$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa File: e9b31ccf-98da-348c-b41c-4897b4b0a929.roa (raw, json) Hash identifier: Oxrr8TRaZ3Ifb5w4fgAwrptU8tKmCYS+3gZUd//sCbQ= Subject key identifier: C9:9A:ED:19:FE:84:D4:E0:B0:7E:A2:EE:61:44:FB:02:75:FA:43:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC2320FB3862937A98AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 75.88.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c2:32:0f:b3:86:29:37:a9:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=982bfb62-474c-4e17-a90f-1477fee42ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:85:f6:5e:88:89:d9:ef:75:f9:6d:6a:fb:7a: ec:53:98:d7:f6:b0:66:5c:48:ab:78:fb:8e:f9:8a: 99:6e:dc:85:ea:ed:04:5e:52:8d:c1:c9:ed:cd:51: cd:59:42:de:df:5d:ad:31:77:38:7f:05:2e:0e:c0: 85:a5:ca:27:a3:bf:6e:da:57:f1:64:bc:6e:2b:89: ce:72:be:22:cb:b8:c7:f0:f2:7c:08:19:29:b1:2b: ab:a9:9a:e1:44:fd:5a:6f:02:b6:fe:25:72:fc:19: 3b:79:44:51:df:d3:cc:ad:bb:04:7b:1d:bc:ad:42: 33:12:d6:03:37:84:47:b3:cf:d3:00:3a:67:76:75: 0b:af:b3:c7:ec:b7:00:b8:24:3a:81:06:c2:79:aa: 60:c2:63:39:c0:e3:12:12:2f:dd:5e:26:1b:8c:bf: 51:87:ca:a1:45:fd:a4:49:88:cf:2f:88:08:49:56: 56:9b:6d:5c:43:3a:02:fd:0f:89:b7:c7:3d:fa:d2: 3c:0c:9e:b4:19:41:e8:3b:05:7c:16:5b:36:c0:97: db:6e:ca:db:92:06:2e:ef:17:1c:0e:4e:a3:98:a4: 58:82:2b:4f:a3:0e:08:6f:49:5a:34:2f:81:92:6d: 5a:50:8e:24:f5:c8:e1:ab:bc:cb:75:a5:f8:78:d3: 61:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:ED:19:FE:84:D4:E0:B0:7E:A2:EE:61:44:FB:02:75:FA:43:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5b:83:b5:05:1b:60:77:68:db:50:7a:cc:4e:cc:4d:a6:67: bd:f4:74:cb:b3:53:3a:00:03:df:97:b3:35:3a:a0:c5:50:b6: 62:b7:8b:81:54:5c:b9:9a:89:ab:bf:bc:5e:43:44:3c:6e:fe: 2b:bd:dc:d6:e4:46:4b:d7:7a:b7:dc:30:62:d6:c2:4c:01:2a: de:9c:4d:96:42:12:31:2e:73:31:04:e2:f7:35:1d:3a:c1:f5: 74:8e:2e:d3:ee:62:a0:a5:17:a5:d6:3b:82:17:5f:74:e9:c3: 78:14:fd:56:76:65:7f:9b:58:3a:91:4f:62:2f:a6:05:7c:3c: 9d:3b:bc:48:9b:5c:24:08:1e:12:52:35:33:09:e9:57:50:2a: 56:ae:09:6d:96:8f:64:4b:38:f5:ee:dd:5c:2e:46:cd:5d:84: b6:76:92:99:7d:13:39:6b:de:28:5b:60:d4:8e:5c:0b:b1:79: 69:69:49:ff:02:d4:29:d3:d8:90:d8:ed:2c:6c:7a:86:10:3f: c4:1f:9f:88:e9:1a:e0:e9:19:73:44:98:10:ec:63:f3:a3:34: 4c:1c:5f:2b:c0:b4:8a:17:3a:d6:dc:a5:7d:50:24:bf:60:4a: 4c:6e:3d:ac:55:8a:f0:b7:ad:04:79:cc:b4:c5:3b:69:c0:08: 1c:47:57:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMIyD7OGKTepisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OTgyYmZiNjItNDc0Yy00ZTE3LWE5MGYtMTQ3N2ZlZTQyZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oX2XoiJ2e91+W1q+3rsU5jX9rBmXEirePuO +YqZbtyF6u0EXlKNwcntzVHNWULe312tMXc4fwUuDsCFpcono79u2lfxZLxuK4nO cr4iy7jH8PJ8CBkpsSurqZrhRP1abwK2/iVy/Bk7eURR39PMrbsEex28rUIzEtYD N4RHs8/TADpndnULr7PH7LcAuCQ6gQbCeapgwmM5wOMSEi/dXiYbjL9Rh8qhRf2k SYjPL4gISVZWm21cQzoC/Q+Jt8c9+tI8DJ60GUHoOwV8Fls2wJfbbsrbkgYu7xcc Dk6jmKRYgitPow4Ib0laNC+Bkm1aUI4k9cjhq7zLdaX4eNNhCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMma7Rn+hNTgsH6i7mFE+wJ1+kMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTliMzFjY2YtOThkYS0z NDhjLWI0MWMtNDg5N2I0YjBhOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFbg7UFG2B3aNtQesxOzE2mZ730dMuzUzoAA9+XszU6oMVQtmK3i4FU XLmaiau/vF5DRDxu/iu93NbkRkvXerfcMGLWwkwBKt6cTZZCEjEuczEE4vc1HTrB 9XSOLtPuYqClF6XWO4IXX3Tpw3gU/VZ2ZX+bWDqRT2IvpgV8PJ07vEibXCQIHhJS NTMJ6VdQKlauCW2Wj2RLOPXu3VwuRs1dhLZ2kpl9Ezlr3ihbYNSOXAuxeWlpSf8C 1CnT2JDY7SxseoYQP8Qfn4jpGuDpGXNEmBDsY/OjNEwcXyvAtIoXOtbcpX1QJL9g SkxuPaxVivC3rQR5zLTFO2nACBxHV9s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:30 2025 by rpki-client