$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa File: ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa (raw, json) Hash identifier: ruIy+AI/SbGdsxkbGgBnY327KNdJPGF+chKdlaf81Cs= Subject key identifier: E0:11:9E:D3:75:11:B0:30:E4:93:7E:A8:A9:9D:06:7C:82:71:04:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE4049EF47A6404E811FA640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 71.30.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:49:ef:47:a6:40:4e:81:1f:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=e98d478c-9c3a-4064-8bd9-89bd10e99f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:d8:f9:fc:0a:46:d5:ff:bb:ce:f5:3b:5e: 71:0f:1d:42:d3:5b:c6:3c:02:9e:fa:2c:ac:1d:7e: 90:aa:16:f6:51:69:5c:d5:47:3d:77:2d:03:62:ea: 7a:0a:1e:32:e0:81:d4:4d:88:f0:ad:6b:06:eb:d3: 03:e6:92:60:fc:4d:43:9f:15:72:96:b7:8a:ab:41: a1:ea:9b:eb:f4:e7:7d:e9:95:8a:bc:e8:1d:ad:29: 62:ba:cc:21:9e:fb:45:f6:9a:d5:64:59:79:92:2a: cc:37:25:b6:80:e0:b8:a9:27:d1:59:c9:25:55:11: 10:26:47:a7:41:b7:e3:1e:51:98:fd:82:67:65:6d: b1:af:6e:a3:34:d9:72:10:55:71:be:8e:ae:6b:fc: 20:d5:c7:1b:8a:f1:b1:d5:d5:ad:ec:68:70:b8:4f: 05:1f:84:d6:f9:ca:e0:48:cc:2c:9f:89:b7:68:6d: 2d:94:6e:d9:d3:56:f0:6e:d6:f7:2e:66:b3:18:19: ca:34:68:72:8d:bf:c7:a0:52:87:1c:ae:b9:b2:f4: 90:0b:41:2a:80:cd:b5:8a:86:3d:53:85:1c:0a:d2: 3c:91:1f:29:6c:d0:54:6b:d0:56:07:9a:0b:2f:3b: ac:95:da:51:1e:34:2a:e5:f2:5e:36:f5:19:f0:8b: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:11:9E:D3:75:11:B0:30:E4:93:7E:A8:A9:9D:06:7C:82:71:04:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c8:12:b3:10:62:cd:0a:cf:c1:4f:79:38:d4:29:69:e5:39: cd:2b:c2:12:85:2c:96:35:4e:b8:0a:a5:12:a3:21:31:cf:bc: 0f:f9:c1:21:66:75:a2:dd:35:59:d5:15:4d:c1:f7:01:9e:31: 0f:1b:d2:a8:4a:24:5b:b0:6d:d8:bd:59:fd:34:c6:2c:88:69: e6:51:f3:e6:77:7b:f6:42:99:84:17:0a:6a:5d:d4:53:aa:5d: 4d:61:f7:bb:9d:26:ba:8f:10:7e:02:f1:ab:fd:a5:8b:91:cd: b6:ef:88:c0:70:73:5d:54:93:c9:17:d2:7b:22:15:20:82:c9: 51:d7:b1:1c:bf:27:ce:24:34:7b:ac:94:e1:55:d7:07:23:88: d8:51:90:b6:2d:dc:36:c6:ae:e0:f7:c2:54:c1:a1:4d:a0:6e: 8d:1f:a5:04:be:aa:b0:4d:e0:c7:8b:af:ea:5a:c6:b0:13:46: f2:e8:6f:6c:33:de:3f:5f:a2:87:3e:59:9c:e4:aa:63:bb:0d: 9b:a4:1a:f6:83:c6:2e:91:94:58:56:92:7f:a2:d1:5b:76:c1: 40:51:f1:0a:db:42:4c:37:42:37:3e:6d:8e:0f:1e:1b:cf:09: 15:a8:ae:47:e2:33:a0:26:66:50:42:68:dc:68:68:9d:27:61: 57:c0:42:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEnvR6ZAToEfpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZTk4ZDQ3OGMtOWMzYS00MDY0LThiZDktODliZDEwZTk5ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIHY+fwKRtX/u871O15xDx1C01vGPAKe+iys HX6Qqhb2UWlc1Uc9dy0DYup6Ch4y4IHUTYjwrWsG69MD5pJg/E1DnxVylreKq0Gh 6pvr9Od96ZWKvOgdrSliuswhnvtF9prVZFl5kirMNyW2gOC4qSfRWcklVREQJken QbfjHlGY/YJnZW2xr26jNNlyEFVxvo6ua/wg1ccbivGx1dWt7GhwuE8FH4TW+crg SMwsn4m3aG0tlG7Z01bwbtb3LmazGBnKNGhyjb/HoFKHHK65svSQC0EqgM21ioY9 U4UcCtI8kR8pbNBUa9BWB5oLLzusldpRHjQq5fJeNvUZ8IuqOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOARntN1EbAw5JN+qKmdBnyCcQRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYyZjlkMDktMGI3ZS0z ZjcyLWI4NGUtNDE0OGE0OTgyM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzIErMQYs0Kz8FPeTjUKWnlOc0rwhKFLJY1TrgKpRKjITHPvA/5wSFm daLdNVnVFU3B9wGeMQ8b0qhKJFuwbdi9Wf00xiyIaeZR8+Z3e/ZCmYQXCmpd1FOq XU1h97udJrqPEH4C8av9pYuRzbbviMBwc11Uk8kX0nsiFSCCyVHXsRy/J84kNHus lOFV1wcjiNhRkLYt3DbGruD3wlTBoU2gbo0fpQS+qrBN4MeLr+paxrATRvLob2wz 3j9fooc+WZzkqmO7DZukGvaDxi6RlFhWkn+i0Vt2wUBR8QrbQkw3Qjc+bY4PHhvP CRWorkfiM6AmZlBCaNxoaJ0nYVfAQj0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:04 2025 by rpki-client