$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa File: da535eca-101a-3a88-9eb1-9d2684331996.roa (raw, json) Hash identifier: thoQaFMbkfrrBrs/UUyMweLgAy3Qs2BrUrBhE32AUsQ= Subject key identifier: 40:F2:F5:79:36:4F:1F:5D:E0:F6:56:23:F7:73:25:8F:17:26:2A:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B9442271FB509CA1340C77068 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.91.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:27:1f:b5:09:ca:13:40:c7:70:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=cd52ff3a-1642-43ab-8233-3f6829802d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:c8:84:53:c6:33:52:e2:0f:34:4d:73:79: 22:ba:3e:76:ce:60:2f:ab:69:e9:a7:2d:f9:6f:4d: 54:00:a8:ae:95:c8:76:56:65:b5:29:c6:cc:0a:0a: 36:dd:1d:5f:7f:24:25:fc:4d:1d:76:8a:92:c6:b8: 53:97:ce:5f:8c:90:5a:a0:c8:ab:98:94:61:c0:f8: 21:ba:2e:b5:f8:95:8a:41:2e:73:0d:1f:20:89:0d: c7:6f:89:ec:b6:de:cf:94:c7:9f:7b:62:8b:ce:2f: e0:d0:b2:5d:4e:2a:05:09:30:36:be:f5:c4:93:44: ae:4d:60:d0:12:6b:49:92:a8:85:fd:3d:39:bd:20: 1d:37:35:c0:34:f6:35:24:60:b6:12:b2:46:71:a5: a9:67:dc:23:33:97:2e:74:5a:01:78:ef:39:c4:09: d6:2c:a2:a6:b5:40:dc:e7:4a:06:16:00:7b:60:ff: bd:af:48:df:20:cb:50:08:35:fd:ce:1f:4c:c7:0c: 5d:48:d3:a7:eb:e0:08:ba:b8:61:0f:38:2c:b1:a5: 08:5f:ee:82:89:e4:e9:94:e2:0a:75:06:1b:94:3b: 01:a8:ea:23:22:55:8f:01:46:ff:ea:9f:c9:71:5f: f6:dc:b0:be:93:02:3e:84:53:65:2e:76:36:35:b9: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:F5:79:36:4F:1F:5D:E0:F6:56:23:F7:73:25:8F:17:26:2A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/da535eca-101a-3a88-9eb1-9d2684331996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:dc:73:37:30:a9:d2:a3:21:72:e7:96:bd:43:6c:ed:db:93: d8:18:d2:5c:84:5e:0b:67:a2:5a:a9:d6:6d:54:1d:9a:8b:8c: 37:d2:0e:7e:9a:8d:6c:a4:49:58:b9:65:e0:0e:bc:1e:26:e4: 7d:be:46:0e:c8:11:54:40:bc:03:d4:3d:18:fa:2a:62:92:8c: d8:de:78:f6:bc:e5:80:87:d8:cf:49:99:c9:43:b8:08:85:61: 56:c7:e3:28:d2:f9:4e:48:0c:f1:0a:74:ee:d9:0c:b1:e4:c5: b7:d4:65:f5:93:b9:21:8a:3f:a9:aa:ef:52:46:5a:4d:2f:da: 71:75:8f:5e:fa:ae:d9:97:77:a1:6b:5b:f5:4c:bf:b2:f4:76: 2c:e7:e1:02:e1:7c:6c:7e:db:f3:ff:d5:ad:83:93:ec:81:9b: ec:3f:65:09:8a:ec:37:12:99:83:42:1d:c4:e7:ac:28:e5:33: 5e:ad:67:87:da:2e:18:3b:5d:42:dc:6e:ef:87:c1:93:3a:40: c9:77:35:ec:d6:78:e3:de:81:f9:f2:12:c5:87:77:a3:ac:e4: 5f:3e:2c:f0:6f:2b:02:17:40:a9:f2:a4:33:1f:9f:bb:41:80: f2:61:f2:d3:2a:a4:2f:74:93:37:4a:76:ed:b5:75:b7:5a:7e: bb:b4:8e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQicftQnKE0DHcGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk Y2Q1MmZmM2EtMTY0Mi00M2FiLTgyMzMtM2Y2ODI5ODAyZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTHIhFPGM1LiDzRNc3kiuj52zmAvq2nppy35 b01UAKiulch2VmW1KcbMCgo23R1ffyQl/E0ddoqSxrhTl85fjJBaoMirmJRhwPgh ui61+JWKQS5zDR8giQ3Hb4nstt7PlMefe2KLzi/g0LJdTioFCTA2vvXEk0SuTWDQ EmtJkqiF/T05vSAdNzXANPY1JGC2ErJGcaWpZ9wjM5cudFoBeO85xAnWLKKmtUDc 50oGFgB7YP+9r0jfIMtQCDX9zh9MxwxdSNOn6+AIurhhDzgssaUIX+6CieTplOIK dQYblDsBqOojIlWPAUb/6p/JcV/23LC+kwI+hFNlLnY2NbkZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDy9Xk2Tx9d4PZWI/dzJY8XJiqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGE1MzVlY2EtMTAxYS0z YTg4LTllYjEtOWQyNjg0MzMxOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErcczcwqdKjIXLnlr1DbO3bk9gY0lyEXgtnolqp1m1UHZqLjDfSDn6a jWykSVi5ZeAOvB4m5H2+Rg7IEVRAvAPUPRj6KmKSjNjeePa85YCH2M9JmclDuAiF YVbH4yjS+U5IDPEKdO7ZDLHkxbfUZfWTuSGKP6mq71JGWk0v2nF1j176rtmXd6Fr W/VMv7L0dizn4QLhfGx+2/P/1a2Dk+yBm+w/ZQmK7DcSmYNCHcTnrCjlM16tZ4fa Lhg7XULcbu+HwZM6QMl3NezWeOPegfnyEsWHd6Os5F8+LPBvKwIXQKnypDMfn7tB gPJh8tMqpC90kzdKdu21dbdafru0jhk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:14 2025 by rpki-client