$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa File: 5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa (raw, json) Hash identifier: BWs9oX68AiOeiyU5RBWZ15KiI64tIG103DlieaZ9APQ= Subject key identifier: 2B:9C:B4:C2:8A:D1:8C:91:86:0A:5C:1E:EE:E1:47:B6:16:F4:B1:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404966A99E0675A96674E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.28.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:49:66:a9:9e:06:75:a9:66:74:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=177c5c09-5276-42f7-a3e3-df419136e9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:87:8c:28:f2:1a:c2:75:bf:2e:e5:99:9b: 7a:4b:c4:8f:73:de:2c:85:c3:2a:3a:ce:34:77:ca: 3b:21:ac:fc:ed:79:28:a3:3d:74:84:c3:f9:23:69: 0c:dc:a8:35:d3:87:85:17:66:6e:d2:40:09:e6:bf: 55:44:fd:b6:fe:08:ff:67:5c:ec:8d:4a:b1:13:e7: 2a:ec:ee:16:64:8b:5e:fe:6d:2e:b0:6b:d0:60:e3: d1:ae:1b:fd:ed:a5:d8:bb:34:77:f3:c8:bb:56:23: 24:f8:3f:77:d5:7c:b5:97:fa:22:cb:7d:a7:0c:53: 1f:0e:ec:bc:3d:09:8b:f6:ae:c7:a5:1a:ac:f6:0e: 03:7c:90:2a:e1:a6:68:59:62:27:95:df:13:97:22: 33:b8:51:d4:99:0a:04:00:1b:27:82:41:73:50:d1: dc:45:16:52:13:18:6d:c7:2b:d7:b6:af:61:d4:1d: c9:9f:ea:f3:3e:d3:0e:e3:6f:fc:1b:d2:61:92:56: 51:5a:08:20:ea:d0:57:dd:12:07:71:4c:80:09:61: e6:3d:92:00:97:a0:c7:c1:1d:c6:29:8c:cf:79:8d: 2b:4a:44:cc:d5:af:16:cb:39:a0:67:33:44:9c:b1: 8b:59:19:15:fa:c8:80:7b:77:ec:52:72:be:21:27: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9C:B4:C2:8A:D1:8C:91:86:0A:5C:1E:EE:E1:47:B6:16:F4:B1:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f19b98e-e79c-315b-a72f-fd7023eb6d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ae:66:14:79:0b:32:73:c0:71:2d:a8:ba:e4:34:43:2f:14: 04:23:b3:3d:f2:0e:6a:a2:85:ed:b8:22:e1:8b:69:e3:19:8e: 88:f6:7a:97:6c:06:47:81:dc:3a:3a:63:da:90:51:7f:09:ad: de:f9:d4:08:06:a1:e3:2b:6c:f4:24:92:ab:8f:d9:c8:60:3b: 18:74:9e:d1:43:bd:54:7c:78:c9:7c:b0:07:7b:3b:09:cb:d5: 57:cd:15:92:c2:7e:b4:44:32:f0:09:bd:93:97:e9:8b:ee:d4: f1:2d:a3:5f:ab:da:de:43:63:3f:48:c3:98:e1:9d:8c:a0:7e: ef:36:90:36:37:2d:e1:10:2d:72:cd:3f:a0:7e:c5:ee:5b:6e: dd:db:74:43:d3:da:ce:3e:85:db:68:40:4b:0f:be:e9:a6:1e: c8:40:44:b8:6c:af:c8:d4:82:1f:94:d5:04:84:78:3d:17:bb: 75:28:cc:5f:e6:40:47:18:92:2c:09:ee:41:2f:12:8e:24:0d: c6:8f:e3:1b:4b:c0:9b:9f:d4:2a:7f:10:d7:eb:93:84:ea:41: b1:40:c3:ef:7c:63:bc:33:60:26:b8:76:24:de:d2:b7:57:78: 6a:26:3b:b0:60:40:3d:2b:f7:e3:8e:b1:70:0a:1e:ef:b5:f5: be:e9:1f:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QElmqZ4GdalmdOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTc3YzVjMDktNTI3Ni00MmY3LWEzZTMtZGY0MTkxMzZlOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXiHjCjyGsJ1vy7lmZt6S8SPc94shcMqOs40 d8o7Iaz87Xkooz10hMP5I2kM3Kg104eFF2Zu0kAJ5r9VRP22/gj/Z1zsjUqxE+cq 7O4WZIte/m0usGvQYOPRrhv97aXYuzR388i7ViMk+D931Xy1l/oiy32nDFMfDuy8 PQmL9q7HpRqs9g4DfJAq4aZoWWInld8TlyIzuFHUmQoEABsngkFzUNHcRRZSExht xyvXtq9h1B3Jn+rzPtMO42/8G9JhklZRWggg6tBX3RIHcUyACWHmPZIAl6DHwR3G KYzPeY0rSkTM1a8WyzmgZzNEnLGLWRkV+siAe3fsUnK+ISdsOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuctMKK0YyRhgpcHu7hR7YW9LFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWYxOWI5OGUtZTc5Yy0z MTViLWE3MmYtZmQ3MDIzZWI2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+uZhR5CzJzwHEtqLrkNEMvFAQjsz3yDmqihe24IuGLaeMZjoj2epds BkeB3Do6Y9qQUX8Jrd751AgGoeMrbPQkkquP2chgOxh0ntFDvVR8eMl8sAd7OwnL 1VfNFZLCfrREMvAJvZOX6Yvu1PEto1+r2t5DYz9Iw5jhnYygfu82kDY3LeEQLXLN P6B+xe5bbt3bdEPT2s4+hdtoQEsPvummHshARLhsr8jUgh+U1QSEeD0Xu3UozF/m QEcYkiwJ7kEvEo4kDcaP4xtLwJuf1Cp/ENfrk4TqQbFAw+98Y7wzYCa4diTe0rdX eGomO7BgQD0r9+OOsXAKHu+19b7pH1M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:56 2025 by rpki-client