$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa File: 3bdc6966-5141-3334-888e-7e197a25c456.roa (raw, json) Hash identifier: FYH6ZSbgTjyF4Wqm3vGdKJRyp2cPm4Xm8lW2/5KGSys= Subject key identifier: DD:DE:FD:50:73:58:D5:2D:71:F3:75:9A:42:39:8D:55:79:10:29:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40551937B6626ECE857000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.31.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:19:37:b6:62:6e:ce:85:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=8c4d6a4c-9497-4808-aa8d-b5a62e8afd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:bf:55:91:3d:35:1b:8c:86:65:17:84:21: 86:4d:12:72:2e:21:33:9e:9e:86:9b:40:32:24:51: 23:ea:2b:18:0a:28:53:0f:5c:60:20:8c:72:c8:bf: 8f:80:ab:f3:4c:78:df:63:53:1d:04:32:8f:f0:3e: a5:29:b5:3d:9d:61:b5:5c:91:a2:39:d8:4e:55:bf: 5c:cc:62:35:d2:61:92:8c:32:55:b7:03:8e:55:de: ab:5a:88:e4:a2:c2:3b:55:50:61:e1:97:e0:28:b2: 21:f0:7c:e1:af:f4:6c:b2:d3:6f:a5:41:56:36:5d: ce:e4:d9:c6:ed:f1:b9:79:a0:78:0b:e7:99:ad:34: 80:30:85:f7:c5:f9:ba:38:46:20:d3:89:f9:f9:3e: bb:19:d3:14:f9:40:3d:76:42:8e:0f:e5:e2:99:ff: 17:22:c2:97:a6:96:b2:b8:21:b7:6f:8f:74:85:14: f1:64:a9:b3:4f:80:72:7b:10:36:03:5f:95:e6:61: c9:52:8e:49:cc:62:ef:3f:da:c7:dc:a8:c1:d1:81: ee:e2:21:05:03:04:ba:1a:02:ce:b6:4a:a7:48:6b: b5:67:d1:bd:21:ba:80:83:e1:0d:9b:25:99:10:94: 94:04:d5:9a:3a:06:b7:65:0a:7f:97:f9:b3:a3:36: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:FD:50:73:58:D5:2D:71:F3:75:9A:42:39:8D:55:79:10:29:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bdc6966-5141-3334-888e-7e197a25c456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fe:85:dc:ed:aa:18:db:5c:71:ba:7f:64:92:a5:cd:b7:03: 02:ef:ca:cf:cd:42:97:6d:74:98:a6:14:b8:7f:df:c1:73:b7: 06:22:f9:e1:3b:b9:16:a4:9d:b0:bc:a8:ca:c6:0c:dd:dd:6c: ad:f7:39:96:fa:e4:24:6e:b6:9c:44:55:b1:e7:cd:eb:9f:55: 7d:71:4f:2b:38:dd:fd:b0:bb:73:1d:44:a4:2f:1f:a2:15:b1: 73:63:05:a0:f1:83:ca:29:14:4c:1b:33:73:11:76:db:14:0f: a1:aa:39:9b:38:83:de:44:3e:1d:f2:2e:4e:16:f3:a5:b9:72: 5a:e3:cc:78:b3:69:0c:b0:ab:87:03:f8:b4:62:8b:26:07:ef: 73:1c:40:36:c5:df:f8:ed:e6:db:c8:33:f4:ec:76:3b:dc:ff: 28:60:88:61:c0:67:47:7d:51:fd:fe:d8:18:dd:99:e0:d2:1c: b4:d0:76:a4:87:ec:76:e7:e6:28:81:02:5f:93:a9:50:96:24: 9a:8f:d6:b6:ec:8b:4c:38:17:66:12:cd:2b:d4:ca:58:67:98: 7f:d1:f3:9a:5d:90:aa:2f:70:4e:53:bb:45:44:86:bf:99:9d: 45:73:32:76:09:3d:53:28:33:d5:b1:f8:6f:c8:15:08:12:7d: ba:bc:b9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFUZN7Zibs6FcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OGM0ZDZhNGMtOTQ5Ny00ODA4LWFhOGQtYjVhNjJlOGFmZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjla/VZE9NRuMhmUXhCGGTRJyLiEznp6Gm0Ay JFEj6isYCihTD1xgIIxyyL+PgKvzTHjfY1MdBDKP8D6lKbU9nWG1XJGiOdhOVb9c zGI10mGSjDJVtwOOVd6rWojkosI7VVBh4ZfgKLIh8Hzhr/RsstNvpUFWNl3O5NnG 7fG5eaB4C+eZrTSAMIX3xfm6OEYg04n5+T67GdMU+UA9dkKOD+Ximf8XIsKXppay uCG3b490hRTxZKmzT4ByexA2A1+V5mHJUo5JzGLvP9rH3KjB0YHu4iEFAwS6GgLO tkqnSGu1Z9G9IbqAg+ENmyWZEJSUBNWaOga3ZQp/l/mzozZthQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3e/VBzWNUtcfN1mkI5jVV5ECnoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JkYzY5NjYtNTE0MS0z MzM0LTg4OGUtN2UxOTdhMjVjNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX+hdztqhjbXHG6f2SSpc23AwLvys/NQpdtdJimFLh/38FztwYi+eE7 uRaknbC8qMrGDN3dbK33OZb65CRutpxEVbHnzeufVX1xTys43f2wu3MdRKQvH6IV sXNjBaDxg8opFEwbM3MRdtsUD6GqOZs4g95EPh3yLk4W86W5clrjzHizaQywq4cD +LRiiyYH73McQDbF3/jt5tvIM/Tsdjvc/yhgiGHAZ0d9Uf3+2BjdmeDSHLTQdqSH 7Hbn5iiBAl+TqVCWJJqP1rbsi0w4F2YSzSvUylhnmH/R85pdkKovcE5Tu0VEhr+Z nUVzMnYJPVMoM9Wx+G/IFQgSfbq8uWE= -----END CERTIFICATE-----Generated at Tue Nov 4 17:02:14 2025 by rpki-client