$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa File: 80fafb82-827a-3c74-a085-14686e70fb4e.roa (raw, json) Hash identifier: /h+F8B5gwTlw3wZuZcZUiESB3KiXP12Z31am4GmT1Ew= Subject key identifier: 6A:45:2A:84:53:4C:53:E5:CE:5F:89:AD:DA:6B:7B:A2:0D:AC:17:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD6694DCE7EF2333941B3A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.89.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:94:dc:e7:ef:23:33:94:1b:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=8e757d49-005f-4a7b-ad20-e105e6bc9842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:d0:52:3e:d8:ce:5f:f3:68:95:8d:07:11: 44:27:52:d8:0f:a6:bd:7e:d0:c2:70:83:d8:b2:b1: 8c:c1:20:7f:f5:fd:d8:88:6a:f1:ff:3e:aa:d0:6b: 56:8f:9f:bc:27:2d:f8:8c:9e:ec:1b:44:cf:92:07: 6e:83:21:2c:8c:51:ab:30:cc:55:f9:41:8a:7c:70: 32:ae:45:09:31:25:54:52:9a:b5:1e:cd:a4:39:4c: d5:68:b0:ae:2f:05:76:a7:84:36:c7:58:56:0a:15: 1b:3a:28:84:af:0a:05:2e:f8:17:a6:f0:f4:d2:fb: b3:a4:0c:fb:6d:0a:b5:14:9d:a1:c7:ee:11:1c:8c: 6f:d0:4a:22:cc:72:a9:ba:30:79:76:67:39:ff:7c: 5f:30:41:ab:cf:ac:ee:2d:fe:b8:ad:2a:90:59:28: 95:01:88:e4:51:79:d3:48:14:6e:7f:da:86:ce:fc: 47:73:cb:93:a7:ec:cb:82:12:91:f1:42:a7:63:b2: 86:a7:ac:a1:9f:d9:97:84:f7:74:c4:18:8e:20:bf: 6f:a2:14:55:da:e6:2c:81:7d:5b:d0:57:ca:b0:57: 3b:ec:35:84:59:62:09:cb:e4:d1:b7:83:63:cc:7a: 63:b4:a0:ea:25:00:92:04:67:1b:51:d4:5c:81:02: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:45:2A:84:53:4C:53:E5:CE:5F:89:AD:DA:6B:7B:A2:0D:AC:17:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80fafb82-827a-3c74-a085-14686e70fb4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:c3:6b:fa:ff:cf:60:1a:3a:07:1f:65:be:92:db:77:48:d4: 28:8d:a2:9f:da:b4:00:88:b2:4c:e9:f1:15:3b:af:a8:e3:94: eb:a6:0d:81:83:be:68:ef:cf:9e:e2:10:f6:3b:cb:27:c7:88: 17:9f:56:7d:63:5e:92:72:61:c8:77:c0:9a:38:d0:be:43:6c: c5:a4:91:2f:e2:b1:d2:c8:7d:69:ab:2a:92:b5:21:0f:06:cf: b1:83:4d:5d:99:c5:34:9e:0b:f3:81:9e:3a:c0:42:0f:ba:51: ac:de:69:0e:53:48:e0:93:d5:e8:09:92:28:f3:5b:17:74:f8: 9a:2b:1c:57:fb:06:c0:84:43:24:59:7e:2c:c3:e7:49:4c:88: 48:3f:70:d4:de:00:5b:ad:b6:c3:c7:f7:df:78:58:4f:cd:02: 18:db:c2:e7:ff:57:71:05:14:79:b9:57:d8:46:31:5b:fb:97: 68:75:2a:97:5b:ea:c5:6c:f3:f4:61:81:4c:9e:6c:75:77:6f: 66:e5:bf:cc:3f:31:f0:98:67:03:ec:df:05:72:9d:ae:59:27: 6c:70:bc:fa:a3:8d:58:47:6a:12:c6:78:b7:eb:d9:ca:44:98: 0e:bb:e3:bf:df:e3:bd:a8:b2:78:02:a8:8d:20:34:74:85:13: 34:e5:7e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpTc5+8jM5QbOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OGU3NTdkNDktMDA1Zi00YTdiLWFkMjAtZTEwNWU2YmM5ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUjQUj7Yzl/zaJWNBxFEJ1LYD6a9ftDCcIPY srGMwSB/9f3YiGrx/z6q0GtWj5+8Jy34jJ7sG0TPkgdugyEsjFGrMMxV+UGKfHAy rkUJMSVUUpq1Hs2kOUzVaLCuLwV2p4Q2x1hWChUbOiiErwoFLvgXpvD00vuzpAz7 bQq1FJ2hx+4RHIxv0EoizHKpujB5dmc5/3xfMEGrz6zuLf64rSqQWSiVAYjkUXnT SBRuf9qGzvxHc8uTp+zLghKR8UKnY7KGp6yhn9mXhPd0xBiOIL9vohRV2uYsgX1b 0FfKsFc77DWEWWIJy+TRt4NjzHpjtKDqJQCSBGcbUdRcgQLc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpFKoRTTFPlzl+Jrdpre6INrBf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODBmYWZiODItODI3YS0z Yzc0LWEwODUtMTQ2ODZlNzBmYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1m0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPDa/r/z2AaOgcfZb6S23dI1CiNop/atACIskzp8RU7r6jjlOumDYGD vmjvz57iEPY7yyfHiBefVn1jXpJyYch3wJo40L5DbMWkkS/isdLIfWmrKpK1IQ8G z7GDTV2ZxTSeC/OBnjrAQg+6UazeaQ5TSOCT1egJkijzWxd0+JorHFf7BsCEQyRZ fizD50lMiEg/cNTeAFuttsPH9994WE/NAhjbwuf/V3EFFHm5V9hGMVv7l2h1Kpdb 6sVs8/RhgUyebHV3b2blv8w/MfCYZwPs3wVyna5ZJ2xwvPqjjVhHahLGeLfr2cpE mA6747/f472osngCqI0gNHSFEzTlft8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:21:56 2025 by rpki-client