$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa File: 40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa (raw, json) Hash identifier: 7k4zD1oSwgnHVw0+PwXh+plKUrRP2korPPoKFlmTOzg= Subject key identifier: 8F:62:E5:A6:FD:24:BE:00:84:4A:44:E3:48:8F:4B:85:99:1F:46:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442259B9BF290DE4ABA3000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.31.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:25:9b:9b:f2:90:de:4a:ba:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=e00be42d-d69d-4969-8e60-d18970b1ad6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:71:14:27:8e:dc:87:a1:78:5f:98:22:5d:53: 25:c2:ad:1b:66:0d:a6:db:b6:d4:d8:8b:56:3a:0a: d4:b5:ce:46:00:fe:62:69:e4:26:ae:3f:b1:35:fd: 22:08:d9:9d:b1:f9:ec:8b:b7:49:65:71:6d:52:79: 1e:83:da:36:e2:be:1c:13:df:dd:1a:e1:35:7d:eb: 05:35:66:e6:c2:5a:33:4f:2c:07:78:bc:9b:80:5e: 4b:2c:b1:ca:04:be:06:f3:c2:6e:08:d2:05:a9:8d: 3e:8f:76:01:c7:5f:eb:ec:90:0e:3c:30:19:71:15: 5f:53:f9:52:17:e6:d2:54:fa:3c:41:5b:c7:93:0c: 68:17:77:22:e5:11:7a:ce:a6:31:60:85:90:d2:2b: 5a:57:f3:a9:a3:60:20:65:bc:e7:01:c0:eb:d0:e6: 6d:45:f1:25:24:61:1b:6a:96:01:91:11:3c:e8:2e: e8:0c:65:de:13:22:b7:3a:df:72:35:35:17:c6:52: cc:eb:bd:48:d5:6c:0a:a1:1c:cb:41:ac:79:47:68: f9:59:63:e4:b1:f5:42:d4:8b:91:f8:2b:1b:63:4d: cf:3a:3c:27:cb:07:91:ea:8f:8a:ee:97:5e:50:b1: 9d:91:c8:ce:a7:5a:d4:e7:73:53:c8:ac:fc:47:fb: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:62:E5:A6:FD:24:BE:00:84:4A:44:E3:48:8F:4B:85:99:1F:46:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40bafb9a-1ffc-3e7b-b160-1aff7ae60f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a4:39:b3:5e:46:90:84:bc:63:07:3b:a4:5b:4b:1e:11:72: 82:bf:43:84:9c:1c:e3:d0:75:35:02:7f:cb:6b:d8:9f:77:aa: cf:25:ee:d2:a7:c1:f0:75:a2:b0:00:94:e4:f4:f7:e8:37:26: c7:94:47:e7:de:9f:ff:02:73:a3:25:21:26:56:3e:b1:cd:31: b6:48:4f:47:46:c7:3f:99:34:97:3c:0b:68:47:ab:6f:1c:ed: 89:56:c9:05:cb:c3:64:0c:56:15:de:75:4b:7c:70:fa:1a:95: ae:e9:2c:a8:b0:37:c6:cb:a7:77:fc:2c:33:2a:53:5a:25:42: ae:d5:b4:20:05:ae:15:ab:84:ca:ed:90:8a:c4:12:73:4a:15: 04:06:e9:99:ea:4c:fe:27:7f:17:ca:a6:73:0d:61:09:ff:e4: 0e:87:ff:01:3d:0b:d0:06:c1:06:45:72:68:99:5b:0c:d0:26: 63:24:83:b0:82:b9:cf:f9:aa:ee:f8:1c:09:80:0b:01:1f:87: 96:6c:57:f0:14:a0:e4:dd:d2:e3:20:92:38:0f:90:f1:d2:78: 53:76:55:35:e3:59:9a:2c:e8:ab:ce:00:ef:6e:37:d3:3a:f4: e5:39:01:6a:e1:fa:e5:08:ad:41:21:fb:75:7e:74:ef:cf:64: 89:d9:b9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiWbm/KQ3kq6MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZTAwYmU0MmQtZDY5ZC00OTY5LThlNjAtZDE4OTcwYjFhZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3EUJ47ch6F4X5giXVMlwq0bZg2m27bU2ItW OgrUtc5GAP5iaeQmrj+xNf0iCNmdsfnsi7dJZXFtUnkeg9o24r4cE9/dGuE1fesF NWbmwlozTywHeLybgF5LLLHKBL4G88JuCNIFqY0+j3YBx1/r7JAOPDAZcRVfU/lS F+bSVPo8QVvHkwxoF3ci5RF6zqYxYIWQ0itaV/Opo2AgZbznAcDr0OZtRfElJGEb apYBkRE86C7oDGXeEyK3Ot9yNTUXxlLM671I1WwKoRzLQax5R2j5WWPksfVC1IuR +CsbY03POjwnyweR6o+K7pdeULGdkcjOp1rU53NTyKz8R/upcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9i5ab9JL4AhEpE40iPS4WZH0bCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBiYWZiOWEtMWZmYy0z ZTdiLWIxNjAtMWFmZjdhZTYwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6kObNeRpCEvGMHO6RbSx4RcoK/Q4ScHOPQdTUCf8tr2J93qs8l7tKn wfB1orAAlOT09+g3JseUR+fen/8Cc6MlISZWPrHNMbZIT0dGxz+ZNJc8C2hHq28c 7YlWyQXLw2QMVhXedUt8cPoala7pLKiwN8bLp3f8LDMqU1olQq7VtCAFrhWrhMrt kIrEEnNKFQQG6ZnqTP4nfxfKpnMNYQn/5A6H/wE9C9AGwQZFcmiZWwzQJmMkg7CC uc/5qu74HAmACwEfh5ZsV/AUoOTd0uMgkjgPkPHSeFN2VTXjWZos6KvOAO9uN9M6 9OU5AWrh+uUIrUEh+3V+dO/PZInZuao= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:07 2025 by rpki-client