3:9f:65:1f:73:f9:6f:51:64:f8:b5:49:4e:4e:8c:18: f2:88:1f:df:59:9d:b4:f8:c3:ed:4f:e1:7f:e0:f9:06:78:61: e9:4e:08:4a:c2:56:cb:b7:f4:22:68:2a:12:f0:82:c6:12:0d: 3a:e0:95:83:4e:31:d2:c3:05:f6:7b:78:09:f1:32:5a:8b:79: a7:07:75:4c:af:44:5a:df:d3:56:5f:e4:bb:1c:d9:ec:51:de: 54:4b:8b:7e:67:d4:25:57:57:f3:d0:93:d1:4c:57:87:74:fc: c5:b0:c3:d3:5b:22:e8:62:52:c9:a0:59:b0:81:e3:78:ae:e3: 32:a1:ed:95:cd:41:aa:43:0a:35:eb:ba:e6:8c:e7:3b:90:e2: 06:d9:bf:98:e0:7d:5f:f8:31:d6:ef:81:c8:11:70:09:ef:76: 0c:7b:e9:93:aa:75:51:8b:00:6b:a6:5c:2c:f9:73:40:f5:8a: de:fa:d6:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YkIK66yH6RYTGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MTNhNzMyZDktMDYxYi00Nzc5LTkzMTktYThjMjA4NGJjZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju8F0ax9w9jgIdwvtRCcz+GLYk/yqQECP74T +/ssxfkmCccLblgtxueVYXBWwf4xZcQjJak0pICVye1bBRv5NeHmms/QB/Gz7+4A ajzuX/wEN2GuWXPLuECLBl16W4G3UxJwrN3i4IGGtBHabboWzA2KmUPqJmvPiZbn 62Gmyzttib39jSLZd4fmyDVPmBueK65ioVyCqbCt1MyZe85zlJG/MoLRXt/FPtPc 6GnfH+5e9/rqE8mxSxyikGMcbiziu/Yp64VXwbmzIiFAWMmBXAgffMwBqx/t/qnN Y2LjazsmEHfKQvPu9wqDDhNpLzZelWn5irEAY1eY0RvMjAlTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9+1T9bn/7iwAnC4jtacVKQjwXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDlhNmEyZDUtNDFmMC0z NGVkLWE5NmQtYjc1MWYwYzg5ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDXUXsKd/3Qgm21RItN30r4XDbhK+AFuAbA55sTt5Dmc/xMQtZbC2BF YfcJd0mBKKNKg+zSOWTDz14FiJt0yJQ1+AHUpJUxvvNVo59lH3P5b1Fk+LVJTk6M GPKIH99ZnbT4w+1P4X/g+QZ4YelOCErCVsu39CJoKhLwgsYSDTrglYNOMdLDBfZ7 eAnxMlqLeacHdUyvRFrf01Zf5Lsc2exR3lRLi35n1CVXV/PQk9FMV4d0/MWww9Nb IuhiUsmgWbCB43iu4zKh7ZXNQapDCjXruuaM5zuQ4gbZv5jgfV/4MdbvgcgRcAnv dgx76ZOqdVGLAGumXCz5c0D1it761qg= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:42 2025 by rpki-client