$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa File: 2cf7381a-48ad-3f60-a366-594284f07d04.roa (raw, json) Hash identifier: z2O3pUq3WzOqUtCOAmURE+qZvx5/1aWJ6RHQ6HInPVk= Subject key identifier: C9:1F:13:6C:40:C7:70:89:12:70:10:8D:29:1C:B4:73:D7:D4:BD:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6694CA7633A0A016259C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.89.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:94:ca:76:33:a0:a0:16:25:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=33a99a8e-fe68-410b-94b7-198293a6579d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:04:29:c6:09:5c:42:88:0d:fe:df:4a:d7: ab:59:f6:5b:52:41:a7:c7:ab:69:70:f6:84:82:7b: 5e:d1:59:01:02:85:32:a7:31:bd:e9:00:d7:e1:9e: 12:92:1e:59:89:9d:0a:41:9c:f7:b5:e7:fc:da:5f: cb:f1:cb:a8:1e:29:b5:59:8f:82:1f:a9:ab:49:5f: ae:00:7e:6d:e8:e5:3d:94:32:7c:cd:df:c5:81:94: bc:33:91:be:1c:02:4f:ca:52:47:c6:b5:7a:49:67: ae:63:37:c0:33:4a:86:d9:ad:40:a0:89:58:ee:20: 23:a8:68:f2:7f:41:f7:99:a5:28:ec:b7:ca:02:84: 63:64:03:97:c8:55:e6:ed:04:f8:d9:0d:7d:d4:ef: 47:72:92:d5:f9:c4:4d:96:5d:0c:af:3d:ad:5e:25: 21:c9:11:3a:78:d2:ef:f6:99:e7:bb:74:58:99:c6: 7c:94:81:d9:bd:ee:a2:1d:a0:38:90:e0:85:f9:cf: e1:18:98:9e:50:8b:0f:70:9e:f6:73:0c:61:e0:ba: 6a:57:ff:ed:26:64:87:df:92:19:3d:b0:8c:34:90: 0d:e5:28:53:6b:c8:e3:d3:34:53:de:5b:ed:78:c0: d2:16:f7:27:69:a3:32:00:0a:7c:fa:33:e9:71:ff: 81:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1F:13:6C:40:C7:70:89:12:70:10:8D:29:1C:B4:73:D7:D4:BD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2cf7381a-48ad-3f60-a366-594284f07d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c9:26:c7:f2:32:85:0e:d8:5c:58:41:76:99:4e:15:72:50: 3b:ca:47:74:5b:bf:4b:6c:62:54:f5:07:6f:f7:02:d9:bf:a0: a2:fa:61:76:7b:c9:dc:3e:f2:c9:7b:ba:f1:c4:69:e9:bf:02: 82:7c:93:a0:ba:e9:f8:fd:f2:85:9a:2b:4d:fc:8f:ad:ea:90: 07:44:c1:22:0b:b0:de:c2:72:cb:bd:11:ac:e9:b7:85:51:2f: bf:cc:ef:00:bd:f8:d4:bd:11:48:94:78:f3:ae:f6:5b:27:2b: 05:96:18:fe:f7:ce:0e:c3:c7:b6:3e:f0:0a:b9:cd:de:e1:e7: 65:f3:a6:fe:0f:d9:9d:22:7f:aa:3f:75:21:1e:54:19:d4:34: 74:8a:64:9e:bd:16:bf:77:11:a3:f4:f1:b8:f7:22:46:de:60: 4b:28:d0:fe:e7:3e:09:b3:09:4b:6f:e2:a8:10:b8:93:7e:2e: 6d:8b:72:cc:d3:9e:13:76:5d:c4:f3:48:0a:28:e1:04:66:96: b2:a5:ba:b4:2c:4d:bb:06:d2:34:63:2e:c5:d2:17:94:45:6b: 5f:67:c5:08:90:35:6e:e8:9a:ea:82:4d:c2:b0:8b:2c:c7:79: df:1c:a8:22:fc:0b:a1:5e:b4:4a:ea:fd:52:72:b0:38:ef:55: 2f:e3:c7:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpTKdjOgoBYlnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MzNhOTlhOGUtZmU2OC00MTBiLTk0YjctMTk4MjkzYTY1NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLcEKcYJXEKIDf7fSterWfZbUkGnx6tpcPaE gnte0VkBAoUypzG96QDX4Z4Skh5ZiZ0KQZz3tef82l/L8cuoHim1WY+CH6mrSV+u AH5t6OU9lDJ8zd/FgZS8M5G+HAJPylJHxrV6SWeuYzfAM0qG2a1AoIlY7iAjqGjy f0H3maUo7LfKAoRjZAOXyFXm7QT42Q191O9HcpLV+cRNll0Mrz2tXiUhyRE6eNLv 9pnnu3RYmcZ8lIHZve6iHaA4kOCF+c/hGJieUIsPcJ72cwxh4LpqV//tJmSH35IZ PbCMNJAN5ShTa8jj0zRT3lvteMDSFvcnaaMyAAp8+jPpcf+BcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkfE2xAx3CJEnAQjSkctHPX1L3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmNmNzM4MWEtNDhhZC0z ZjYwLWEzNjYtNTk0Mjg0ZjA3ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnJJsfyMoUO2FxYQXaZThVyUDvKR3Rbv0tsYlT1B2/3Atm/oKL6YXZ7 ydw+8sl7uvHEaem/AoJ8k6C66fj98oWaK038j63qkAdEwSILsN7Ccsu9Eazpt4VR L7/M7wC9+NS9EUiUePOu9lsnKwWWGP73zg7Dx7Y+8Aq5zd7h52Xzpv4P2Z0if6o/ dSEeVBnUNHSKZJ69Fr93EaP08bj3IkbeYEso0P7nPgmzCUtv4qgQuJN+Lm2LcszT nhN2XcTzSAoo4QRmlrKlurQsTbsG0jRjLsXSF5RFa19nxQiQNW7omuqCTcKwiyzH ed8cqCL8C6FetErq/VJysDjvVS/jxwA= -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:43 2025 by rpki-client