$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa File: a272cf84-389e-36f8-928e-85ab374fb3f0.roa (raw, json) Hash identifier: jmPFYQEDwz7szcAMCaty3iR3jXYmbBIty6Q3fZ44yNw= Subject key identifier: 06:74:6E:F6:D1:6F:B2:22:55:7D:F2:7B:B1:07:E9:1D:F1:10:EB:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD668BADD52C2669A3627380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.89.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:8b:ad:d5:2c:26:69:a3:62:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=9fb7e09b-ab44-4682-8bd2-c9d7f6f469e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:77:13:63:13:79:62:35:1c:9f:fe:bd:c2: 24:a6:5e:61:92:e6:51:e4:85:a8:bd:9f:1d:0e:70: 39:58:14:09:c7:1a:a9:53:a4:1b:27:68:da:6c:4e: ff:da:78:3b:cd:08:a2:08:64:0d:02:7a:fb:c3:05: fe:de:25:62:71:48:a1:24:10:dd:ed:39:e4:3b:2d: 52:7a:07:b4:9f:e1:0a:f2:c2:e4:92:af:45:eb:6c: 21:69:a7:0e:6f:4e:5c:48:12:f4:28:9c:13:21:17: 16:68:f8:ac:59:59:a2:c5:fd:3e:a6:0d:8d:6b:b2: b4:5b:be:05:87:a7:4d:03:6f:6c:6f:9d:9c:ec:eb: c4:63:5e:86:1c:df:db:f9:52:5f:ef:2c:5e:c4:13: 82:9f:81:7d:0e:4a:76:9b:24:d8:9d:5a:fb:1d:b6: 30:0b:65:74:1f:3e:38:b6:d9:75:71:28:6c:ab:70: 8c:f9:ec:98:80:ba:8e:22:50:e1:f2:cf:e9:f2:f9: 28:48:e8:c1:63:f1:2b:8c:9e:11:47:b7:d5:38:24: a5:21:44:52:9a:55:65:50:61:ca:62:94:b3:78:88: 57:96:8c:92:02:53:2d:d0:e7:46:10:f2:ba:9b:9e: 19:f6:54:51:3f:b3:08:0f:f4:cb:07:9d:90:0a:07: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:74:6E:F6:D1:6F:B2:22:55:7D:F2:7B:B1:07:E9:1D:F1:10:EB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fc:16:34:ad:09:df:9b:4e:37:57:76:58:c1:1a:f7:91:40: 21:8c:e8:bf:f7:d3:12:6e:b9:a6:34:e0:1f:f8:4b:d3:bb:f4: 8b:b5:30:c2:d0:72:3d:61:d8:39:7b:68:19:b0:86:48:7f:ef: 77:12:cf:7d:05:b7:85:80:d6:01:52:c1:e3:0c:14:76:25:d6: 9c:d8:86:0b:13:40:50:a2:48:85:35:e8:ab:49:d8:16:5a:5b: b9:c8:e7:35:7a:b1:34:c7:fe:8b:21:4f:ad:7f:1a:e1:b5:e3: e3:0a:54:e2:f9:ca:ca:14:12:c5:cc:65:96:9c:bf:b4:76:c9: 5d:67:bd:f2:db:ef:6c:d2:17:e3:ef:3e:bf:f6:86:47:a5:19: d2:b2:49:6a:ef:4f:d5:3e:e9:dc:83:c7:bc:59:84:f9:7a:ee: fd:64:70:08:69:e7:3a:7a:44:61:ac:14:b6:d5:4e:8b:7e:03: a4:28:46:1c:45:c3:d5:66:60:38:cc:18:4b:6a:d5:26:0f:61: ba:e1:50:bb:b3:64:6f:78:8e:c7:23:2c:a3:12:7e:72:fb:ff: 43:8c:3d:7e:41:79:7b:c8:10:4f:32:c0:69:e5:ae:88:b4:d7: 03:33:65:d2:83:ee:ed:56:97:f8:a8:1e:04:0a:62:40:a8:9b: 8d:4e:9b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZout1SwmaaNic4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk OWZiN2UwOWItYWI0NC00NjgyLThiZDItYzlkN2Y2ZjQ2OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoh3E2MTeWI1HJ/+vcIkpl5hkuZR5IWovZ8d DnA5WBQJxxqpU6QbJ2jabE7/2ng7zQiiCGQNAnr7wwX+3iVicUihJBDd7TnkOy1S ege0n+EK8sLkkq9F62whaacOb05cSBL0KJwTIRcWaPisWVmixf0+pg2Na7K0W74F h6dNA29sb52c7OvEY16GHN/b+VJf7yxexBOCn4F9Dkp2myTYnVr7HbYwC2V0Hz44 ttl1cShsq3CM+eyYgLqOIlDh8s/p8vkoSOjBY/ErjJ4RR7fVOCSlIURSmlVlUGHK YpSzeIhXloySAlMt0OdGEPK6m54Z9lRRP7MID/TLB52QCgcsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ0bvbRb7IiVX3ye7EH6R3xEOuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI3MmNmODQtMzg5ZS0z NmY4LTkyOGUtODVhYjM3NGZiM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1mvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr8FjStCd+bTjdXdljBGveRQCGM6L/30xJuuaY04B/4S9O79Iu1MMLQ cj1h2Dl7aBmwhkh/73cSz30Ft4WA1gFSweMMFHYl1pzYhgsTQFCiSIU16KtJ2BZa W7nI5zV6sTTH/oshT61/GuG14+MKVOL5ysoUEsXMZZacv7R2yV1nvfLb72zSF+Pv Pr/2hkelGdKySWrvT9U+6dyDx7xZhPl67v1kcAhp5zp6RGGsFLbVTot+A6QoRhxF w9VmYDjMGEtq1SYPYbrhULuzZG94jscjLKMSfnL7/0OMPX5BeXvIEE8ywGnlroi0 1wMzZdKD7u1Wl/ioHgQKYkCom41Om3c= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:38 2025 by rpki-client