$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa File: 925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa (raw, json) Hash identifier: GUO0oAwpF/lWUiBMSaT2CDTk3klWqpgs9lmobtXHuP0= Subject key identifier: 3E:F2:13:B4:F2:F3:74:F4:0E:8D:56:73:58:F7:CB:64:BF:E3:6A:2B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC747795A9709CEA1210380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 71.31.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:47:79:5a:97:09:ce:a1:21:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c6e1be5d-722c-4b0f-bade-3960471f5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:24:72:34:7a:fb:32:50:de:7f:59:56:24:75: 24:07:90:15:bf:dd:47:52:04:db:dd:b3:cb:3b:81: bc:4b:e6:b8:eb:0a:a7:70:57:be:29:42:ef:42:1d: 0c:c6:25:ea:a5:6c:bd:42:44:3b:fe:e8:93:4f:c3: 7a:5d:68:0b:38:2a:be:57:cc:c6:0a:3f:8c:48:f8: 2b:08:1c:67:8a:1e:15:cd:51:41:2f:29:21:7d:53: 69:84:77:89:6b:c8:72:cc:9a:73:12:e7:78:47:5d: 04:c1:e6:fe:61:73:09:c6:2b:03:fc:47:3b:9a:84: 5b:2f:9b:67:5d:61:87:48:7d:d5:60:61:66:10:37: c4:ef:00:96:86:e6:08:92:da:2c:67:af:a1:28:7b: 6c:0d:e1:a8:49:48:95:dd:a8:4d:8e:a7:d9:3f:64: db:32:0c:40:3b:1e:ae:08:03:0a:0c:b5:65:34:46: a3:bb:7e:ca:02:f6:8d:e3:7d:f8:72:98:29:c5:27: d1:f6:4f:fc:12:37:ec:5a:6d:de:22:77:2e:39:51: 66:26:07:c3:0e:a0:f6:a1:76:60:a7:d2:a2:29:75: ca:ea:ee:bb:cd:42:35:28:c3:4f:d9:70:3a:03:e3: 9f:2e:14:df:88:fe:09:67:50:08:99:6c:d6:20:84: 7c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:13:B4:F2:F3:74:F4:0E:8D:56:73:58:F7:CB:64:BF:E3:6A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/925f6416-fac5-3a8a-8ff2-0d2e68f4ef37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e2:3d:af:f1:03:30:bf:fb:11:af:67:1a:7b:8e:ce:ec:65: b1:d6:7e:dc:9a:c2:cd:82:cd:de:d4:7a:3d:11:c1:1d:e9:3a: 4a:0f:dc:7d:42:b7:6f:b4:e0:44:c8:e7:1e:48:80:44:ca:93: 84:94:90:e9:95:d0:04:dc:f5:6b:e5:89:6f:98:62:66:48:b7: 87:72:91:6f:ba:94:dd:fb:a1:13:a7:83:c0:e2:e6:e6:83:fa: c5:fe:32:9f:2b:b8:4c:49:93:65:12:a8:15:52:3d:83:b8:89: 36:d9:8d:b2:4e:0b:c1:a0:e8:8d:c7:31:18:14:be:de:c6:b8: 89:87:28:e3:0d:1d:64:88:50:f8:f7:46:b3:91:e6:8c:51:9d: 31:e0:41:85:df:d1:34:f2:9d:5e:09:9c:bf:cf:99:ae:c9:a4: c1:ca:b7:e8:4e:1b:b5:81:ca:bd:67:26:c7:7e:db:44:cd:d3: 12:e0:77:5b:54:64:e0:83:47:f8:5d:a6:cb:3a:f9:a6:51:b6: f1:04:e9:16:9f:84:07:20:02:d9:60:60:9e:9a:48:c3:b2:31: 68:19:14:e7:34:c6:b3:45:d9:14:c0:23:5c:e4:4b:40:e1:f8: 6c:2c:74:99:61:4c:e1:e3:6e:bb:de:22:78:b3:74:ab:be:29: 1a:86:29:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0d5WpcJzqEhA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YzZlMWJlNWQtNzIyYy00YjBmLWJhZGUtMzk2MDQ3MWY1NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iRyNHr7MlDef1lWJHUkB5AVv91HUgTb3bPL O4G8S+a46wqncFe+KULvQh0MxiXqpWy9QkQ7/uiTT8N6XWgLOCq+V8zGCj+MSPgr CBxnih4VzVFBLykhfVNphHeJa8hyzJpzEud4R10Eweb+YXMJxisD/Ec7moRbL5tn XWGHSH3VYGFmEDfE7wCWhuYIktosZ6+hKHtsDeGoSUiV3ahNjqfZP2TbMgxAOx6u CAMKDLVlNEaju37KAvaN4334cpgpxSfR9k/8EjfsWm3eIncuOVFmJgfDDqD2oXZg p9KiKXXK6u67zUI1KMNP2XA6A+OfLhTfiP4JZ1AImWzWIIR8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7yE7Ty83T0Do1Wc1j3y2S/42orMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTI1ZjY0MTYtZmFjNS0z YThhLThmZjItMGQyZTY4ZjRlZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXiPa/xAzC/+xGvZxp7js7sZbHWftyaws2Czd7Uej0RwR3pOkoP3H1C t2+04ETI5x5IgETKk4SUkOmV0ATc9WvliW+YYmZIt4dykW+6lN37oROng8Di5uaD +sX+Mp8ruExJk2USqBVSPYO4iTbZjbJOC8Gg6I3HMRgUvt7GuImHKOMNHWSIUPj3 RrOR5oxRnTHgQYXf0TTynV4JnL/Pma7JpMHKt+hOG7WByr1nJsd+20TN0xLgd1tU ZOCDR/hdpss6+aZRtvEE6RafhAcgAtlgYJ6aSMOyMWgZFOc0xrNF2RTAI1zkS0Dh +GwsdJlhTOHjbrveInizdKu+KRqGKb0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:28 2025 by rpki-client