$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa File: 2554db6e-c015-300e-96cd-5feec8e7db61.roa (raw, json) Hash identifier: beWEWJ+hSWSSy5USWOXiCGpGLY1Wq0B+zRPwgmAbc2s= Subject key identifier: E9:C0:03:8B:62:6F:DB:25:A0:93:C1:2A:BC:DB:10:48:CC:AE:DA:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405D687177D48F8EB403C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5d:68:71:77:d4:8f:8e:b4:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0e879b64-1c9f-47ac-86c7-8c31cb7ad805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:61:fa:db:b3:f7:ff:c4:84:f7:06:68:de: 99:c0:fb:66:0f:2c:1f:47:a7:56:14:75:32:2a:88: b1:b6:bb:24:70:78:d5:43:fd:52:9a:50:27:64:c3: 7c:25:86:fe:a4:19:1a:c4:8b:db:77:27:b2:97:b6: 93:48:a2:7e:38:63:3a:b5:54:79:ec:64:a4:00:e3: 1f:96:b6:a6:f0:6d:0b:b7:5c:9b:d3:78:1a:7f:0f: 11:5a:e4:3c:b5:2a:05:01:38:32:e4:28:44:92:81: ed:3b:67:db:fe:3e:2a:29:c4:92:a9:fb:e7:72:7c: 77:4b:f6:3d:50:78:6f:2f:e7:1e:40:af:c3:cb:c5: 0d:f4:3c:57:e8:1f:da:b1:97:47:6b:4f:56:0f:2f: e1:f5:9e:d6:25:ea:e6:ed:17:1c:5a:18:6d:77:f5: 09:0c:69:e2:7e:2f:54:ee:d3:b0:ca:f6:5d:da:16: 4d:bb:af:74:5e:b4:79:1f:eb:7a:f0:58:54:26:e6: 0c:84:70:fc:cf:1a:d2:65:57:6d:32:0a:4f:70:ff: fd:75:79:dd:95:91:f9:d7:df:68:a7:89:71:bb:3e: d0:25:60:ba:ca:d0:96:b1:a2:e0:47:a4:78:7d:a0: e2:0e:83:d8:5e:f4:03:0e:bb:02:ef:e2:b4:32:82: 35:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:03:8B:62:6F:DB:25:A0:93:C1:2A:BC:DB:10:48:CC:AE:DA:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2554db6e-c015-300e-96cd-5feec8e7db61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b5:83:66:b5:eb:d6:f8:1e:62:10:7c:8a:f9:6f:6d:7e:aa: 42:96:e7:6d:60:97:be:47:89:3e:91:69:a4:ef:89:fa:19:1a: ab:c7:cf:1b:40:99:11:98:37:e9:ed:84:74:a1:42:f3:46:b0: 4e:d3:a5:49:03:9a:9b:70:ca:e7:67:1d:b4:7b:83:43:a0:dd: 97:75:68:0b:78:24:1f:91:5f:33:47:b0:0a:09:a7:14:40:ae: 46:92:65:c0:b3:8d:d7:a1:dd:eb:53:a4:01:db:cc:00:18:03: 6c:d9:17:a0:97:e9:ff:fa:b4:80:8c:18:f5:a4:fc:92:bb:fd: 7a:67:3a:78:f2:39:9d:88:68:ef:a9:d1:d7:52:46:47:09:d8: 3b:40:c3:e3:3c:5a:77:fd:18:78:53:9f:6f:44:e4:33:8e:74: 6a:8c:cb:6f:4c:57:e5:4a:e7:38:7b:30:57:07:bf:15:4d:b3: ff:8f:23:0e:96:8a:d2:d0:97:f2:16:09:19:48:e7:7d:08:0a: 79:64:f1:79:5a:64:9b:80:26:64:1d:c0:e5:90:39:f9:72:45: e7:c3:14:94:cc:e4:2c:04:fc:58:f9:ff:1e:2a:2e:e9:be:df: d4:17:c6:2a:a4:5f:04:28:8b:75:20:29:82:d2:81:57:45:4a: 12:e6:38:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QF1ocXfUj460A8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGU4NzliNjQtMWM5Zi00N2FjLTg2YzctOGMzMWNiN2FkODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf9h+tuz9//EhPcGaN6ZwPtmDywfR6dWFHUy KoixtrskcHjVQ/1SmlAnZMN8JYb+pBkaxIvbdyeyl7aTSKJ+OGM6tVR57GSkAOMf lram8G0Lt1yb03gafw8RWuQ8tSoFATgy5ChEkoHtO2fb/j4qKcSSqfvncnx3S/Y9 UHhvL+ceQK/Dy8UN9DxX6B/asZdHa09WDy/h9Z7WJerm7RccWhhtd/UJDGnifi9U 7tOwyvZd2hZNu690XrR5H+t68FhUJuYMhHD8zxrSZVdtMgpPcP/9dXndlZH5199o p4lxuz7QJWC6ytCWsaLgR6R4faDiDoPYXvQDDrsC7+K0MoI1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnAA4tib9sloJPBKrzbEEjMrtr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU1NGRiNmUtYzAxNS0z MDBlLTk2Y2QtNWZlZWM4ZTdkYjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI21g2a169b4HmIQfIr5b21+qkKW521gl75HiT6RaaTvifoZGqvHzxtA mRGYN+nthHShQvNGsE7TpUkDmptwyudnHbR7g0Og3Zd1aAt4JB+RXzNHsAoJpxRA rkaSZcCzjdeh3etTpAHbzAAYA2zZF6CX6f/6tICMGPWk/JK7/XpnOnjyOZ2IaO+p 0ddSRkcJ2DtAw+M8Wnf9GHhTn29E5DOOdGqMy29MV+VK5zh7MFcHvxVNs/+PIw6W itLQl/IWCRlI530ICnlk8XlaZJuAJmQdwOWQOflyRefDFJTM5CwE/Fj5/x4qLum+ 39QXxiqkXwQoi3UgKYLSgVdFShLmOFg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:05 2025 by rpki-client