$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fc8c5d0-e8d1-3c51-b391-e2ab4013703c.roa File: 1fc8c5d0-e8d1-3c51-b391-e2ab4013703c.roa (raw, json) Hash identifier: 8F1DZ34PPRnTed0ukeSquarIo3CSd3sgf38l6kkDqVE= Subject key identifier: 9A:CD:8A:47:65:FB:4F:47:8C:C5:6B:21:66:C9:8D:B3:89:F5:FF:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BC0A5C6DA887D0D1FC7E05000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fc8c5d0-e8d1-3c51-b391-e2ab4013703c.roa Signing time: Tue 04 Nov 2025 22:36:55 +0000 ROA not before: Tue 04 Nov 2025 22:36:55 +0000 ROA not after: Mon 02 Feb 2026 22:36:55 +0000 asID: 7029 IP address blocks: 75.117.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c0:a5:c6:da:88:7d:0d:1f:c7:e0:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 22:36:55 2025 GMT Not After : Feb 2 22:36:55 2026 GMT Subject: CN=ce9b7eb2-c2bc-4e29-a0ae-0b26d4ffed09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:5a:e8:e8:67:c4:5f:0c:0d:98:5e:7a:0b: 52:dd:79:00:f0:07:d6:d8:be:8a:f2:f1:42:0e:7a: ea:36:e6:b6:b7:18:67:59:2c:17:bd:69:51:d5:f8: 35:ba:74:62:22:8f:1c:b0:17:99:7a:8b:e9:60:b6: 70:dc:2c:93:e2:dc:ae:df:cd:dd:62:40:4e:e9:92: 99:1d:7a:2b:e3:fb:3f:c9:4f:b5:60:1f:6a:c0:d7: 41:ae:41:a9:66:33:9e:65:28:8c:81:1e:73:b5:e3: 5a:7c:5d:93:2d:b1:61:59:66:99:a5:3b:b9:2f:d7: 43:23:1c:c1:82:22:f7:d2:78:49:75:da:7d:f3:b0: 8e:4b:6c:80:ab:53:db:87:53:96:68:53:c9:81:b9: cf:29:55:a9:66:1b:fa:3a:2f:05:14:e4:54:0f:8f: 5b:3c:3e:57:2f:de:2a:30:3a:2c:ca:83:a7:48:ff: 40:10:d5:7b:77:fe:fb:d8:01:68:2f:cf:63:74:bb: 75:94:e5:51:35:22:f7:12:6e:77:4f:99:47:00:72: b9:21:27:d0:bf:c1:b5:d7:38:5c:36:b7:33:35:65: 08:45:0d:f8:32:ba:b6:7d:45:66:f7:f2:79:22:d9: db:02:a6:cd:2a:dc:e0:bf:e5:e1:5b:76:f3:c7:5b: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CD:8A:47:65:FB:4F:47:8C:C5:6B:21:66:C9:8D:B3:89:F5:FF:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fc8c5d0-e8d1-3c51-b391-e2ab4013703c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cd:af:17:c0:ea:49:a8:6e:e8:f0:87:a5:96:c1:06:0a:e0: 46:2c:d9:3a:0b:eb:f1:97:c0:97:7e:a2:d6:e9:25:00:63:ca: fa:f7:5b:b2:94:37:a8:56:34:6d:3c:64:1e:d8:7c:79:98:2d: 3e:1c:53:1d:d2:14:67:36:b3:09:36:c1:50:c2:72:74:fc:c2: bf:dc:74:4b:1c:ba:5c:09:fd:96:2a:fb:cc:f9:81:a4:fe:48: 5c:48:bd:3d:30:43:09:62:a3:93:6e:63:bc:95:2d:08:18:b3: b5:fb:bb:09:57:36:db:67:e7:f1:3d:3f:80:bd:d0:36:40:df: 9b:7e:9b:61:e0:9d:76:32:98:11:79:32:83:a6:3f:70:be:98: 5c:65:c7:eb:8b:f4:57:2d:d9:56:12:48:26:b2:d7:a8:78:de: 33:d0:16:b7:ba:b7:89:f5:65:a2:e8:d1:38:b2:c9:ca:e3:25: 59:7d:cb:d8:c6:f8:72:60:c1:42:04:92:27:16:12:cd:f8:a9: 8d:a2:e9:f2:4a:a4:9e:80:41:3f:8e:39:13:ae:82:e6:a0:9b: 52:ca:95:48:1e:5b:80:73:7e:cb:50:6a:ca:84:77:2c:53:aa: 29:aa:8f:80:1b:73:dc:97:00:ed:f8:93:05:50:83:1b:11:ee: 8f:1e:b5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvApcbaiH0NH8fgUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDIyMzY1NVoXDTI2MDIwMjIyMzY1NVowLzEtMCsGA1UEAxMk Y2U5YjdlYjItYzJiYy00ZTI5LWEwYWUtMGIyNmQ0ZmZlZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioZa6OhnxF8MDZheegtS3XkA8AfW2L6K8vFC DnrqNua2txhnWSwXvWlR1fg1unRiIo8csBeZeovpYLZw3CyT4tyu383dYkBO6ZKZ HXor4/s/yU+1YB9qwNdBrkGpZjOeZSiMgR5zteNafF2TLbFhWWaZpTu5L9dDIxzB giL30nhJddp987COS2yAq1Pbh1OWaFPJgbnPKVWpZhv6Oi8FFORUD49bPD5XL94q MDosyoOnSP9AENV7d/772AFoL89jdLt1lOVRNSL3Em53T5lHAHK5ISfQv8G11zhc NrczNWUIRQ34Mrq2fUVm9/J5ItnbAqbNKtzgv+XhW3bzx1vJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrNikdl+09HjMVrIWbJjbOJ9f+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZjOGM1ZDAtZThkMS0z YzUxLWIzOTEtZTJhYjQwMTM3MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3ULMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPNrxfA6kmobujwh6WWwQYK4EYs2ToL6/GXwJd+otbpJQBjyvr3W7KU N6hWNG08ZB7YfHmYLT4cUx3SFGc2swk2wVDCcnT8wr/cdEsculwJ/ZYq+8z5gaT+ SFxIvT0wQwlio5NuY7yVLQgYs7X7uwlXNttn5/E9P4C90DZA35t+m2HgnXYymBF5 MoOmP3C+mFxlx+uL9Fct2VYSSCay16h43jPQFre6t4n1ZaLo0TiyycrjJVl9y9jG +HJgwUIEkicWEs34qY2i6fJKpJ6AQT+OOROuguagm1LKlUgeW4BzfstQasqEdyxT qimqj4Abc9yXAO34kwVQgxsR7o8etVA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:31:16 2025 by rpki-client