$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d2e2dc7-e8f5-38b8-b0d3-6a761c577519.roa File: 2d2e2dc7-e8f5-38b8-b0d3-6a761c577519.roa (raw, json) Hash identifier: 6s2Ru0gugqaTlx9+R2szRPcSzzB19IpTydfBfNLjMKQ= Subject key identifier: D6:58:52:E9:4C:5F:F6:AA:B3:A2:CB:EA:8F:F6:DF:CA:3F:DA:44:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE405582EE69268BA1E981C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d2e2dc7-e8f5-38b8-b0d3-6a761c577519.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.89.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:82:ee:69:26:8b:a1:e9:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=f444b977-46dd-4484-9ae5-083f13ccdf77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:27:db:d4:b9:74:2b:8e:0a:8b:71:ca:cc: 9d:08:0b:af:dd:17:5c:93:9c:24:24:17:e1:42:86: d4:3a:fc:6d:80:ab:d2:bc:4a:b0:f6:b7:e3:32:3e: 9b:43:01:9f:4b:28:f0:c1:20:d5:aa:c4:3b:ae:86: f8:1b:80:cd:e7:5a:a7:98:98:ab:bf:58:d1:30:c1: 40:dc:fb:f3:95:c7:96:1f:91:1b:0b:95:c4:8e:8a: 56:bf:d3:73:79:5e:9f:1b:5d:83:82:0c:14:8f:dd: 27:9e:21:2e:81:97:90:60:98:1b:0f:fb:a3:54:93: 41:db:a6:fe:42:89:62:2b:8a:26:7a:74:5d:26:9c: 1b:ab:3b:69:c7:54:88:63:f5:c7:31:c2:e8:bd:24: c5:18:00:60:39:32:b3:9a:70:a5:4f:b9:60:15:4f: 77:49:58:97:6c:e0:3d:73:66:ba:27:5e:65:58:44: cb:e4:00:82:11:fa:d5:f4:2f:8c:9a:90:fa:01:d4: 41:60:ad:c9:aa:0a:e5:67:b1:24:d5:e0:1d:d2:5c: c9:e5:50:72:a8:a4:77:9f:61:0e:71:55:ae:4a:3c: de:5d:c8:0d:a4:e7:3c:7e:a3:ce:1b:13:b9:b2:5e: b6:66:56:73:d1:11:82:01:7f:86:98:69:07:d7:5a: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:58:52:E9:4C:5F:F6:AA:B3:A2:CB:EA:8F:F6:DF:CA:3F:DA:44:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d2e2dc7-e8f5-38b8-b0d3-6a761c577519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:92:1b:1a:d1:7d:66:81:34:1f:4f:5f:c1:e2:ce:bc:27:53: af:41:94:dd:aa:81:ad:92:68:57:30:19:be:fd:32:d4:43:ba: cd:f0:a5:b9:c1:c4:38:aa:e8:2f:54:1d:8f:90:b9:60:7b:b4: fa:c8:0a:0c:aa:56:ef:90:89:4f:af:c5:11:f6:04:b5:8c:fb: bf:8e:7e:10:6f:ce:da:b9:3f:d0:41:48:4d:4f:6d:b7:01:5a: f4:83:d3:ba:25:54:5a:1e:a6:62:0c:28:76:aa:79:c6:41:2d: 73:1a:b6:c7:d3:2f:06:6d:29:d8:9b:77:37:de:b0:46:19:29: 90:9c:36:b2:2c:c0:e0:70:35:49:85:e0:b0:21:d1:89:83:54: 46:9b:2c:a8:a5:c6:72:b6:20:01:b7:70:77:b8:cb:1d:55:86: e5:53:cd:c2:97:52:65:77:71:60:f2:5e:02:2b:0a:87:4e:f1: 7a:41:8b:94:2b:ec:3c:a9:f8:cd:e4:d6:4f:31:23:67:ce:84: 0a:a3:85:58:fc:ef:74:3b:2b:50:38:94:f0:df:94:f8:cb:db: d8:94:3d:88:de:ee:19:43:77:45:cc:37:42:6f:5c:db:2b:1e: cf:81:2d:ed:ae:6c:bb:08:b9:22:b4:6e:dd:b3:c1:85:a6:a5: 64:67:b6:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFWC7mkmi6HpgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZjQ0NGI5NzctNDZkZC00NDg0LTlhZTUtMDgzZjEzY2NkZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOEn29S5dCuOCotxysydCAuv3Rdck5wkJBfh QobUOvxtgKvSvEqw9rfjMj6bQwGfSyjwwSDVqsQ7rob4G4DN51qnmJirv1jRMMFA 3PvzlceWH5EbC5XEjopWv9NzeV6fG12DggwUj90nniEugZeQYJgbD/ujVJNB26b+ QoliK4omenRdJpwbqztpx1SIY/XHMcLovSTFGABgOTKzmnClT7lgFU93SViXbOA9 c2a6J15lWETL5ACCEfrV9C+MmpD6AdRBYK3JqgrlZ7Ek1eAd0lzJ5VByqKR3n2EO cVWuSjzeXcgNpOc8fqPOGxO5sl62ZlZz0RGCAX+GmGkH11ou7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZYUulMX/aqs6LL6o/238o/2kTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQyZTJkYzctZThmNS0z OGI4LWIwZDMtNmE3NjFjNTc3NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1m2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiSGxrRfWaBNB9PX8HizrwnU69BlN2qga2SaFcwGb79MtRDus3wpbnB xDiq6C9UHY+QuWB7tPrICgyqVu+QiU+vxRH2BLWM+7+OfhBvztq5P9BBSE1PbbcB WvSD07olVFoepmIMKHaqecZBLXMatsfTLwZtKdibdzfesEYZKZCcNrIswOBwNUmF 4LAh0YmDVEabLKilxnK2IAG3cHe4yx1VhuVTzcKXUmV3cWDyXgIrCodO8XpBi5Qr 7Dyp+M3k1k8xI2fOhAqjhVj873Q7K1A4lPDflPjL29iUPYje7hlDd0XMN0JvXNsr Hs+BLe2ubLsIuSK0bt2zwYWmpWRntlI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:54 2025 by rpki-client