$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa File: a5d84f8f-2d00-3697-baa6-eb05452b00de.roa (raw, json) Hash identifier: GX/e/v1rEcePXsjCEoeE6QkPrJ/JGJoMlUM9wu2RGxM= Subject key identifier: 61:C7:0B:C2:2B:6B:F0:D0:33:57:4D:03:7D:08:B2:AD:99:5D:3B:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BB88D5985B76940CF29BC00A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:59:85:b7:69:40:cf:29:bc:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=c5310586-dd0d-4ea5-9b98-006dbbed3a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d0:23:fc:10:fd:e2:7d:88:ae:0a:ad:6e:26: 0e:9c:67:64:ce:9d:44:39:6d:7d:9e:f6:97:9a:71: 75:e0:c1:1b:66:ef:20:74:79:76:af:7e:29:47:c5: 7c:d8:d2:1a:1d:57:5f:7a:43:9c:75:3b:c0:55:62: e3:2f:70:a3:09:f8:5b:48:af:e2:39:e9:f8:67:a2: 90:cb:11:b2:6f:e9:f0:d6:7c:e5:03:2a:08:30:82: 06:5f:54:61:97:4a:dd:d6:f5:b9:4c:63:3d:08:12: 9b:a7:86:e0:67:9e:10:aa:bf:d9:d0:4b:a6:51:4b: 5f:f4:87:ba:47:a7:12:73:b6:bf:aa:53:3c:39:05: 66:fb:4a:dd:d2:7e:ae:60:13:20:a6:46:d0:d7:67: 3e:b5:6e:b5:95:ea:99:7d:80:7d:b7:84:a8:b4:f7: ee:1a:5e:b9:66:e1:8a:ec:7a:32:6f:30:94:7c:e0: af:c7:e4:fb:38:82:3d:44:56:35:83:42:35:2b:26: a8:d5:ec:a2:a2:6d:fb:b0:b1:f6:61:09:23:84:29: 76:d3:bc:bc:67:3d:ae:24:99:4d:66:50:4c:1b:4c: 93:8a:90:a5:64:7f:93:6d:e5:11:6f:ba:0d:bd:d4: 07:fa:e3:2f:c3:4a:e8:ea:c1:10:33:ac:7f:df:7a: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:0B:C2:2B:6B:F0:D0:33:57:4D:03:7D:08:B2:AD:99:5D:3B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5d84f8f-2d00-3697-baa6-eb05452b00de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ea:53:9b:f9:ac:ba:17:e7:71:81:7d:59:19:10:7b:44:e2: e3:9f:c6:aa:6a:f3:0e:5f:e8:1f:6c:e3:8f:2c:e0:17:79:44: 39:b2:cf:ee:c4:cb:ff:9e:f6:a8:c2:c8:8d:0e:94:b8:19:d2: f4:8c:16:eb:63:3d:a0:ce:8e:63:6d:3b:27:fc:38:9d:be:5f: 71:f3:71:9f:aa:d1:54:dd:a9:fd:6b:64:0d:36:eb:56:ec:11: 75:39:dd:bd:53:2f:59:cc:0e:fa:d0:9b:d8:be:44:74:e8:f6: 5c:ea:19:53:0c:bc:7b:32:9c:38:88:49:10:ef:38:c2:30:84: 58:d8:19:4b:78:b3:55:ae:32:af:47:66:54:48:96:72:89:2f: 29:e4:00:fd:0a:b6:ce:bc:8c:bd:d0:55:01:80:3c:ea:cf:65: c9:b5:da:e5:d2:c6:93:b3:aa:09:32:1a:f1:40:35:65:d4:d1: 59:16:2f:92:f5:e3:ef:e6:2e:98:f1:db:17:ee:19:a7:16:4c: 98:db:6c:2b:ff:d4:32:a7:69:c0:d2:02:a9:a1:15:a9:13:e6: fe:73:ba:a5:e6:46:7d:be:e8:40:c7:a0:61:6d:3d:a0:84:2b: fd:2f:5c:72:b4:8b:60:4a:a8:66:d0:04:2d:5c:86:c1:26:13: 07:87:ba:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVmFt2lAzym8AKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzUzMTA1ODYtZGQwZC00ZWE1LTliOTgtMDA2ZGJiZWQzYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtAj/BD94n2IrgqtbiYOnGdkzp1EOW19nvaX mnF14MEbZu8gdHl2r34pR8V82NIaHVdfekOcdTvAVWLjL3CjCfhbSK/iOen4Z6KQ yxGyb+nw1nzlAyoIMIIGX1Rhl0rd1vW5TGM9CBKbp4bgZ54Qqr/Z0EumUUtf9Ie6 R6cSc7a/qlM8OQVm+0rd0n6uYBMgpkbQ12c+tW61leqZfYB9t4SotPfuGl65ZuGK 7HoybzCUfOCvx+T7OII9RFY1g0I1Kyao1eyiom37sLH2YQkjhCl207y8Zz2uJJlN ZlBMG0yTipClZH+TbeURb7oNvdQH+uMvw0ro6sEQM6x/33qgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHHC8Ira/DQM1dNA30Isq2ZXTsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTVkODRmOGYtMmQwMC0z Njk3LWJhYTYtZWIwNTQ1MmIwMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXqU5v5rLoX53GBfVkZEHtE4uOfxqpq8w5f6B9s448s4Bd5RDmyz+7E y/+e9qjCyI0OlLgZ0vSMFutjPaDOjmNtOyf8OJ2+X3HzcZ+q0VTdqf1rZA0261bs EXU53b1TL1nMDvrQm9i+RHTo9lzqGVMMvHsynDiISRDvOMIwhFjYGUt4s1WuMq9H ZlRIlnKJLynkAP0Kts68jL3QVQGAPOrPZcm12uXSxpOzqgkyGvFANWXU0VkWL5L1 4+/mLpjx2xfuGacWTJjbbCv/1DKnacDSAqmhFakT5v5zuqXmRn2+6EDHoGFtPaCE K/0vXHK0i2BKqGbQBC1chsEmEweHugY= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:24 2025 by rpki-client