$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa File: 2740e1e0-7980-3707-b098-f21fdbd6be0f.roa (raw, json) Hash identifier: Hf/HLDlqaq2R7ZssxgnCWcinKIXtJhMrxMLxZXEISzk= Subject key identifier: 8D:A7:73:D2:E0:15:B3:BC:DD:12:EF:AC:7F:6C:7B:C4:DA:BB:F8:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB22171C11698D9D2288EB0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 7029 IP address blocks: 75.88.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:71:c1:16:98:d9:d2:28:8e:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=85daf769-98d3-4a96-b3f0-11b88ff5bf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d8:10:8e:14:44:e5:85:10:cd:cb:cf:3f:d4: f4:29:1c:47:c8:53:90:db:9a:f4:ab:68:42:90:0b: ee:40:4e:30:bb:06:f9:a0:30:38:82:50:e7:32:a1: 93:68:ee:36:39:10:6f:a3:ec:fd:5c:26:90:0b:c2: 0a:aa:5a:fb:7e:46:cc:29:2d:17:f5:4b:43:71:99: 39:e5:4a:c9:76:39:8c:51:6b:da:fa:36:56:e1:5f: 96:4a:21:2c:3c:d5:27:01:c0:b1:a4:6a:3d:9f:98: 95:fe:d2:46:33:a3:1e:1d:8c:06:c3:de:bd:41:c6: e1:09:4e:a6:07:1c:1d:0e:80:3f:8a:ed:14:f8:10: 54:1b:e1:7d:48:22:02:16:f4:b6:95:d4:64:48:77: 0c:ac:eb:36:22:b8:a7:f2:d7:d5:32:bc:f0:6a:ab: 42:4d:fc:11:d6:4e:2e:52:ac:95:86:6f:5f:ac:2b: ef:cd:fa:84:2c:d6:9c:65:13:50:0c:ba:d6:91:58: d6:4e:ef:51:25:68:a8:55:00:8a:aa:ad:9c:a4:66: 65:ff:5c:d6:b7:60:50:e5:32:44:b5:b8:de:0d:80: 01:41:37:04:43:49:69:56:35:f6:f6:76:42:8f:aa: c4:a0:18:08:19:0e:a4:8d:60:37:19:77:4c:57:a6: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:73:D2:E0:15:B3:BC:DD:12:EF:AC:7F:6C:7B:C4:DA:BB:F8:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e8:91:f3:76:19:4e:ed:fb:80:d2:f9:36:aa:a6:84:41:13: 27:9b:f0:d6:3f:36:cc:a1:96:9b:a5:23:7c:ab:d1:94:57:56: 5b:a7:b9:84:69:79:01:6c:d8:b5:4c:75:5b:8f:cf:37:52:aa: 6e:e2:e5:70:56:49:c4:48:bb:b8:b4:e9:72:67:37:95:62:57: 9a:68:5b:21:64:33:2d:3c:04:16:94:d4:02:a1:87:62:c6:63: 3f:b7:7e:9b:92:69:71:da:73:1e:9c:bb:73:43:a2:00:23:cd: ed:ab:a3:79:28:51:ab:ef:f5:96:c5:50:0a:f4:b5:7b:15:c3: 02:69:7b:9e:03:87:ee:0e:8b:82:25:31:61:44:c3:ba:83:04: d2:5e:89:68:40:f3:6c:26:bb:bd:09:f7:ee:2c:98:66:0b:fb: b8:7b:03:28:b5:71:3e:53:6c:a0:95:d1:9c:5f:3f:c7:0f:9b: ca:19:1f:ba:d6:74:87:7a:73:4a:ee:12:05:36:67:21:bb:59: de:df:57:95:6a:25:2f:5d:27:7e:df:53:d4:92:a2:f9:0d:e5: a6:f8:74:bf:8c:c8:ad:5a:c3:a7:7d:38:8e:65:ff:56:33:c4: 42:20:93:e7:41:9a:26:67:b3:8f:a0:ee:48:23:5e:39:a3:e3: 4a:d7:e5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXHBFpjZ0iiOsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODVkYWY3NjktOThkMy00YTk2LWIzZjAtMTFiODhmZjViZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NgQjhRE5YUQzcvPP9T0KRxHyFOQ25r0q2hC kAvuQE4wuwb5oDA4glDnMqGTaO42ORBvo+z9XCaQC8IKqlr7fkbMKS0X9UtDcZk5 5UrJdjmMUWva+jZW4V+WSiEsPNUnAcCxpGo9n5iV/tJGM6MeHYwGw969QcbhCU6m BxwdDoA/iu0U+BBUG+F9SCICFvS2ldRkSHcMrOs2Irin8tfVMrzwaqtCTfwR1k4u UqyVhm9frCvvzfqELNacZRNQDLrWkVjWTu9RJWioVQCKqq2cpGZl/1zWt2BQ5TJE tbjeDYABQTcEQ0lpVjX29nZCj6rEoBgIGQ6kjWA3GXdMV6bnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2nc9LgFbO83RLvrH9se8Tau/jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc0MGUxZTAtNzk4MC0z NzA3LWIwOTgtZjIxZmRiZDZiZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLokfN2GU7t+4DS+TaqpoRBEyeb8NY/NsyhlpulI3yr0ZRXVlunuYRp eQFs2LVMdVuPzzdSqm7i5XBWScRIu7i06XJnN5ViV5poWyFkMy08BBaU1AKhh2LG Yz+3fpuSaXHacx6cu3NDogAjze2ro3koUavv9ZbFUAr0tXsVwwJpe54Dh+4Oi4Il MWFEw7qDBNJeiWhA82wmu70J9+4smGYL+7h7Ayi1cT5TbKCV0ZxfP8cPm8oZH7rW dId6c0ruEgU2ZyG7Wd7fV5VqJS9dJ37fU9SSovkN5ab4dL+MyK1aw6d9OI5l/1Yz xEIgk+dBmiZns4+g7kgjXjmj40rX5a8= -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:13 2025 by rpki-client