$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa File: 109ce6d8-6205-3534-baef-884080578281.roa (raw, json) Hash identifier: mzueTkDh3L8Min2dALY/PDnhfHmOpwuN73DKEA14hLg= Subject key identifier: 50:2F:47:92:15:7D:4E:92:42:B7:7A:36:BD:51:8E:86:C6:2F:92:DC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B153C26F1CBD19BF406FB9800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 71.28.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:26:f1:cb:d1:9b:f4:06:fb:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=3b3864ba-6a9f-4088-a879-604df665058d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:c5:fc:9c:08:eb:c4:d6:01:a7:fc:6c:dd: 78:c6:e9:b6:bf:b5:bc:c4:7f:ca:68:09:e2:fc:d2: df:5a:47:d1:80:ea:72:50:8e:a2:b0:b8:92:43:0a: b8:fc:19:82:d9:b7:34:dc:e0:d6:01:75:45:ea:c5: 94:7a:26:c4:04:92:5a:20:e4:fa:ea:96:92:53:f9: 91:ec:ff:05:3d:20:f0:bb:be:6f:32:bf:83:a6:52: ac:2f:c9:0b:d1:de:8d:0f:db:aa:bd:2e:41:fd:df: 01:e1:c1:54:73:0a:42:68:0f:33:f7:1f:23:2b:d6: 6f:41:5c:9c:0f:a5:96:a8:b8:7b:ef:5a:64:82:ef: 69:73:3b:13:11:37:0c:8c:b1:96:4d:18:de:00:00: ae:0a:ec:b3:6a:97:b9:53:b6:e3:87:be:13:b2:87: bc:14:e1:9d:84:55:11:ae:c5:c5:a8:9f:b9:e6:6f: ff:ae:44:63:6b:17:bd:79:2a:9f:01:f3:61:00:cc: 3b:fb:f6:e9:62:94:e9:41:88:9e:35:a7:54:cd:53: 73:8c:26:de:ce:ef:e0:14:a6:4b:41:80:fd:68:f4: 4a:05:04:cb:5a:04:54:f0:65:38:55:c7:0b:00:9c: 74:66:69:35:d8:a8:c6:7a:bc:db:5e:d6:1e:1a:c4: e3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:47:92:15:7D:4E:92:42:B7:7A:36:BD:51:8E:86:C6:2F:92:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/109ce6d8-6205-3534-baef-884080578281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b2:ce:8c:44:97:50:0a:35:78:3c:af:19:0d:a7:88:9d:0d: 9f:b8:c1:17:09:ef:87:7e:5d:c7:f3:b9:76:10:d1:fa:6d:08: a1:24:7e:89:a3:f1:e7:91:1b:e5:a0:8c:72:31:32:db:63:09: 83:c1:b8:5c:89:f7:88:3b:8e:dd:c4:4b:18:75:1a:28:63:22: e9:86:2d:5e:8e:bb:e3:ea:bb:82:cd:a6:3a:d5:2b:a4:ac:6d: ae:73:7f:b1:49:fb:5c:2b:fa:ee:0c:bb:8d:b4:b2:b6:09:89: 16:e6:ad:3e:60:41:60:c6:35:ca:5a:29:d4:70:27:53:15:72: f3:6a:d5:fd:8b:b4:c2:a8:9c:e5:57:41:4c:14:5e:6c:00:f5: 97:12:5d:d5:b5:d3:ef:a4:f3:b7:0f:58:e6:51:a8:e8:b5:0e: 77:4d:55:e1:95:b8:9c:c3:ee:5a:aa:26:3d:5a:21:2e:df:31: f7:cf:33:c3:aa:8a:c3:1d:e8:7d:9f:79:07:8f:54:b1:7b:87: 25:9c:6a:16:b9:7a:f1:b6:66:93:97:ec:87:5a:e1:2e:ad:ec: 8c:e7:41:ee:1a:eb:5f:6d:c4:54:01:f5:23:08:91:75:20:17: 1d:41:a0:3d:9f:60:91:22:3f:b3:e7:cb:03:7a:f2:de:72:a2: aa:35:95:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCbxy9Gb9Ab7mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk M2IzODY0YmEtNmE5Zi00MDg4LWE4NzktNjA0ZGY2NjUwNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuTF/JwI68TWAaf8bN14xum2v7W8xH/KaAni /NLfWkfRgOpyUI6isLiSQwq4/BmC2bc03ODWAXVF6sWUeibEBJJaIOT66paSU/mR 7P8FPSDwu75vMr+DplKsL8kL0d6ND9uqvS5B/d8B4cFUcwpCaA8z9x8jK9ZvQVyc D6WWqLh771pkgu9pczsTETcMjLGWTRjeAACuCuyzape5U7bjh74Tsoe8FOGdhFUR rsXFqJ+55m//rkRjaxe9eSqfAfNhAMw7+/bpYpTpQYieNadUzVNzjCbezu/gFKZL QYD9aPRKBQTLWgRU8GU4VccLAJx0Zmk12KjGerzbXtYeGsTjPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAvR5IVfU6SQrd6Nr1RjobGL5LcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA5Y2U2ZDgtNjIwNS0z NTM0LWJhZWYtODg0MDgwNTc4MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxwGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGyzoxEl1AKNXg8rxkNp4idDZ+4wRcJ74d+XcfzuXYQ0fptCKEkfomj 8eeRG+WgjHIxMttjCYPBuFyJ94g7jt3ESxh1GihjIumGLV6Ou+Pqu4LNpjrVK6Ss ba5zf7FJ+1wr+u4Mu420srYJiRbmrT5gQWDGNcpaKdRwJ1MVcvNq1f2LtMKonOVX QUwUXmwA9ZcSXdW10++k87cPWOZRqOi1DndNVeGVuJzD7lqqJj1aIS7fMffPM8Oq isMd6H2feQePVLF7hyWcaha5evG2ZpOX7Ida4S6t7IznQe4a619txFQB9SMIkXUg Fx1BoD2fYJEiP7PnywN68t5yoqo1lVg= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:12 2025 by rpki-client