$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95cbb5ca-e660-3de2-9da4-1ff1ba27a21d.roa File: 95cbb5ca-e660-3de2-9da4-1ff1ba27a21d.roa (raw, json) Hash identifier: Ls82JR8AOT1vz7KTltPVSJL8iAjq+Q+yddrCK/AT7wQ= Subject key identifier: A5:74:87:32:5C:6B:E9:4C:C6:01:78:BE:46:5B:79:8E:EB:6E:C6:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668C062B3CB4D73F1E31A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95cbb5ca-e660-3de2-9da4-1ff1ba27a21d.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.117.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8c:06:2b:3c:b4:d7:3f:1e:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=efc5ef6a-f463-4c32-a9ca-80ae9262fa18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:58:ad:ea:3c:52:19:63:2f:e8:2b:96:13: 4c:bb:98:27:d4:cb:34:09:39:a1:ed:56:ba:7a:41: 09:ce:ba:0c:e5:a5:06:36:5a:8b:ff:1f:a4:fb:e8: 7f:20:4e:67:1a:4a:2a:06:02:93:19:5a:30:0b:f5: b1:36:f5:a1:68:53:e4:a2:03:f7:ad:32:48:65:29: 3a:d8:8d:cd:b7:f0:32:f6:c4:7a:75:7f:f7:3b:6e: fc:a3:30:ae:d5:11:26:30:9b:bb:39:1e:b8:0f:bf: ff:b9:99:43:33:a4:17:23:cf:d9:d5:d8:a9:7b:80: 92:78:8f:a0:39:2b:6b:ad:ee:a5:ad:fe:33:cd:3a: bd:28:6e:6c:41:35:0d:bd:18:4a:26:dd:e5:02:9c: db:8c:2c:2d:a2:88:86:78:41:b3:0a:32:e6:36:3d: f8:49:ba:8b:99:82:9e:22:d2:53:82:44:66:cf:2e: 12:38:37:86:59:c8:07:7a:3d:02:4a:ca:a4:71:88: 2a:e9:97:66:8a:a6:a1:b0:6e:3b:d7:2c:a2:f4:df: d8:6d:14:00:f0:46:52:ea:7b:f2:d4:4e:56:eb:6f: 9f:a3:60:bd:44:a3:8d:0e:bd:2d:8b:cb:83:37:ff: f6:26:2e:b3:8c:be:7f:eb:db:98:47:28:be:78:ef: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:74:87:32:5C:6B:E9:4C:C6:01:78:BE:46:5B:79:8E:EB:6E:C6:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95cbb5ca-e660-3de2-9da4-1ff1ba27a21d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:8a:e7:1a:f7:be:90:a3:dc:55:3e:9f:63:71:d0:50:30:d2: f5:43:0f:20:0f:82:a0:3b:68:e9:24:bf:93:fe:54:a4:ca:90: 0f:1e:fd:57:12:78:3b:58:79:04:98:c2:bf:cd:43:10:f6:4f: c9:a8:67:95:bf:0c:0e:1e:4c:38:77:cd:22:97:01:70:67:4f: 31:3e:31:54:20:6c:d6:50:37:cb:94:c2:a3:9d:c3:aa:fd:dc: 8c:53:bc:2b:da:65:16:83:bc:2c:6e:05:be:8c:33:e1:0c:3c: 27:22:c4:65:d0:55:4b:fa:07:b3:b4:26:09:f0:e5:cd:db:fe: fa:22:0a:2b:a6:a3:33:75:23:68:73:d9:52:88:a4:3c:01:26: 27:bc:aa:96:05:c7:1d:92:ac:08:c1:18:02:7c:58:28:0f:c1: ed:29:c6:75:d0:fa:4e:a0:3e:9c:6a:aa:00:92:d3:d7:a5:82: b6:48:7c:7a:66:c4:77:04:c3:96:4b:82:af:15:13:f3:5a:a6: db:fc:d1:52:0a:41:93:a4:c6:37:2f:1b:11:08:27:30:38:67: fc:39:2f:28:4f:40:d5:b9:69:34:24:1c:68:c3:31:f6:ff:9e: 0a:15:64:cb:c3:e8:c0:07:b9:e0:08:75:ce:68:62:bf:21:6c: f6:14:10:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZowGKzy01z8eMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk ZWZjNWVmNmEtZjQ2My00YzMyLWE5Y2EtODBhZTkyNjJmYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxElYreo8UhljL+grlhNMu5gn1Ms0CTmh7Va6 ekEJzroM5aUGNlqL/x+k++h/IE5nGkoqBgKTGVowC/WxNvWhaFPkogP3rTJIZSk6 2I3Nt/Ay9sR6dX/3O278ozCu1REmMJu7OR64D7//uZlDM6QXI8/Z1dipe4CSeI+g OStrre6lrf4zzTq9KG5sQTUNvRhKJt3lApzbjCwtooiGeEGzCjLmNj34SbqLmYKe ItJTgkRmzy4SODeGWcgHej0CSsqkcYgq6ZdmiqahsG471yyi9N/YbRQA8EZS6nvy 1E5W62+fo2C9RKONDr0ti8uDN//2Ji6zjL5/69uYRyi+eO9l/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKV0hzJca+lMxgF4vkZbeY7rbsYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTVjYmI1Y2EtZTY2MC0z ZGUyLTlkYTQtMWZmMWJhMjdhMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiK5xr3vpCj3FU+n2Nx0FAw0vVDDyAPgqA7aOkkv5P+VKTKkA8e/VcS eDtYeQSYwr/NQxD2T8moZ5W/DA4eTDh3zSKXAXBnTzE+MVQgbNZQN8uUwqOdw6r9 3IxTvCvaZRaDvCxuBb6MM+EMPCcixGXQVUv6B7O0Jgnw5c3b/voiCiumozN1I2hz 2VKIpDwBJie8qpYFxx2SrAjBGAJ8WCgPwe0pxnXQ+k6gPpxqqgCS09elgrZIfHpm xHcEw5ZLgq8VE/Naptv80VIKQZOkxjcvGxEIJzA4Z/w5LyhPQNW5aTQkHGjDMfb/ ngoVZMvD6MAHueAIdc5oYr8hbPYUEEY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:02 2025 by rpki-client