$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa File: 9df77081-57fb-39ce-9dd0-1a902633477f.roa (raw, json) Hash identifier: npRGKzIWyBdVuvSDtLfrPRCFyiu5EqvE+dbR9h0YwPQ= Subject key identifier: 20:3F:97:E0:1E:CC:BA:B6:C0:42:CB:38:E0:CA:C3:EB:2E:72:E8:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B83821665F0759AA2E4256180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 71.28.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:16:65:f0:75:9a:a2:e4:25:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=c73308ae-8cfe-4773-aefe-462216c20d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:1e:69:c6:32:54:b4:cb:4d:d9:14:73:9f: ab:a9:71:00:99:95:6d:51:4c:36:62:f0:9e:9a:ff: a7:d2:a8:13:48:0b:15:6a:19:36:13:8b:50:1e:c5: 17:0e:d6:73:b2:17:1d:90:06:f1:29:7a:10:37:db: 18:e9:aa:66:8e:30:13:9e:78:09:7f:82:57:b7:d1: e0:4c:aa:8a:4e:bf:a6:93:55:af:33:31:f1:0c:c3: 8f:0e:2c:d0:18:33:e1:8f:fc:80:be:23:9a:9e:37: f4:23:7b:f6:79:43:02:9a:53:20:9b:d5:04:57:4b: 3d:5f:24:e0:a1:73:fe:13:32:e4:64:c8:86:ba:b5: bc:fb:b2:7d:83:b0:d3:51:17:22:a3:63:fd:6d:99: 76:39:f6:14:6b:77:d8:1c:9c:a8:4c:85:72:47:a5: 2e:d0:93:58:0b:2f:5b:87:d0:13:e9:ce:52:6a:4d: 06:38:10:74:4c:a5:9b:32:62:55:b1:ef:99:46:8e: b9:4d:2a:e8:36:40:9f:17:e8:e1:88:11:df:de:27: 80:ae:d5:a2:9f:7c:16:da:82:58:e9:d1:9a:63:d6: c5:0a:65:8a:43:5c:23:d7:b3:81:de:18:ef:96:7d: 68:48:fd:c6:fe:e0:40:05:00:7b:ac:5c:3e:cb:d2: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:97:E0:1E:CC:BA:B6:C0:42:CB:38:E0:CA:C3:EB:2E:72:E8:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9df77081-57fb-39ce-9dd0-1a902633477f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:04:00:40:1e:7b:3f:a0:b1:c1:74:81:d5:cd:98:fb:d2:01: 82:38:c0:67:1e:a2:cd:29:de:70:c4:7b:48:87:c1:65:91:40: b7:cc:11:5d:38:59:30:df:45:29:ec:52:a6:0d:48:66:7c:40: a7:2f:0b:3e:c8:e2:57:1c:09:f7:98:a3:a1:cc:26:ff:63:37: a7:1b:27:d1:ff:34:a1:f6:cf:83:09:16:14:c8:da:62:d6:cf: 8b:bd:ee:21:1f:70:7a:30:32:b3:76:14:c0:01:1a:b9:34:a1: 8a:c1:63:cd:8c:c9:f7:40:63:b3:ce:e9:25:2a:fc:44:ad:73: ce:ef:cc:f0:59:5c:23:35:31:7b:74:e5:de:37:bf:a6:0c:6b: c0:5d:1b:27:e4:0b:6e:af:8b:50:96:49:66:3c:41:af:a1:44: c0:9e:93:ad:58:e9:2d:e0:e6:2f:37:d9:cd:c6:3f:85:78:f0: 0d:9f:fa:40:a6:26:f4:07:0b:24:f7:71:07:4f:0d:09:00:2e: 02:92:af:7d:23:99:ae:f9:7e:fa:de:5a:41:76:80:41:d5:39: 72:a0:3a:49:b6:34:2e:47:96:62:54:5f:eb:a7:e3:b1:70:48: 30:25:18:ea:1b:49:5c:56:a5:ff:96:c9:10:f2:d8:50:9b:24: 18:1c:6c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDghZl8HWaouQlYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YzczMzA4YWUtOGNmZS00NzczLWFlZmUtNDYyMjE2YzIwZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf4eacYyVLTLTdkUc5+rqXEAmZVtUUw2YvCe mv+n0qgTSAsVahk2E4tQHsUXDtZzshcdkAbxKXoQN9sY6apmjjATnngJf4JXt9Hg TKqKTr+mk1WvMzHxDMOPDizQGDPhj/yAviOanjf0I3v2eUMCmlMgm9UEV0s9XyTg oXP+EzLkZMiGurW8+7J9g7DTURcio2P9bZl2OfYUa3fYHJyoTIVyR6Uu0JNYCy9b h9AT6c5Sak0GOBB0TKWbMmJVse+ZRo65TSroNkCfF+jhiBHf3ieArtWin3wW2oJY 6dGaY9bFCmWKQ1wj17OB3hjvln1oSP3G/uBABQB7rFw+y9I9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA/l+AezLq2wELLOODKw+sucugnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWRmNzcwODEtNTdmYi0z OWNlLTlkZDAtMWE5MDI2MzM0NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxzjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkEAEAeez+gscF0gdXNmPvSAYI4wGceos0p3nDEe0iHwWWRQLfMEV04 WTDfRSnsUqYNSGZ8QKcvCz7I4lccCfeYo6HMJv9jN6cbJ9H/NKH2z4MJFhTI2mLW z4u97iEfcHowMrN2FMABGrk0oYrBY82MyfdAY7PO6SUq/EStc87vzPBZXCM1MXt0 5d43v6YMa8BdGyfkC26vi1CWSWY8Qa+hRMCek61Y6S3g5i832c3GP4V48A2f+kCm JvQHCyT3cQdPDQkALgKSr30jma75fvreWkF2gEHVOXKgOkm2NC5HlmJUX+un47Fw SDAlGOobSVxWpf+WyRDy2FCbJBgcbFk= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:42 2025 by rpki-client