$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc5f99f9-4ba6-335a-a286-3aeedc7df6d4.roa File: dc5f99f9-4ba6-335a-a286-3aeedc7df6d4.roa (raw, json) Hash identifier: iHdg3QydVgz3lESr0w6k0JF8CuWNcgkccUWMegGuTgE= Subject key identifier: E6:73:E3:D9:A1:79:B7:51:B8:98:5F:CB:49:94:6A:FC:CB:5A:2F:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ADD66960FBEE641E8A9A22540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc5f99f9-4ba6-335a-a286-3aeedc7df6d4.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.117.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:96:0f:be:e6:41:e8:a9:a2:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b73ebdc8-ec29-4adc-87d0-c5905b046ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a4:14:d9:f1:e7:7c:9d:3a:a4:45:39:a0:e0: 56:e2:d9:bb:e0:12:e3:ad:0b:cc:64:5d:e7:d4:97: c8:7a:c7:be:fc:cc:99:42:df:a8:df:25:15:6c:5f: d7:40:13:6f:44:6e:6d:15:c2:d4:86:f9:1c:58:d2: be:3e:7a:10:bb:36:e7:65:f6:4e:97:58:2b:b8:e8: a9:96:db:33:a3:41:40:c9:d4:8c:25:7d:9b:c4:a2: ba:06:1c:06:df:88:0a:09:f5:38:ed:f7:10:43:17: 2b:4d:9c:d1:65:7f:d8:c0:55:b2:e9:59:c5:a9:1c: be:0d:6c:dd:b5:93:a9:54:c4:39:51:d4:a5:cc:75: 49:d2:5d:95:64:00:ce:22:b6:01:06:99:73:9c:90: 6a:2f:7d:37:3d:39:0b:a0:25:76:16:c5:3d:ed:e8: 99:67:c3:b5:67:ce:9f:5a:bc:2a:59:73:9a:38:04: fc:85:94:38:27:a4:34:30:67:cd:52:ed:50:f1:23: bb:fb:4a:00:80:b8:be:47:ae:28:32:73:aa:b1:2e: d5:bb:0c:3f:d8:33:31:de:d4:f4:ec:3b:25:c5:11: f8:ba:53:c2:6e:c8:31:fc:06:be:67:7b:5b:55:8e: 15:9d:e7:c8:08:3c:ba:67:7b:dd:04:04:41:59:7f: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:73:E3:D9:A1:79:B7:51:B8:98:5F:CB:49:94:6A:FC:CB:5A:2F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc5f99f9-4ba6-335a-a286-3aeedc7df6d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:29:b7:e2:e5:17:b2:2a:1b:d9:56:26:b0:90:68:6b:57:09: 7f:9c:9d:76:92:76:52:d9:4b:e8:b7:07:7e:83:e6:ca:20:20: f9:4f:ab:89:e0:1e:48:95:8c:56:a3:3e:66:7e:37:5d:57:e2: 43:5d:82:bb:8a:a2:18:2b:52:9f:d3:56:70:69:f9:9b:ff:af: 9f:51:f3:19:9d:39:b9:2e:3d:ea:b4:b9:04:52:fb:ee:0c:3e: 2a:dd:8a:dc:00:c3:1f:1f:be:5c:b6:56:cb:e5:f3:0e:b2:40: 40:65:b3:ac:47:c8:a0:77:be:20:d9:5d:72:10:81:54:bf:05: 7d:77:13:f7:45:29:55:81:27:34:5c:4b:77:d6:f8:fc:6e:11: 0a:d0:d2:af:4c:43:40:aa:f2:9d:be:d5:a2:fa:9b:8f:73:0e: 0b:c9:32:3e:e0:e0:da:56:3f:d9:a6:1e:cd:b8:eb:32:77:70: 4b:2d:ab:48:35:01:6c:11:4d:3c:fc:7d:67:94:1e:3b:9f:4b: f1:e3:ec:db:43:5a:70:75:7f:3e:9d:0c:57:1f:bc:17:70:3a: 41:4c:ce:98:b3:0e:bf:be:ad:ea:48:d3:62:70:ab:98:63:09: b4:2f:81:a7:d5:4e:0b:63:f1:82:97:b4:80:bb:69:ef:8a:f3: 05:f7:ba:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZpYPvuZB6KmiJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjczZWJkYzgtZWMyOS00YWRjLTg3ZDAtYzU5MDViMDQ2ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKQU2fHnfJ06pEU5oOBW4tm74BLjrQvMZF3n 1JfIese+/MyZQt+o3yUVbF/XQBNvRG5tFcLUhvkcWNK+PnoQuzbnZfZOl1gruOip ltszo0FAydSMJX2bxKK6BhwG34gKCfU47fcQQxcrTZzRZX/YwFWy6VnFqRy+DWzd tZOpVMQ5UdSlzHVJ0l2VZADOIrYBBplznJBqL303PTkLoCV2FsU97eiZZ8O1Z86f WrwqWXOaOAT8hZQ4J6Q0MGfNUu1Q8SO7+0oAgLi+R64oMnOqsS7Vuww/2DMx3tT0 7DslxRH4ulPCbsgx/Aa+Z3tbVY4VnefICDy6Z3vdBARBWX9BXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZz49mhebdRuJhfy0mUavzLWi/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGM1Zjk5ZjktNGJhNi0z MzVhLWEyODYtM2FlZWRjN2RmNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3WSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8pt+LlF7IqG9lWJrCQaGtXCX+cnXaSdlLZS+i3B36D5sogIPlPq4ng HkiVjFajPmZ+N11X4kNdgruKohgrUp/TVnBp+Zv/r59R8xmdObkuPeq0uQRS++4M PirditwAwx8fvly2Vsvl8w6yQEBls6xHyKB3viDZXXIQgVS/BX13E/dFKVWBJzRc S3fW+PxuEQrQ0q9MQ0Cq8p2+1aL6m49zDgvJMj7g4NpWP9mmHs246zJ3cEstq0g1 AWwRTTz8fWeUHjufS/Hj7NtDWnB1fz6dDFcfvBdwOkFMzpizDr++repI02Jwq5hj CbQvgafVTgtj8YKXtIC7ae+K8wX3uqQ= -----END CERTIFICATE-----Generated at Sat Aug 23 17:53:55 2025 by rpki-client