$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa File: c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa (raw, json) Hash identifier: jP3ndq62DYb8jh47TAIr/vzQpbZsw6AFDPW/AJeUr48= Subject key identifier: A7:23:3D:1E:0A:FE:D3:78:12:8F:DA:4C:76:85:D3:9C:66:ED:33:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BB45D4709A94B76B8E774AC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 71.29.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:47:09:a9:4b:76:b8:e7:74:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=aac0984c-b64f-4129-9ed4-f88a84ac0e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:52:4f:87:1d:62:a2:c2:53:90:af:cd:76: 5e:2d:fe:d2:c5:32:06:35:1f:f5:cf:37:82:05:f0: d8:0d:b3:74:bb:ec:71:75:05:11:89:50:61:00:d2: 32:65:70:cd:37:eb:d7:8a:c5:60:8f:42:b2:f2:46: 7b:8c:16:42:19:27:bb:3c:12:61:b0:b9:ce:2d:1c: 3a:99:26:de:5c:f4:48:ca:06:09:1d:93:d2:db:de: 18:90:0d:10:25:8f:92:e0:18:86:88:3f:22:94:98: d3:f1:9c:9e:e7:d9:0b:21:a0:a4:60:69:2c:29:98: 81:ec:35:6a:3d:6a:fe:e1:c5:d5:64:43:53:c1:cd: 92:4a:92:e3:e4:64:ca:12:30:a1:60:b8:27:68:a8: 2e:15:a5:df:8c:67:fe:19:94:f1:c7:31:d7:f1:fb: 9d:16:c5:7d:44:8c:d6:45:31:c7:b7:6a:8c:6f:9d: 49:07:59:64:54:9e:aa:3e:02:ad:2f:aa:2a:ba:f7: 9d:77:ca:bc:2b:9a:40:fd:96:8a:69:09:78:f1:60: 7a:fc:86:36:fb:b3:38:99:66:fe:f2:d7:5f:78:b3: df:6e:92:1b:a4:ad:47:85:dc:0a:4b:c1:18:78:73: 81:36:a4:79:07:63:31:c4:a4:29:7d:ef:1d:a7:aa: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:23:3D:1E:0A:FE:D3:78:12:8F:DA:4C:76:85:D3:9C:66:ED:33:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2d2ea9d-46e1-3556-a18c-17ce73e48021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:69:01:e4:8f:c3:6a:da:a6:b2:d4:d8:d4:c7:99:11:4e:ba: d7:3c:38:c9:fa:29:9f:fe:ef:30:6b:5e:b3:37:de:08:a6:58: 46:3c:8a:61:21:1b:81:1d:21:75:79:c3:01:e0:0d:ca:d7:95: 2d:97:25:d9:0a:4e:2a:79:89:f8:86:d9:80:4f:7f:f9:af:01: 42:0f:7d:83:3d:11:b8:49:b1:d0:4c:37:2b:92:30:44:da:96: d4:09:fe:45:1b:56:26:47:d5:6d:c7:88:55:76:17:22:7b:0c: 3c:b9:ee:3c:b6:9d:34:69:52:9a:bc:1a:30:a3:c0:40:06:49: 80:a6:b7:94:50:07:bf:8c:b1:ed:37:1e:60:60:96:53:5c:01: 52:19:14:30:59:a7:e3:e4:23:47:bc:59:fb:0e:c1:90:0a:ac: 6c:52:cb:d5:d3:09:64:81:1b:6d:f9:2a:d0:fe:98:03:18:8e: d6:a5:35:f1:7d:30:53:24:76:17:1c:40:4f:13:93:de:e8:54: 72:c3:c0:5e:2e:db:6a:ea:1e:d4:d6:c0:05:c5:d1:e6:bd:a7: 6a:fd:fb:20:4f:78:50:02:ee:6e:1e:87:83:15:dd:76:06:43: 9f:95:60:f2:97:3e:7f:99:3a:88:ec:59:33:36:5b:ed:ee:f9: 53:2c:8c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUcJqUt2uOd0rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWFjMDk4NGMtYjY0Zi00MTI5LTllZDQtZjg4YTg0YWMwZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmRST4cdYqLCU5CvzXZeLf7SxTIGNR/1zzeC BfDYDbN0u+xxdQURiVBhANIyZXDNN+vXisVgj0Ky8kZ7jBZCGSe7PBJhsLnOLRw6 mSbeXPRIygYJHZPS294YkA0QJY+S4BiGiD8ilJjT8Zye59kLIaCkYGksKZiB7DVq PWr+4cXVZENTwc2SSpLj5GTKEjChYLgnaKguFaXfjGf+GZTxxzHX8fudFsV9RIzW RTHHt2qMb51JB1lkVJ6qPgKtL6oquvedd8q8K5pA/ZaKaQl48WB6/IY2+7M4mWb+ 8tdfeLPfbpIbpK1HhdwKS8EYeHOBNqR5B2MxxKQpfe8dp6q+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcjPR4K/tN4Eo/aTHaF05xm7TOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJkMmVhOWQtNDZlMS0z NTU2LWExOGMtMTdjZTczZTQ4MDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx3hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChpAeSPw2raprLU2NTHmRFOutc8OMn6KZ/+7zBrXrM33gimWEY8imEh G4EdIXV5wwHgDcrXlS2XJdkKTip5ifiG2YBPf/mvAUIPfYM9EbhJsdBMNyuSMETa ltQJ/kUbViZH1W3HiFV2FyJ7DDy57jy2nTRpUpq8GjCjwEAGSYCmt5RQB7+Mse03 HmBgllNcAVIZFDBZp+PkI0e8WfsOwZAKrGxSy9XTCWSBG235KtD+mAMYjtalNfF9 MFMkdhccQE8Tk97oVHLDwF4u22rqHtTWwAXF0ea9p2r9+yBPeFAC7m4eh4MV3XYG Q5+VYPKXPn+ZOojsWTM2W+3u+VMsjC8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:20 2025 by rpki-client