$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa File: b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa (raw, json) Hash identifier: w6Vfu2vnTy0kNelkDRQM69/Tfq7g+Dl0WaMUc8ZADwo= Subject key identifier: 3E:25:1E:A1:88:AD:9C:39:B9:94:E6:01:59:29:E6:18:6E:77:7E:A9 Certificate issuer: /CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272 Certificate serial: 010D0C9F4328584B99D7FDCF40CD247681F1AB80 Authority key identifier: 2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 7925 IP address blocks: 129.71.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:cf:40:cd:24:76:81:f1:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7dc28285-5639-4680-ae14-243640aa52b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:f1:5b:bb:bb:b5:0d:74:b0:69:a5:94:75: 4e:27:20:88:5f:0a:4c:61:77:d4:aa:f8:77:64:92: d7:83:61:1f:b0:0d:7b:a7:f2:e2:30:dc:28:ce:c8: ed:df:17:c2:22:8b:e1:b9:76:4d:7b:9c:eb:7b:49: fe:4f:67:1d:57:c7:27:77:fe:d6:ed:ae:14:ea:9a: 2f:30:60:db:1d:10:48:d0:b3:b4:cc:7f:44:db:fb: bc:d4:52:7a:fe:13:cc:c7:ed:b9:a6:b3:39:1a:42: 7a:a4:dd:0f:45:32:08:86:48:e2:6b:70:0f:c5:b5: 87:fc:7a:96:69:ae:36:90:b2:94:c6:c8:74:d3:64: 3e:cf:94:b3:49:0a:a7:57:2d:9a:db:77:17:4d:8f: ae:5b:60:1f:b6:74:49:98:92:bc:e0:74:07:17:17: 52:2a:fe:78:a9:7d:c1:7d:eb:98:7f:00:df:cb:d3: f3:45:db:0a:cc:de:49:be:3c:93:17:e5:97:12:2b: e5:f3:41:96:93:2b:7b:0f:20:46:d1:3e:52:14:24: 73:44:74:bb:51:56:9f:95:5c:18:a9:0e:aa:9c:4a: e5:96:67:8b:1f:2e:47:39:e4:73:b5:90:86:65:db: cc:ae:49:4d:f9:32:88:1e:ce:7d:72:f0:17:be:32: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:25:1E:A1:88:AD:9C:39:B9:94:E6:01:59:29:E6:18:6E:77:7E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/b49d1b93-c2b5-3691-86ae-33c7b9f6e6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.crl X509v3 Authority Key Identifier: keyid:2A:03:B4:01:A5:51:2C:BF:C3:1B:2E:80:CF:84:43:5F:4A:80:3B:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7bdd3c11-6583-4dc4-a05b-bbdcdfdcd272.cer sbgp-ipAddrBlock: critical IPv4: 129.71.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:53:d1:9f:3f:14:68:aa:df:53:7f:13:0b:86:74:1a:3b:e3: 5d:62:47:ba:89:c9:aa:eb:85:8a:81:dc:ba:bf:86:94:b2:74: be:b5:46:d7:5b:53:30:36:2c:9f:d6:0c:87:75:3f:58:6e:02: a5:76:43:75:ae:f7:9a:5b:e6:e8:57:03:80:39:39:06:e3:d6: 35:83:37:ab:bc:92:1e:1a:d4:33:47:0a:d4:91:3c:e8:a1:7a: 59:5f:49:a8:1e:15:51:59:81:3c:9c:1e:7f:35:b8:a2:0e:76: 65:52:af:6a:d2:8f:6c:8c:f3:09:17:02:0c:d0:47:5f:18:4a: 76:ab:0b:fd:62:e0:c8:37:2a:97:ea:36:68:5a:37:92:72:ed: d2:4e:d9:15:81:e2:22:18:dd:e0:47:f5:eb:e5:8c:f8:97:3c: 56:ca:57:d6:16:8c:45:63:8b:d0:da:e6:42:24:c9:f2:09:8a: 86:84:90:47:8d:5e:2a:ad:ca:c6:f4:c6:ef:93:20:fc:79:4b: 88:1d:04:44:67:2b:11:c6:23:d4:a0:80:8a:28:fd:46:5d:0e: 70:0a:4b:a7:02:31:3b:e0:b4:a0:97:c3:52:98:6e:d7:6d:62: 59:61:3e:69:75:94:51:c6:87:36:c7:d8:92:92:94:6b:2e:9c: 33:02:69:03 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuZ1/3PQM0kdoHxq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JkZDNjMTEtNjU4My00ZGM0LWEwNWItYmJkY2RmZGNk MjcyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk N2RjMjgyODUtNTYzOS00NjgwLWFlMTQtMjQzNjQwYWE1MmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfTxW7u7tQ10sGmllHVOJyCIXwpMYXfUqvh3 ZJLXg2EfsA17p/LiMNwozsjt3xfCIovhuXZNe5zre0n+T2cdV8cnd/7W7a4U6pov MGDbHRBI0LO0zH9E2/u81FJ6/hPMx+25prM5GkJ6pN0PRTIIhkjia3APxbWH/HqW aa42kLKUxsh002Q+z5SzSQqnVy2a23cXTY+uW2AftnRJmJK84HQHFxdSKv54qX3B feuYfwDfy9PzRdsKzN5JvjyTF+WXEivl80GWkyt7DyBG0T5SFCRzRHS7UVaflVwY qQ6qnErllmeLHy5HOeRztZCGZdvMrklN+TKIHs59cvAXvjLeCwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFD4lHqGIrZw5uZTmAVkp5hhud36pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YmRk M2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRjZGZkY2QyNzIvYjQ5ZDFiOTMtYzJiNS0z NjkxLTg2YWUtMzNjN2I5ZjZlNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2JkZDNjMTEtNjU4My00ZGM0LWEw NWItYmJkY2RmZGNkMjcyLzdiZGQzYzExLTY1ODMtNGRjNC1hMDViLWJiZGNkZmRj ZDI3Mi5jcmwwHwYDVR0jBBgwFoAUKgO0AaVRLL/DGy6Az4RDX0qAOyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YmRkM2MxMS02NTgzLTRkYzQtYTA1Yi1iYmRj ZGZkY2QyNzIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgUcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdVPRnz8UaKrfU38TC4Z0GjvjXWJHuonJquuFioHcur+GlLJ0vrVG11tT MDYsn9YMh3U/WG4CpXZDda73mlvm6FcDgDk5BuPWNYM3q7ySHhrUM0cK1JE86KF6 WV9JqB4VUVmBPJwefzW4og52ZVKvatKPbIzzCRcCDNBHXxhKdqsL/WLgyDcql+o2 aFo3knLt0k7ZFYHiIhjd4Ef16+WM+Jc8VspX1haMRWOL0NrmQiTJ8gmKhoSQR41e Kq3KxvTG75Mg/HlLiB0ERGcrEcYj1KCAiij9Rl0OcApLpwIxO+C0oJfDUphu121i WWE+aXWUUcaHNsfYkpKUay6cMwJpAw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:53:16 2025 by rpki-client