$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa File: aca75f1b-5e63-368c-910b-d08a89644fb3.roa (raw, json) Hash identifier: mhvif2I6gzm9U6XEk+k7F03C31nwtLiY5MsKlitwjQc= Subject key identifier: 10:10:D0:D9:95:4D:99:F3:9B:EE:D5:7F:72:9B:A5:F2:91:95:34:5D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC16A96223D1EF425DD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 71.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c1:6a:96:22:3d:1e:f4:25:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=28bc475a-b866-4705-ba0b-9d927a4f2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:fb:3b:38:8a:61:ca:84:53:31:ed:9d:62: 75:30:30:8a:3e:08:6a:b1:3a:2e:dd:df:58:ab:1c: 94:7a:6e:34:bb:91:5e:da:09:e3:9c:06:2e:ec:9c: c0:39:00:9a:53:bf:83:c9:6c:ea:89:7e:4b:15:77: db:78:8d:b2:e5:29:91:3a:8b:de:c5:d2:ab:ed:78: 08:d0:d9:fe:7d:02:cb:a5:01:d2:17:94:20:b5:7a: 60:da:3f:6b:3d:48:4b:26:10:59:1f:53:db:4e:31: ba:be:cc:9a:89:f0:7c:2b:25:92:3d:12:a7:d3:37: d6:e2:62:37:f0:b4:a5:cf:a6:2a:19:2c:ed:cf:ae: 73:62:aa:a0:d1:00:40:a4:f4:64:70:c2:a8:4d:52: 99:3a:ba:be:f4:78:72:8c:0b:c5:49:cc:eb:b6:d9: 06:a6:d4:d1:57:a9:b0:70:a6:fc:3a:56:2c:c6:8c: db:a0:75:cf:80:cf:5a:57:ad:4f:3d:53:ae:76:62: 52:3a:49:b1:7b:0c:cb:70:f7:08:0d:46:4a:65:a6: fd:3b:5e:1f:7f:ba:51:ac:4b:b4:a4:97:00:32:00: 12:e9:7e:ab:40:d8:80:e3:4f:a6:a1:94:18:80:d0: 61:01:95:a0:2e:2a:c2:cd:a3:fd:d3:4e:db:01:0b: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:D0:D9:95:4D:99:F3:9B:EE:D5:7F:72:9B:A5:F2:91:95:34:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aca75f1b-5e63-368c-910b-d08a89644fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:72:eb:ca:d9:6b:51:c9:92:08:80:9c:a4:23:24:96:7a:2c: e9:c5:9f:3a:59:fc:1e:5a:ac:51:22:66:78:64:9d:d2:bf:2d: 99:d5:36:07:cc:51:1f:83:3c:d8:d4:6e:42:93:d5:61:65:aa: 34:af:be:4f:97:47:4f:55:f1:09:d0:f0:f1:43:ef:2c:af:59: bd:fa:d2:54:98:66:b5:12:a6:d8:d6:7c:34:b4:df:6f:31:63: de:08:34:f2:97:8e:98:d5:16:da:9d:bf:cc:37:84:6b:40:32: 35:06:1a:37:2c:9d:53:ce:e3:56:98:e3:08:16:77:fe:75:dc: 35:b1:43:7a:3a:01:4f:d2:9c:66:c2:93:df:bd:ba:b5:36:dc: 98:56:7d:62:17:22:06:ba:19:e4:d3:36:79:55:96:65:44:0b: 5a:70:19:ba:0c:c8:e6:41:c7:df:3a:27:88:dc:c6:4c:2e:10: 64:57:17:85:d0:6f:8d:5a:79:44:42:72:74:bd:ca:c6:71:2e: db:b5:df:0f:62:44:54:44:65:80:77:25:c8:a0:cf:45:3d:72: 79:74:03:7e:a8:27:77:09:8d:c8:77:61:98:00:0e:c6:03:62: 8f:f4:d8:e1:8c:d1:bd:d4:f1:69:8d:47:a6:3b:ff:a5:d4:35: cb:d8:57:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMFqliI9HvQl3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MjhiYzQ3NWEtYjg2Ni00NzA1LWJhMGItOWQ5MjdhNGYyNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYv7OziKYcqEUzHtnWJ1MDCKPghqsTou3d9Y qxyUem40u5Fe2gnjnAYu7JzAOQCaU7+DyWzqiX5LFXfbeI2y5SmROovexdKr7XgI 0Nn+fQLLpQHSF5QgtXpg2j9rPUhLJhBZH1PbTjG6vsyaifB8KyWSPRKn0zfW4mI3 8LSlz6YqGSztz65zYqqg0QBApPRkcMKoTVKZOrq+9HhyjAvFSczrttkGptTRV6mw cKb8OlYsxozboHXPgM9aV61PPVOudmJSOkmxewzLcPcIDUZKZab9O14ff7pRrEu0 pJcAMgAS6X6rQNiA40+moZQYgNBhAZWgLirCzaP9007bAQvtuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAQ0NmVTZnzm+7Vf3KbpfKRlTRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNhNzVmMWItNWU2My0z NjhjLTkxMGItZDA4YTg5NjQ0ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZy68rZa1HJkgiAnKQjJJZ6LOnFnzpZ/B5arFEiZnhkndK/LZnVNgfM UR+DPNjUbkKT1WFlqjSvvk+XR09V8QnQ8PFD7yyvWb360lSYZrUSptjWfDS0328x Y94INPKXjpjVFtqdv8w3hGtAMjUGGjcsnVPO41aY4wgWd/513DWxQ3o6AU/SnGbC k9+9urU23JhWfWIXIga6GeTTNnlVlmVEC1pwGboMyOZBx986J4jcxkwuEGRXF4XQ b41aeURCcnS9ysZxLtu13w9iRFREZYB3Jcigz0U9cnl0A36oJ3cJjch3YZgADsYD Yo/02OGM0b3U8WmNR6Y7/6XUNcvYV2E= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:25 2025 by rpki-client