$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa File: 868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa (raw, json) Hash identifier: C8DKKPP+UKFJqd7832+JlldhN8pnp2nojiCwsJRyKyQ= Subject key identifier: F2:32:E6:82:1C:A3:59:DB:E9:B0:09:2C:57:8E:83:37:FB:4E:B8:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD669547B1E6B72256915F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.91.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:95:47:b1:e6:b7:22:56:91:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=855181ad-910d-4553-a2d1-f27a9a0792d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:65:ba:a8:c9:5f:4a:04:be:cb:f6:eb:6d: 0b:7a:05:7d:12:21:5b:d2:23:7b:a8:c8:ee:75:c7: d2:dc:f1:d2:21:15:9e:a6:6e:4b:f1:1f:14:01:58: 17:72:76:6c:3f:83:ba:f1:9a:43:26:34:11:15:2f: 46:62:74:62:9b:bd:3b:5d:ef:01:ae:14:ad:7a:fb: 53:0e:19:fa:a2:9b:8e:7e:74:3f:1e:22:a6:70:5d: 89:b0:ef:8a:ac:d9:28:bd:b9:1f:ba:99:e1:a1:5c: 96:7a:40:93:72:d6:4b:b8:82:36:b4:98:7f:5a:6c: 15:0b:fb:9d:46:37:ef:58:8b:ed:9b:61:44:e9:32: 84:86:4c:92:38:af:73:b3:96:16:74:66:69:f3:bc: 32:53:12:fa:41:70:16:02:df:ad:2a:50:2d:6e:58: b3:de:17:fb:84:4f:f7:da:2f:98:3a:ef:e5:d6:05: b5:e0:ff:3e:60:3f:32:4a:cd:7e:87:02:38:f3:ce: 70:79:4b:d4:d0:9c:6b:6f:01:60:aa:88:ff:38:7a: e9:f2:d4:0f:21:9a:d1:b2:7f:36:dd:3f:55:b2:6a: 26:ff:29:0d:18:89:f4:8d:d7:64:44:6b:13:70:68: 48:db:5d:60:07:0d:4b:62:63:a2:67:64:ff:5c:70: 75:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:32:E6:82:1C:A3:59:DB:E9:B0:09:2C:57:8E:83:37:FB:4E:B8:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ba:24:4c:0b:45:26:26:48:30:1c:34:2d:77:a2:57:07:fb: d5:0b:99:3c:15:48:56:69:68:44:41:f2:c4:76:bd:aa:bf:92: f9:54:cc:5b:27:fd:2c:ed:47:eb:19:e5:74:c0:01:e5:fb:ee: 86:ee:af:88:c1:0a:5c:83:6e:94:ba:08:dd:5c:78:09:a5:3e: 27:c4:55:f9:c9:37:63:0d:87:3f:d3:ff:a6:f8:f1:08:c6:33: 00:ab:18:42:23:47:ca:39:42:9e:ae:ad:21:e9:88:57:13:60: af:2c:bc:e1:f5:f5:65:16:c6:a5:69:ae:0d:03:48:6b:25:c1: 4e:3f:27:a7:d9:0e:9a:7e:ad:fd:da:c0:02:24:b7:ec:69:1c: 45:0e:0b:30:74:68:a3:ea:6f:03:1e:ff:37:31:c6:34:bd:03: e1:38:dc:28:7c:54:47:07:28:7e:8d:7c:59:85:0b:68:25:72: f3:08:0f:89:14:38:6d:4b:6f:49:ec:d0:9b:4d:2e:d3:33:9e: 7e:a2:72:45:d4:35:64:20:ef:e8:7f:e4:cf:cc:b2:3e:f1:92: 0b:b2:41:bd:fe:d6:f9:7a:73:f0:0d:8c:cc:6d:9a:66:c9:fb: e4:9a:51:da:3e:91:8b:bc:39:d7:49:2d:83:e5:cb:64:eb:ed: 23:e2:0c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpVHsea3IlaRX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ODU1MTgxYWQtOTEwZC00NTUzLWEyZDEtZjI3YTlhMDc5MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgNluqjJX0oEvsv2620LegV9EiFb0iN7qMju dcfS3PHSIRWepm5L8R8UAVgXcnZsP4O68ZpDJjQRFS9GYnRim707Xe8BrhStevtT Dhn6opuOfnQ/HiKmcF2JsO+KrNkovbkfupnhoVyWekCTctZLuII2tJh/WmwVC/ud RjfvWIvtm2FE6TKEhkySOK9zs5YWdGZp87wyUxL6QXAWAt+tKlAtbliz3hf7hE/3 2i+YOu/l1gW14P8+YD8ySs1+hwI4885weUvU0JxrbwFgqoj/OHrp8tQPIZrRsn82 3T9Vsmom/ykNGIn0jddkRGsTcGhI211gBw1LYmOiZ2T/XHB1CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIy5oIco1nb6bAJLFeOgzf7TriqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4ZDhmYmItODVhZi0z ZjQ3LWFkOTktMzllYzhjZmI3N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS6JEwLRSYmSDAcNC13olcH+9ULmTwVSFZpaERB8sR2vaq/kvlUzFsn /SztR+sZ5XTAAeX77obur4jBClyDbpS6CN1ceAmlPifEVfnJN2MNhz/T/6b48QjG MwCrGEIjR8o5Qp6urSHpiFcTYK8svOH19WUWxqVprg0DSGslwU4/J6fZDpp+rf3a wAIkt+xpHEUOCzB0aKPqbwMe/zcxxjS9A+E43Ch8VEcHKH6NfFmFC2glcvMID4kU OG1Lb0ns0JtNLtMznn6ickXUNWQg7+h/5M/Msj7xkguyQb3+1vl6c/ANjMxtmmbJ ++SaUdo+kYu8OddJLYPly2Tr7SPiDHQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:57 2025 by rpki-client