$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa File: 117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa (raw, json) Hash identifier: p24P1MW7CuOyDkSEClRlFX5Ut7CMexbwo+a0NscCOMs= Subject key identifier: A1:15:58:93:33:49:C3:9E:90:3D:A7:A9:F0:6B:79:A3:D7:D2:4D:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BA0D2713CF9DC20D2BB790080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 71.28.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:71:3c:f9:dc:20:d2:bb:79:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=6bc985d5-0eb0-425d-855e-b59eadd6ddb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:74:b8:20:00:a7:6f:89:6b:4c:ad:f7:da: db:56:4d:07:62:04:62:2b:bc:81:ee:0f:b0:c2:0c: 8f:a3:4a:d4:a4:11:81:91:e0:cb:9e:e4:85:5e:b6: fd:be:15:82:5a:6f:8c:8c:41:e7:97:34:a7:3d:7f: 9d:34:f5:14:ec:7c:96:40:a0:00:00:00:7b:b8:08: 9e:b9:03:bb:99:68:49:c0:32:0b:3f:63:1a:ea:b8: ee:ab:e5:7c:ca:54:7d:da:f4:f3:1d:1f:ff:5b:2c: 1f:24:01:a4:a4:ea:fe:b7:6f:12:77:bb:e4:0b:25: 34:30:ea:84:41:f9:54:c7:ac:6c:db:87:b8:0b:2a: b6:d8:11:43:99:5c:24:ba:94:32:5f:f9:76:6e:ec: e8:ab:3b:83:4a:c2:ae:2c:d6:76:4e:b5:69:3a:5b: ca:93:73:41:52:bf:17:03:46:a9:af:99:4b:43:90: b8:a5:b9:30:42:51:00:09:aa:d0:1e:14:0a:74:5e: 9d:c4:f4:c1:88:39:43:00:84:15:29:a3:b2:ba:0c: 34:46:25:33:25:7e:90:7c:07:86:1c:cc:80:69:3d: 04:00:f0:59:5d:c7:12:84:bf:7d:ad:fc:c3:62:c1: ff:e4:aa:66:f7:ab:5f:cc:48:08:dd:98:4c:3a:db: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:15:58:93:33:49:C3:9E:90:3D:A7:A9:F0:6B:79:A3:D7:D2:4D:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/117d9148-2e55-3ee9-a63c-5cbbf35dfd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0a:81:16:ac:7e:97:29:28:97:11:50:f2:4b:1a:14:2c:73: 7e:a9:3f:d3:ee:b5:9e:47:f6:9f:15:1e:2b:ed:ce:db:cf:ee: 31:17:8b:36:0e:ba:b5:94:aa:dc:72:0f:c8:86:81:94:2a:a0: 74:0c:e0:17:50:0e:9f:73:ea:13:d2:e1:00:6f:5e:9e:38:a2: ce:c6:b2:f4:b4:7e:ad:98:d2:fc:96:4d:06:93:92:8a:5a:dc: c0:d7:87:30:c0:50:1c:af:64:15:d0:0f:7a:b9:ff:f0:59:61: 77:c3:17:67:05:35:eb:1c:ef:27:90:f4:c0:e7:38:e9:5b:7e: c1:64:09:7e:9c:94:66:20:cb:f4:c4:4b:fc:16:38:8e:72:c2: 20:9c:8c:d5:2b:5e:72:f2:74:52:41:25:e0:3e:a9:7b:41:40: ca:e2:d2:9e:d1:63:d3:94:7f:61:55:5b:f7:ae:d0:9a:c5:60: 5c:db:79:0c:69:20:19:e3:53:da:eb:a5:52:80:2e:ac:12:50: 60:8e:3b:a6:76:5a:66:63:f5:fe:39:c6:9a:69:b1:1c:1e:52: 64:98:88:9b:41:c8:0a:04:19:d6:1e:71:83:a6:b0:d1:db:26: a5:5d:59:db:0b:d7:b0:88:99:db:68:d0:f2:31:3b:cb:61:c8: 35:ab:21:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0nE8+dwg0rt5AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NmJjOTg1ZDUtMGViMC00MjVkLTg1NWUtYjU5ZWFkZDZkZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6J0uCAAp2+Ja0yt99rbVk0HYgRiK7yB7g+w wgyPo0rUpBGBkeDLnuSFXrb9vhWCWm+MjEHnlzSnPX+dNPUU7HyWQKAAAAB7uAie uQO7mWhJwDILP2Ma6rjuq+V8ylR92vTzHR//WywfJAGkpOr+t28Sd7vkCyU0MOqE QflUx6xs24e4Cyq22BFDmVwkupQyX/l2buzoqzuDSsKuLNZ2TrVpOlvKk3NBUr8X A0apr5lLQ5C4pbkwQlEACarQHhQKdF6dxPTBiDlDAIQVKaOyugw0RiUzJX6QfAeG HMyAaT0EAPBZXccShL99rfzDYsH/5Kpm96tfzEgI3ZhMOtsSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEVWJMzScOekD2nqfBreaPX0k2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTE3ZDkxNDgtMmU1NS0z ZWU5LWE2M2MtNWNiYmYzNWRmZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoKgRasfpcpKJcRUPJLGhQsc36pP9PutZ5H9p8VHivtztvP7jEXizYO urWUqtxyD8iGgZQqoHQM4BdQDp9z6hPS4QBvXp44os7GsvS0fq2Y0vyWTQaTkopa 3MDXhzDAUByvZBXQD3q5//BZYXfDF2cFNesc7yeQ9MDnOOlbfsFkCX6clGYgy/TE S/wWOI5ywiCcjNUrXnLydFJBJeA+qXtBQMri0p7RY9OUf2FVW/eu0JrFYFzbeQxp IBnjU9rrpVKALqwSUGCOO6Z2WmZj9f45xpppsRweUmSYiJtByAoEGdYecYOmsNHb JqVdWdsL17CImdto0PIxO8thyDWrIbA= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:11 2025 by rpki-client