$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa File: 73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa (raw, json) Hash identifier: QYzUylleYrKteMEc0auFavlN5gq6NcJcjr9u2kxDetM= Subject key identifier: 31:01:8D:A1:1A:F8:88:B8:61:4F:40:DD:5E:2A:27:F3:E3:59:34:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4052CC7EB0515A1206FCD8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:52:cc:7e:b0:51:5a:12:06:fc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=2a4f2084-3a92-46a6-a812-2e2855272f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:66:57:53:74:91:68:7d:59:65:61:59:32: b2:eb:77:fd:80:22:88:cd:d4:31:80:0c:59:7b:5c: 86:a0:83:00:16:7b:b5:67:58:91:40:17:79:2c:b4: f6:cf:0f:cd:de:d3:2b:6c:7f:1c:9b:9f:df:2c:56: 58:26:ae:4d:26:e3:8c:24:5a:2d:d9:e1:60:27:88: e0:c5:11:3f:49:3f:34:57:03:8b:79:60:31:1f:c6: 24:32:e3:0f:59:ac:56:5a:39:dc:02:9b:73:19:44: 6f:90:08:5f:bd:1b:9f:ba:4a:f1:c4:a1:46:2d:c5: e5:22:a8:d0:53:85:f6:70:b9:c3:39:f7:06:55:22: 57:d7:1a:6d:be:2c:6d:1b:ae:27:0e:84:98:da:56: b1:dd:8b:8c:d1:25:30:c3:73:9b:e3:c5:b6:f5:1c: 37:78:db:a1:67:73:96:eb:7a:30:18:69:02:86:88: c2:c5:1b:00:a1:01:ce:d7:13:69:35:89:fc:6e:38: df:0c:5a:b2:62:d7:3d:70:db:fd:85:f5:97:f7:eb: 71:99:df:6b:7d:b3:13:48:2c:a8:7d:eb:af:f4:82: 4d:d9:31:2e:9e:58:ce:16:cf:da:9c:d7:8b:5c:68: b4:6f:c6:87:1e:d3:d2:9b:b4:6d:de:ad:f7:39:e5: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:01:8D:A1:1A:F8:88:B8:61:4F:40:DD:5E:2A:27:F3:E3:59:34:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73fc1479-9abf-35ba-b587-a8fa3fd41cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:89:0c:d3:47:56:0b:6a:b2:84:9b:6e:b9:ae:3f:2c:d1:e2: 44:ae:3b:89:2d:90:3e:8b:3e:f1:cf:0a:4c:a3:33:a2:b5:5f: 2c:42:5f:29:67:20:a9:f4:43:94:97:7f:1d:a6:d2:8f:f0:b9: 19:d8:f7:47:3a:98:cf:66:e7:fa:cc:16:5f:62:7d:32:a5:3e: ee:cd:6e:25:77:be:34:ae:40:79:53:a7:e3:88:3b:0e:d9:8b: 5d:76:47:3b:bd:1d:6a:58:29:2e:3b:a3:d1:0f:7d:0d:13:5b: bc:a8:83:8d:37:34:9e:16:75:4d:67:c3:4b:27:c3:85:9d:8f: 7a:fe:50:b2:5f:90:c9:a8:76:80:79:23:89:1c:3e:15:b6:a2: 41:99:5d:9b:d0:85:28:94:c1:8e:1d:e9:d9:95:dc:e6:a4:e3: 2d:ad:28:6c:05:dd:63:0b:4e:de:81:fd:1d:b4:2d:ef:47:37: c1:fd:d9:5d:c3:ab:aa:94:1c:a4:fa:27:61:37:7f:8a:51:e8: b5:3a:c3:c7:4e:f3:74:1c:21:4f:fb:11:01:f8:ec:12:c2:1b: 88:a9:21:f9:94:e9:30:82:60:1f:7a:79:75:96:1e:1c:2c:dc: e4:38:ab:f9:12:3f:d7:c9:f9:7b:1d:c4:1c:c8:5f:ff:9a:bb: 31:b6:fc:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFLMfrBRWhIG/NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MmE0ZjIwODQtM2E5Mi00NmE2LWE4MTItMmUyODU1MjcyZjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O9mV1N0kWh9WWVhWTKy63f9gCKIzdQxgAxZ e1yGoIMAFnu1Z1iRQBd5LLT2zw/N3tMrbH8cm5/fLFZYJq5NJuOMJFot2eFgJ4jg xRE/ST80VwOLeWAxH8YkMuMPWaxWWjncAptzGURvkAhfvRufukrxxKFGLcXlIqjQ U4X2cLnDOfcGVSJX1xptvixtG64nDoSY2lax3YuM0SUww3Ob48W29Rw3eNuhZ3OW 63owGGkChojCxRsAoQHO1xNpNYn8bjjfDFqyYtc9cNv9hfWX9+txmd9rfbMTSCyo feuv9IJN2TEunljOFs/anNeLXGi0b8aHHtPSm7Rt3q33OeUzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEBjaEa+Ii4YU9A3V4qJ/PjWTSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNmYzE0NzktOWFiZi0z NWJhLWI1ODctYThmYTNmZDQxY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKJDNNHVgtqsoSbbrmuPyzR4kSuO4ktkD6LPvHPCkyjM6K1XyxCXyln IKn0Q5SXfx2m0o/wuRnY90c6mM9m5/rMFl9ifTKlPu7NbiV3vjSuQHlTp+OIOw7Z i112Rzu9HWpYKS47o9EPfQ0TW7yog403NJ4WdU1nw0snw4Wdj3r+ULJfkMmodoB5 I4kcPhW2okGZXZvQhSiUwY4d6dmV3Oak4y2tKGwF3WMLTt6B/R20Le9HN8H92V3D q6qUHKT6J2E3f4pR6LU6w8dO83QcIU/7EQH47BLCG4ipIfmU6TCCYB96eXWWHhws 3OQ4q/kSP9fJ+XsdxBzIX/+auzG2/Go= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:15 2025 by rpki-client