$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa File: 60d9d089-2a28-38fb-b012-53296696a4f3.roa (raw, json) Hash identifier: 0sNIg2yD4RhZ945kBXSroCO88TFLABRl+GjRmLRNWuw= Subject key identifier: A1:BF:BB:E4:7C:C1:BD:9C:14:69:76:90:29:8F:5C:05:13:3E:4A:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40530000CA1B80E25B7400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.30.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:53:00:00:ca:1b:80:e2:5b:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=7d6ae2de-937c-488b-92eb-d845410c4231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:cf:c2:e0:1d:96:75:71:99:ac:80:59:84: 89:0c:25:c2:b5:5d:ac:b2:ce:f4:d4:f6:56:02:41: b8:5c:f4:96:c3:9c:3f:5c:dd:d1:39:6f:5c:bd:3e: 7e:c2:da:14:b6:55:e5:43:f3:f1:1a:f6:15:5e:45: d9:33:54:77:86:6b:e3:7b:35:a9:67:ca:66:62:12: cb:16:20:b8:fb:eb:ff:2b:8f:d3:a4:bf:4c:77:7a: ba:27:32:c7:01:80:01:7b:f4:33:85:ea:44:d5:61: f9:30:e9:08:a4:3c:45:dc:cf:fd:c2:5f:06:0b:49: 22:73:66:ff:e5:7e:24:38:d1:64:71:71:00:c1:2a: 69:e5:b6:93:96:8f:ad:03:0c:d1:44:a1:68:86:ef: 1f:07:ec:8d:ed:53:a9:41:c5:4e:27:cd:95:42:ab: 7b:ba:78:26:82:4c:85:d2:92:76:c2:27:5e:67:6e: 75:11:21:2b:af:ed:87:92:5b:65:41:f7:d9:17:b6: 3e:f0:ee:96:78:c5:0a:42:a4:28:c8:13:23:6a:05: dc:5a:33:6d:6f:f7:3f:dc:a8:9d:84:40:90:b1:11: de:2b:d6:48:3a:0f:4e:75:18:c8:2c:bd:97:cd:4a: 36:06:50:88:8e:5b:d3:6b:a9:9b:39:e4:7f:67:ee: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BF:BB:E4:7C:C1:BD:9C:14:69:76:90:29:8F:5C:05:13:3E:4A:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60d9d089-2a28-38fb-b012-53296696a4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:67:3d:d5:2e:73:9c:ab:03:05:03:fc:1e:3b:1b:14:bf:39: 28:d3:8b:ec:a8:d3:cd:30:c4:e4:70:7b:01:9f:ef:30:8d:a1: 18:9d:f2:25:1f:3d:65:e8:fb:9a:3d:4d:4a:5f:69:00:80:67: 6c:a7:a6:99:8b:7c:ae:f7:2f:fa:8b:34:66:ca:c5:28:92:b8: d0:8f:e0:d0:04:17:a7:88:1d:48:da:42:73:ee:2a:d0:d1:16: b2:f9:d6:54:e5:76:50:f8:91:55:e7:f5:39:f3:d1:be:01:a7: 0c:98:ce:c6:a8:77:34:fc:c7:c7:29:fc:eb:01:32:b6:3e:3a: 3c:58:6e:73:b2:96:a4:c0:bd:08:63:18:92:40:dc:65:37:f2: 28:65:e2:47:99:6c:33:03:21:cc:4f:7f:a0:95:a5:55:3d:0b: 33:35:9a:77:87:c1:21:e5:66:dc:73:4d:2f:51:ad:84:f1:69: df:0d:fe:77:89:0f:1f:df:a6:cf:d4:20:21:d8:df:34:0d:37: 44:8f:ba:dc:3f:e3:c3:6b:20:cd:17:ba:ab:fd:76:8a:4b:55: 6f:69:b9:ea:5d:8f:ff:c8:a2:76:19:f4:3a:99:df:99:2e:c3: f2:e7:c4:b4:da:0c:e3:10:37:b6:fa:3b:1f:f2:65:95:7c:6d: 97:7f:92:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFMAAMobgOJbdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk N2Q2YWUyZGUtOTM3Yy00ODhiLTkyZWItZDg0NTQxMGM0MjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTPPwuAdlnVxmayAWYSJDCXCtV2sss701PZW AkG4XPSWw5w/XN3ROW9cvT5+wtoUtlXlQ/PxGvYVXkXZM1R3hmvjezWpZ8pmYhLL FiC4++v/K4/TpL9Md3q6JzLHAYABe/QzhepE1WH5MOkIpDxF3M/9wl8GC0kic2b/ 5X4kONFkcXEAwSpp5baTlo+tAwzRRKFohu8fB+yN7VOpQcVOJ82VQqt7ungmgkyF 0pJ2wideZ251ESErr+2HkltlQffZF7Y+8O6WeMUKQqQoyBMjagXcWjNtb/c/3Kid hECQsRHeK9ZIOg9OdRjILL2XzUo2BlCIjlvTa6mbOeR/Z+54CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG/u+R8wb2cFGl2kCmPXAUTPkpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjBkOWQwODktMmEyOC0z OGZiLWIwMTItNTMyOTY2OTZhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFnPdUuc5yrAwUD/B47GxS/OSjTi+yo080wxORwewGf7zCNoRid8iUf PWXo+5o9TUpfaQCAZ2ynppmLfK73L/qLNGbKxSiSuNCP4NAEF6eIHUjaQnPuKtDR FrL51lTldlD4kVXn9Tnz0b4BpwyYzsaodzT8x8cp/OsBMrY+OjxYbnOylqTAvQhj GJJA3GU38ihl4keZbDMDIcxPf6CVpVU9CzM1mneHwSHlZtxzTS9RrYTxad8N/neJ Dx/fps/UICHY3zQNN0SPutw/48NrIM0Xuqv9dopLVW9puepdj//IonYZ9DqZ35ku w/LnxLTaDOMQN7b6Ox/yZZV8bZd/kss= -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:24 2025 by rpki-client