$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa File: f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa (raw, json) Hash identifier: St/EXMA8VZxwXkHJJNEbczej0IGaQQ4mmeWfyffbz10= Subject key identifier: 5A:82:67:15:F5:30:6C:4E:A4:A1:DB:D1:37:8F:03:32:C1:4D:F1:53 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA7FDDEC4B7883E155640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 71.7.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a7:fd:de:c4:b7:88:3e:15:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=0e403b8c-c0ac-41c0-b62e-3acc22e844e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:26:35:b5:a1:26:36:1d:47:2a:67:68:30: a4:d3:0a:fb:8e:49:59:48:cf:dc:fb:b5:93:d6:d8: 36:34:91:4b:37:be:21:9e:6c:0a:c2:c0:6d:8a:70: 9d:f4:dc:97:14:4e:82:07:79:e4:20:22:b5:be:c3: 27:4f:2b:61:70:bf:fc:94:57:d0:e7:54:80:69:64: 23:2b:ea:c1:a6:99:64:a5:23:22:e2:9e:c2:e4:1e: 90:06:90:f6:e0:b4:c7:e1:94:de:61:7b:1e:61:66: 8c:51:c4:df:fb:5e:a6:e1:fc:74:31:03:35:dc:3a: 6f:4b:6b:32:4c:4c:00:ae:49:a2:9b:1f:82:cb:35: f5:5c:1f:be:2a:f8:41:6e:de:89:f8:68:e7:55:57: ec:1a:34:d4:60:81:92:86:54:6d:c4:f9:5a:d1:f8: d6:7d:1c:e2:9b:04:f3:5e:c7:4e:53:ae:a1:01:e8: e4:ec:67:ff:59:43:9d:29:ec:c9:5a:62:50:84:8e: 1c:56:74:c2:03:3f:7e:ce:33:d8:3f:2a:64:80:50: 7b:dc:a1:f5:cd:88:d5:b2:27:83:3f:2b:43:f7:cc: b4:34:0c:be:e2:e8:a4:b4:b3:28:79:a4:34:ef:23: e6:69:57:9f:51:5a:11:f9:9a:fd:f2:da:47:38:88: d7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:82:67:15:F5:30:6C:4E:A4:A1:DB:D1:37:8F:03:32:C1:4D:F1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f55e1060-926f-39d6-aa63-6a7305a6f1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:78:1c:93:40:2d:98:54:1a:fe:f8:d6:93:fe:d1:30:2b:64: 3a:ee:b7:1e:e7:58:a1:5f:ab:de:89:5c:1c:ea:4a:fa:ba:c6: 84:b3:75:68:64:1b:f2:f8:88:16:60:7e:69:b7:69:a9:06:32: 76:81:c7:62:71:29:42:79:66:7f:bf:28:52:c0:38:37:9e:1c: 99:17:0f:d2:a1:d7:d6:2e:1c:c0:03:9e:6f:49:af:2b:07:29: df:6f:74:be:04:db:8e:15:3e:1c:70:39:6c:a6:c5:3f:62:3a: 16:ed:f1:ee:e5:a3:32:33:7d:b1:8e:08:cf:1c:d8:4b:cc:04: 25:27:f1:d9:fe:ce:40:6d:19:cf:bf:a0:72:c9:db:cd:bd:a6: 34:a3:09:fd:c3:ca:c9:bc:35:f1:ff:82:3c:c5:a2:82:f9:20: 41:9c:af:6e:82:99:ab:80:cb:de:39:56:df:25:af:05:53:d5: 51:10:6d:b6:9d:ee:fc:8f:d5:d4:7a:e2:a5:4f:c3:b8:50:54: eb:23:55:1b:35:72:c6:c1:17:0e:cd:cd:c9:c0:d6:0a:cf:61: 20:98:8d:54:66:16:d4:14:1f:9b:8f:13:05:c3:6f:4c:7c:14: ce:98:40:a1:a2:37:72:df:89:bf:a7:90:08:cd:80:94:19:a6: ec:a5:b7:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKf93sS3iD4VVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGU0MDNiOGMtYzBhYy00MWMwLWI2MmUtM2FjYzIyZTg0NGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm8mNbWhJjYdRypnaDCk0wr7jklZSM/c+7WT 1tg2NJFLN74hnmwKwsBtinCd9NyXFE6CB3nkICK1vsMnTythcL/8lFfQ51SAaWQj K+rBpplkpSMi4p7C5B6QBpD24LTH4ZTeYXseYWaMUcTf+16m4fx0MQM13DpvS2sy TEwArkmimx+CyzX1XB++KvhBbt6J+GjnVVfsGjTUYIGShlRtxPla0fjWfRzimwTz XsdOU66hAejk7Gf/WUOdKezJWmJQhI4cVnTCAz9+zjPYPypkgFB73KH1zYjVsieD PytD98y0NAy+4uiktLMoeaQ07yPmaVefUVoR+Zr98tpHOIjXUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqCZxX1MGxOpKHb0TePAzLBTfFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU1ZTEwNjAtOTI2Zi0z OWQ2LWFhNjMtNmE3MzA1YTZmMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARwd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd4HJNALZhUGv741pP+0TArZDrutx7nWKFfq96JXBzqSvq6xoSzdWhk G/L4iBZgfmm3aakGMnaBx2JxKUJ5Zn+/KFLAODeeHJkXD9Kh19YuHMADnm9JrysH Kd9vdL4E244VPhxwOWymxT9iOhbt8e7lozIzfbGOCM8c2EvMBCUn8dn+zkBtGc+/ oHLJ2829pjSjCf3Dysm8NfH/gjzFooL5IEGcr26CmauAy945Vt8lrwVT1VEQbbad 7vyP1dR64qVPw7hQVOsjVRs1csbBFw7NzcnA1grPYSCYjVRmFtQUH5uPEwXDb0x8 FM6YQKGiN3Lfib+nkAjNgJQZpuylt7s= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:08 2025 by rpki-client