$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa File: faf66482-7afc-33d4-8de6-1371ecfa4006.roa (raw, json) Hash identifier: UCLcszTVlfloOp+1vJdIFPdcUjR0IdIBraMGyKRN/Dg= Subject key identifier: 93:89:04:9E:EA:9F:C0:41:60:82:81:DE:A9:0B:BB:3E:27:C9:CD:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40498A73DA38C9742C1000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.29.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:49:8a:73:da:38:c9:74:2c:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c5542b31-387d-4844-a185-c5550551c14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:0b:c7:e8:88:8e:1e:69:3e:09:ea:e4:c2: a3:56:e6:85:8d:47:82:73:ef:a8:7f:b8:40:1c:cd: 5e:62:85:29:fa:28:1c:43:50:e8:de:d7:1b:5b:7c: 07:4c:95:0d:bc:3a:39:06:0d:15:c1:94:0f:e2:36: 16:38:7e:7c:eb:03:9a:79:75:3b:91:d6:01:07:48: 59:9e:32:61:10:69:f4:dc:45:6b:5c:dc:1c:5d:3a: dc:b8:3b:35:f1:7f:93:d0:6d:d2:5b:41:cc:62:fe: 1b:18:54:9a:fb:2c:53:22:96:80:b5:49:eb:c0:1b: d1:a0:39:1e:aa:77:a5:18:76:02:fb:4d:35:33:1c: 4f:94:b3:46:66:51:8c:cc:97:87:fe:a2:38:99:b9: d0:90:8d:af:36:f4:58:6c:a8:c1:6c:00:72:f6:a9: 09:9d:c5:b8:c0:1d:eb:ea:93:88:a4:01:f3:ab:38: 7c:5f:19:3c:98:d8:af:fa:e3:1d:b3:e8:63:91:8e: 6f:df:ae:88:2f:a5:49:bf:7a:66:46:2b:a3:19:72: ab:4d:03:a7:97:4e:69:ee:66:e6:b9:e4:93:39:a2: 8c:24:73:4c:10:49:89:7a:f8:a3:49:9e:03:20:ef: 3b:61:15:f9:cc:e7:78:c1:14:b1:84:b5:e3:6b:81: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:89:04:9E:EA:9F:C0:41:60:82:81:DE:A9:0B:BB:3E:27:C9:CD:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/faf66482-7afc-33d4-8de6-1371ecfa4006.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4a:d6:0f:bd:c8:c5:e2:a8:42:10:a2:86:4c:db:dc:13:65: f7:0b:90:42:79:f2:2c:e4:a9:7c:b8:bd:7b:00:74:65:d7:b9: 10:d8:e8:6d:43:7e:f3:db:e7:7d:68:04:72:24:d2:16:09:f5: 61:42:50:b1:50:b7:c7:61:37:15:f8:43:9c:1a:66:8e:34:fa: 26:6b:c7:11:6f:2d:76:ed:60:cb:90:2c:be:9d:f6:85:d9:40: 4f:c8:75:62:88:81:af:e9:54:45:c1:de:dc:10:c6:77:8f:54: af:b5:ee:f3:7b:b3:be:56:b1:dd:ec:ef:d0:54:a0:e6:f5:b5: e1:02:4b:76:6e:f2:83:37:58:c3:63:81:fc:02:e9:c2:cc:f2: b9:36:b6:51:be:61:92:46:af:7e:e5:73:cd:93:5b:d1:8f:f3: 0a:a4:04:f7:6a:fc:f0:45:78:ae:ea:3d:25:e5:b8:75:c4:e9: 24:a9:d5:42:55:22:eb:c5:98:33:3a:5c:af:f3:e2:2d:61:30: 10:68:3b:a5:21:48:dc:9a:f5:7b:14:87:1f:09:75:b8:0b:ba: 39:0c:2a:71:5e:11:45:52:0d:5c:97:8e:04:12:d2:cd:23:3f: 82:89:af:f5:5a:e5:0e:4c:94:15:cc:83:50:64:f3:7c:50:80: ba:c4:dc:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEmKc9o4yXQsEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzU1NDJiMzEtMzg3ZC00ODQ0LWExODUtYzU1NTA1NTFjMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX8Lx+iIjh5pPgnq5MKjVuaFjUeCc++of7hA HM1eYoUp+igcQ1Do3tcbW3wHTJUNvDo5Bg0VwZQP4jYWOH586wOaeXU7kdYBB0hZ njJhEGn03EVrXNwcXTrcuDs18X+T0G3SW0HMYv4bGFSa+yxTIpaAtUnrwBvRoDke qnelGHYC+001MxxPlLNGZlGMzJeH/qI4mbnQkI2vNvRYbKjBbABy9qkJncW4wB3r 6pOIpAHzqzh8Xxk8mNiv+uMds+hjkY5v366IL6VJv3pmRiujGXKrTQOnl05p7mbm ueSTOaKMJHNMEEmJevijSZ4DIO87YRX5zOd4wRSxhLXja4FiAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOJBJ7qn8BBYIKB3qkLuz4nyc34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFmNjY0ODItN2FmYy0z M2Q0LThkZTYtMTM3MWVjZmE0MDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtK1g+9yMXiqEIQooZM29wTZfcLkEJ58izkqXy4vXsAdGXXuRDY6G1D fvPb531oBHIk0hYJ9WFCULFQt8dhNxX4Q5waZo40+iZrxxFvLXbtYMuQLL6d9oXZ QE/IdWKIga/pVEXB3twQxnePVK+17vN7s75Wsd3s79BUoOb1teECS3Zu8oM3WMNj gfwC6cLM8rk2tlG+YZJGr37lc82TW9GP8wqkBPdq/PBFeK7qPSXluHXE6SSp1UJV IuvFmDM6XK/z4i1hMBBoO6UhSNya9XsUhx8JdbgLujkMKnFeEUVSDVyXjgQS0s0j P4KJr/Va5Q5MlBXMg1Bk83xQgLrE3Ho= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:47 2025 by rpki-client