$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa File: 1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa (raw, json) Hash identifier: e9RNKZ5FUL0baryaM5LibC+XoDe0zxVGrhU/FNPVpcs= Subject key identifier: 4B:00:3C:D4:53:75:00:9D:1D:AA:BF:01:0E:E3:3D:CA:7A:54:44:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC7508BB98EF9FD1257E580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.29.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:50:8b:b9:8e:f9:fd:12:57:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=0fb62f85-21bc-49af-9345-286f20f03dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:a1:a4:25:fd:2e:f2:c6:69:0d:ff:a8:0a: 86:b6:df:0c:16:32:90:14:b5:dd:6b:9a:c8:fb:30: 9f:52:7e:fb:d1:49:96:5f:1a:1b:61:6e:7b:4d:54: 55:0b:3b:7a:5b:f5:25:52:4a:2c:0c:b6:73:e2:0a: 3d:4b:f4:b2:fd:95:12:6a:b9:8d:96:7a:55:e5:ed: 86:77:b5:0c:ba:d0:92:43:2c:92:d1:03:15:d9:ed: b1:de:18:3e:58:6b:e5:88:b7:69:05:c8:b9:7f:5c: f7:13:26:3a:e6:ae:d2:6c:b0:a7:66:b6:f3:09:2c: 4e:b8:bd:bf:4c:24:de:2e:84:75:99:cd:a8:cc:55: 8d:61:24:c8:72:3d:5a:4c:b6:d0:6f:e1:1b:0d:92: 8e:2e:0c:f0:ae:21:4c:2d:b6:08:99:61:51:eb:ba: 74:97:6e:44:b2:f1:eb:cd:e2:8a:75:c7:46:e4:5a: 4c:15:23:c4:da:ad:09:00:5e:de:7a:bf:f7:13:03: 66:5b:c6:5a:cf:4f:a1:f6:44:1f:10:79:74:17:41: 13:c6:0a:7a:6d:5c:72:e0:03:e5:16:96:a7:f9:59: ad:47:14:5d:15:9a:e5:41:32:1f:91:df:43:14:8a: 09:1a:23:7f:9c:6f:38:68:97:99:25:8d:02:67:48: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:3C:D4:53:75:00:9D:1D:AA:BF:01:0E:E3:3D:CA:7A:54:44:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ea7017c-6bc9-34d3-ba40-ab764c4a75ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6d:93:68:8e:4b:90:b1:40:f1:a6:53:39:48:1d:42:ce:87: 0f:c9:c4:4e:67:9c:f9:9e:b0:28:b5:e4:d5:b5:d7:d0:70:84: d2:91:e7:44:c1:7a:21:4a:74:2d:92:ea:53:10:00:e8:8c:7a: c1:34:46:97:cc:a9:46:32:73:aa:55:54:af:e2:d3:21:7e:f2: c6:1f:51:f7:57:29:3a:fa:9a:ae:17:00:a2:28:5c:43:92:e2: 54:d3:e5:81:9f:16:02:9a:0f:7e:db:82:65:b5:55:ca:3e:c6: 7e:7a:dd:8a:13:ef:85:ce:57:d3:f9:3c:b2:79:7c:b4:8f:e0: 75:9b:63:53:77:cb:14:46:38:dc:11:b0:b9:d2:f5:0b:7d:99: f1:f6:3b:78:e4:6d:b7:60:9c:6a:e3:64:59:0a:75:4f:a2:ec: 35:c0:22:80:23:57:d6:99:dd:2e:18:b6:aa:f8:47:50:d4:ed: f6:18:1e:d4:18:a9:fb:2d:cb:30:71:a2:5b:55:cd:69:19:5b: 4d:7b:4b:30:7b:35:ef:07:1f:91:38:06:ba:cb:a9:eb:9e:66: e2:dd:ab:6c:21:33:a3:d9:c8:c4:6b:04:07:8e:6b:ed:aa:cc: ae:c6:0c:f7:e1:8f:30:e7:cc:87:02:e4:d6:c8:41:b1:1f:4d: d0:52:36:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1CLuY75/RJX5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MGZiNjJmODUtMjFiYy00OWFmLTkzNDUtMjg2ZjIwZjAzZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpmhpCX9LvLGaQ3/qAqGtt8MFjKQFLXda5rI +zCfUn770UmWXxobYW57TVRVCzt6W/UlUkosDLZz4go9S/Sy/ZUSarmNlnpV5e2G d7UMutCSQyyS0QMV2e2x3hg+WGvliLdpBci5f1z3EyY65q7SbLCnZrbzCSxOuL2/ TCTeLoR1mc2ozFWNYSTIcj1aTLbQb+EbDZKOLgzwriFMLbYImWFR67p0l25EsvHr zeKKdcdG5FpMFSPE2q0JAF7eer/3EwNmW8Zaz0+h9kQfEHl0F0ETxgp6bVxy4APl Fpan+VmtRxRdFZrlQTIfkd9DFIoJGiN/nG84aJeZJY0CZ0g5MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsAPNRTdQCdHaq/AQ7jPcp6VESgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVhNzAxN2MtNmJjOS0z NGQzLWJhNDAtYWI3NjRjNGE3NWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5tk2iOS5CxQPGmUzlIHULOhw/JxE5nnPmesCi15NW119BwhNKR50TB eiFKdC2S6lMQAOiMesE0RpfMqUYyc6pVVK/i0yF+8sYfUfdXKTr6mq4XAKIoXEOS 4lTT5YGfFgKaD37bgmW1Vco+xn563YoT74XOV9P5PLJ5fLSP4HWbY1N3yxRGONwR sLnS9Qt9mfH2O3jkbbdgnGrjZFkKdU+i7DXAIoAjV9aZ3S4Ytqr4R1DU7fYYHtQY qfstyzBxoltVzWkZW017SzB7Ne8HH5E4BrrLqeueZuLdq2whM6PZyMRrBAeOa+2q zK7GDPfhjzDnzIcC5NbIQbEfTdBSNvU= -----END CERTIFICATE-----Generated at Tue Nov 4 19:16:01 2025 by rpki-client