$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa File: 20370447-4dbe-31bc-8435-e733a838a637.roa (raw, json) Hash identifier: EQ9cKPS6ZMcu6m3epF+A7qmIW8kCB6/5vy3ijSWmHkU= Subject key identifier: 6D:23:67:D7:6C:45:4D:9B:9E:7D:B6:50:F4:3E:64:8A:8E:D6:52:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6692FC9CEB91C99C263AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.89.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:92:fc:9c:eb:91:c9:9c:26:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=9e785bb3-d4e9-475d-a958-c3cbced81094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:84:4f:40:74:91:e1:f7:f2:7e:d2:bf:1f: a5:27:29:35:38:3a:49:d0:b6:98:30:8c:12:35:c7: 0f:f4:86:84:9a:6b:d7:df:7d:fa:71:f4:03:cb:42: 6f:6d:4e:04:66:2a:96:19:d8:f4:48:dc:ed:08:61: 0b:66:8e:55:03:5b:c1:c1:ac:e1:4b:18:2c:aa:43: 30:6e:12:b9:83:c1:e3:4a:c3:a2:58:78:a4:61:d9: 31:41:80:58:eb:14:62:46:9d:43:ee:a5:28:b8:d8: 93:24:51:ca:35:4d:eb:dd:e6:2f:ae:85:ce:3f:1e: b8:f1:42:ab:35:5c:32:8c:ac:ee:59:06:12:0a:be: b6:de:07:a1:6f:33:74:60:8f:a6:10:a0:dd:28:cb: f8:3a:5e:8f:6d:93:f3:c7:fd:a9:e1:58:97:f2:b6: db:da:23:1d:ab:6e:b0:14:c9:3f:e6:21:34:42:d9: f4:03:55:e9:ed:4d:f2:d5:fa:d4:a9:db:dc:60:19: 34:6c:de:da:e8:c9:2a:41:5f:65:4c:da:5c:f1:ed: 4d:50:7e:a7:0d:a6:5c:f0:7c:ce:d9:ca:c8:9e:13: f6:f4:7b:40:b3:44:9d:67:b7:a7:3f:2e:72:2e:77: 65:79:ca:c5:1f:11:45:73:63:b6:4c:0d:91:91:03: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:23:67:D7:6C:45:4D:9B:9E:7D:B6:50:F4:3E:64:8A:8E:D6:52:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:54:8d:82:30:6d:87:15:9d:83:26:44:a0:b9:ab:cf:72:0b: 27:14:31:c4:e8:e3:f5:56:cd:48:0d:10:4f:36:e7:e6:13:f1: bc:7d:45:4c:fd:ff:33:4f:7b:b4:db:22:59:3d:80:ca:d4:21: ef:97:9e:71:ba:3c:59:03:44:d3:e2:60:20:85:c0:49:88:d3: 1f:d7:49:60:cf:d6:87:96:8e:63:8f:a0:0c:2b:72:8a:a5:82: a4:50:53:09:ca:76:ea:62:43:15:39:11:13:9d:e2:66:01:34: 66:f9:58:d9:23:9d:da:73:9f:db:02:53:84:b1:70:06:5e:37: 0e:cf:42:79:aa:a3:e1:a5:d5:91:c0:db:d8:12:14:7c:cc:e4: fb:7a:ff:fc:1b:06:29:fd:6a:b3:cc:d8:0f:a5:09:55:da:5e: 71:75:9e:c9:60:82:e2:d8:7f:52:92:a6:82:b0:48:c5:4e:61: c2:0a:23:3c:2a:2c:21:3f:aa:af:60:19:a5:6e:95:af:6e:1c: eb:92:9a:37:c4:dc:ce:48:63:5b:1f:a6:5c:40:38:a7:7e:dc: cd:0e:fb:18:c4:da:be:aa:e4:ab:99:a9:04:77:2f:35:8d:d3: 6a:ea:11:27:57:50:c7:9c:8f:79:9c:52:19:88:3c:7e:53:18: 06:1e:ae:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpL8nOuRyZwmOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OWU3ODViYjMtZDRlOS00NzVkLWE5NTgtYzNjYmNlZDgxMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72ET0B0keH38n7Svx+lJyk1ODpJ0LaYMIwS NccP9IaEmmvX3336cfQDy0JvbU4EZiqWGdj0SNztCGELZo5VA1vBwazhSxgsqkMw bhK5g8HjSsOiWHikYdkxQYBY6xRiRp1D7qUouNiTJFHKNU3r3eYvroXOPx648UKr NVwyjKzuWQYSCr623gehbzN0YI+mEKDdKMv4Ol6PbZPzx/2p4ViX8rbb2iMdq26w FMk/5iE0Qtn0A1Xp7U3y1frUqdvcYBk0bN7a6MkqQV9lTNpc8e1NUH6nDaZc8HzO 2crInhP29HtAs0SdZ7enPy5yLndlecrFHxFFc2O2TA2RkQP9ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0jZ9dsRU2bnn22UPQ+ZIqO1lKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAzNzA0NDctNGRiZS0z MWJjLTg0MzUtZTczM2E4MzhhNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhUjYIwbYcVnYMmRKC5q89yCycUMcTo4/VWzUgNEE825+YT8bx9RUz9 /zNPe7TbIlk9gMrUIe+XnnG6PFkDRNPiYCCFwEmI0x/XSWDP1oeWjmOPoAwrcoql gqRQUwnKdupiQxU5EROd4mYBNGb5WNkjndpzn9sCU4SxcAZeNw7PQnmqo+Gl1ZHA 29gSFHzM5Pt6//wbBin9arPM2A+lCVXaXnF1nslgguLYf1KSpoKwSMVOYcIKIzwq LCE/qq9gGaVula9uHOuSmjfE3M5IY1sfplxAOKd+3M0O+xjE2r6q5KuZqQR3LzWN 02rqESdXUMecj3mcUhmIPH5TGAYerrc= -----END CERTIFICATE-----Generated at Sun Aug 24 03:07:06 2025 by rpki-client