$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa File: a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa (raw, json) Hash identifier: FLy6ab17cg9WjchakiBiWe3b6CsPZQrPjaOBJ11V0uY= Subject key identifier: C9:D1:FE:56:E5:C5:AF:43:47:35:00:55:C3:4B:7A:AE:37:FD:2B:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BB88D592EFB0C5BCA9FFF60C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:59:2e:fb:0c:5b:ca:9f:ff:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=d5ea8d80-e699-4f5b-b6d6-f28d99805654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:27:26:20:5f:fe:e7:57:f6:88:28:c8:dd:2a: b1:93:a7:fc:25:90:19:50:4d:3f:59:cd:65:5e:82: a7:70:9c:06:a2:de:76:8a:b5:41:d0:e0:b9:56:63: 51:e9:89:c3:bc:7c:a5:66:91:13:c6:a9:56:83:d8: 0a:19:6d:ae:0e:e8:2d:6d:4f:ed:45:9e:d5:2b:8f: b2:bd:0d:92:ac:03:f6:05:27:f5:de:b6:35:12:90: a5:5f:8c:1f:f7:88:59:f4:40:cb:aa:61:3c:7f:d0: d6:14:15:47:1b:57:01:a3:d5:e8:e5:ee:f6:1f:1c: 4e:77:40:02:7a:e2:0f:88:2f:c9:64:0c:db:40:da: 57:80:a1:92:3f:83:3e:b1:20:47:66:8f:13:98:74: 51:12:38:95:cf:b1:9c:d0:9e:30:57:41:9a:32:de: 47:42:5d:62:09:4a:36:e2:8e:4b:64:f9:60:27:93: 1b:a8:0b:41:24:b9:ab:6c:e3:e2:c0:7b:43:48:e2: 61:60:75:27:d6:4b:7d:3a:f7:68:41:03:97:77:39: 61:dc:82:a2:60:58:52:aa:52:bf:e9:25:17:15:85: bc:c5:47:fc:f8:dd:b2:2f:f8:ec:ed:5a:ca:1e:c1: b7:94:78:31:ee:ec:1c:b1:85:0d:e0:e6:26:cc:e3: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:FE:56:E5:C5:AF:43:47:35:00:55:C3:4B:7A:AE:37:FD:2B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7cf6f55-27a8-3c54-96b3-f23264b8a88b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:22:a5:fc:e5:6a:62:d0:bf:0a:a0:22:34:e8:3e:4c:08:7c: f8:a8:a0:1d:4f:17:4d:ae:41:97:f3:93:ed:76:cb:39:b6:b5: bd:45:91:9c:28:4d:11:ef:c6:77:bd:45:86:a1:44:d6:3e:55: 94:34:a7:2a:6a:67:8f:b6:e0:32:5c:a7:70:ea:05:18:ba:47: 1f:e4:6c:68:d2:2b:02:51:a4:d8:e8:99:fa:6b:e9:2d:12:e8: cb:df:62:46:9f:0d:77:f8:d6:62:27:2a:32:92:a2:3e:99:03: 0e:3c:24:ea:29:a2:0b:6c:e8:4b:f7:5d:86:a0:0f:70:78:3e: c4:f0:d5:ac:ca:5b:2d:32:f6:5f:f0:32:0d:f5:e3:ca:e8:db: 00:67:30:83:38:94:03:02:e9:ea:55:91:03:ce:92:ae:41:41: 99:f7:fa:37:75:a2:3a:7b:3c:61:96:b4:66:3e:b8:ac:b0:ac: dc:02:fe:0e:d5:57:5a:91:9f:15:93:c5:8c:ab:c1:19:ee:c5: 6b:c1:7c:71:e4:4a:96:3a:0c:2b:0a:2b:a2:2d:10:9d:4a:1d: 0a:ed:ac:3b:58:ee:97:c2:94:b5:f6:27:9d:43:54:3c:ac:ff: df:20:36:bc:03:fa:93:15:df:ed:15:85:40:e2:b2:d7:09:5d: 7d:27:31:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVku+wxbyp//YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDVlYThkODAtZTY5OS00ZjViLWI2ZDYtZjI4ZDk5ODA1NjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ScmIF/+51f2iCjI3Sqxk6f8JZAZUE0/Wc1l XoKncJwGot52irVB0OC5VmNR6YnDvHylZpETxqlWg9gKGW2uDugtbU/tRZ7VK4+y vQ2SrAP2BSf13rY1EpClX4wf94hZ9EDLqmE8f9DWFBVHG1cBo9Xo5e72HxxOd0AC euIPiC/JZAzbQNpXgKGSP4M+sSBHZo8TmHRREjiVz7Gc0J4wV0GaMt5HQl1iCUo2 4o5LZPlgJ5MbqAtBJLmrbOPiwHtDSOJhYHUn1kt9OvdoQQOXdzlh3IKiYFhSqlK/ 6SUXFYW8xUf8+N2yL/js7VrKHsG3lHgx7uwcsYUN4OYmzONv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnR/lblxa9DRzUAVcNLeq43/Sv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdjZjZmNTUtMjdhOC0z YzU0LTk2YjMtZjIzMjY0YjhhODhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMipfzlamLQvwqgIjToPkwIfPiooB1PF02uQZfzk+12yzm2tb1FkZwo TRHvxne9RYahRNY+VZQ0pypqZ4+24DJcp3DqBRi6Rx/kbGjSKwJRpNjomfpr6S0S 6MvfYkafDXf41mInKjKSoj6ZAw48JOopogts6Ev3XYagD3B4PsTw1azKWy0y9l/w Mg3148ro2wBnMIM4lAMC6epVkQPOkq5BQZn3+jd1ojp7PGGWtGY+uKywrNwC/g7V V1qRnxWTxYyrwRnuxWvBfHHkSpY6DCsKK6ItEJ1KHQrtrDtY7pfClLX2J51DVDys /98gNrwD+pMV3+0VhUDistcJXX0nMTs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:43 2025 by rpki-client