$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73611854-ccd4-3f28-b4af-713e74544115.roa File: 73611854-ccd4-3f28-b4af-713e74544115.roa (raw, json) Hash identifier: pQCj5cyoM6BST1g1FVAWSxFlK6LuSBgK+EYDlMyN21s= Subject key identifier: 38:4F:C3:FC:E6:F9:17:10:D7:40:5C:F6:4C:E9:6B:B0:87:17:C0:59 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6067F7F547B780D042D280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73611854-ccd4-3f28-b4af-713e74544115.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.89.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:67:f7:f5:47:b7:80:d0:42:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=35d8a16f-ff09-4ba6-8c70-246a7d8f4da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:4c:c9:8d:78:ad:03:4d:02:04:d9:01:09: 3a:83:b1:4e:35:02:c2:8a:71:47:ae:a8:7f:93:e8: a9:e0:a4:99:c4:9f:ce:1b:c1:e7:b9:85:a3:83:f4: e3:a2:3b:d6:f6:2b:da:eb:cb:ae:e7:fb:50:26:46: f2:eb:a3:00:b5:fb:20:ee:ab:cf:46:d4:d9:0f:f7: cf:77:66:6d:25:1a:e2:82:50:0e:80:56:0a:92:3d: bb:72:04:96:b8:5d:dc:b3:ac:43:25:88:6f:1d:47: 53:b3:4b:f7:66:12:57:26:1e:6f:20:73:bd:ec:cf: 76:c3:27:03:95:59:8e:7e:43:18:1e:97:a6:a1:39: ba:2d:a2:c8:83:6f:eb:8b:51:b3:4a:62:74:e2:fc: 58:e6:a0:33:e6:43:4b:e0:62:b4:a0:76:d7:66:1a: 6f:1f:03:aa:2b:82:15:a7:36:80:05:8e:5a:e6:9f: b3:83:c8:93:98:a9:70:a2:c5:b0:2d:61:aa:a0:2f: ca:ec:88:fd:4b:f4:7c:07:c1:a5:ee:55:2a:50:29: 38:69:cb:35:ae:2f:f1:bf:72:1e:74:b2:f4:1b:e0: 05:d9:c5:27:63:da:c8:55:aa:d5:a3:b2:14:f3:9a: 6b:66:c9:f6:e1:a2:e2:d8:91:18:86:5a:d1:47:07: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4F:C3:FC:E6:F9:17:10:D7:40:5C:F6:4C:E9:6B:B0:87:17:C0:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73611854-ccd4-3f28-b4af-713e74544115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b5:ca:1a:cf:70:97:fc:21:42:00:5a:55:22:46:fd:a6:2a: 89:9a:76:3d:75:3f:61:65:d2:c9:a8:49:cf:39:4a:bf:ae:ae: a7:01:75:72:24:36:00:a9:3f:d6:a4:ca:66:64:37:8b:da:d2: eb:7d:5b:11:96:68:86:4d:99:fb:d8:67:9d:56:3d:41:57:c2: 64:fb:4d:20:34:4b:b8:05:be:1f:ae:3d:cb:dd:b9:42:bc:f8: ab:d3:83:05:74:59:fa:13:2b:00:eb:3e:12:98:d3:3c:56:17: 3e:00:98:01:56:80:19:1d:a2:a0:a7:65:8f:0e:27:bf:9d:93: 30:12:6b:19:db:19:01:bb:ed:ae:35:7c:9c:a0:ba:a5:e6:c4: d4:35:16:17:79:6f:79:f2:92:70:0a:2d:0a:7f:9f:0b:b7:6e: 9d:e7:0e:97:dc:a6:82:a1:f5:c2:79:7a:b9:1a:5a:a4:8d:b0: 5c:64:d0:02:95:f1:0e:0d:cf:da:80:2c:e3:3a:8d:d3:09:ee: c6:86:08:64:5e:07:49:44:cf:d6:77:28:9e:3c:63:31:7c:1c: 24:c9:f9:69:a9:97:d5:dd:66:9d:2c:90:f7:58:90:5f:65:02: 75:65:6b:91:b6:8f:fd:4d:99:89:0b:a6:e2:e5:66:9b:eb:c6: 0f:46:14:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGf39Ue3gNBC0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MzVkOGExNmYtZmYwOS00YmE2LThjNzAtMjQ2YTdkOGY0ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFNMyY14rQNNAgTZAQk6g7FONQLCinFHrqh/ k+ip4KSZxJ/OG8HnuYWjg/TjojvW9iva68uu5/tQJkby66MAtfsg7qvPRtTZD/fP d2ZtJRriglAOgFYKkj27cgSWuF3cs6xDJYhvHUdTs0v3ZhJXJh5vIHO97M92wycD lVmOfkMYHpemoTm6LaLIg2/ri1GzSmJ04vxY5qAz5kNL4GK0oHbXZhpvHwOqK4IV pzaABY5a5p+zg8iTmKlwosWwLWGqoC/K7Ij9S/R8B8Gl7lUqUCk4acs1ri/xv3Ie dLL0G+AF2cUnY9rIVarVo7IU85prZsn24aLi2JEYhlrRRwd+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhPw/zm+RcQ10Bc9kzpa7CHF8BZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzM2MTE4NTQtY2NkNC0z ZjI4LWI0YWYtNzEzZTc0NTQ0MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa1yhrPcJf8IUIAWlUiRv2mKomadj11P2Fl0smoSc85Sr+urqcBdXIk NgCpP9akymZkN4va0ut9WxGWaIZNmfvYZ51WPUFXwmT7TSA0S7gFvh+uPcvduUK8 +KvTgwV0WfoTKwDrPhKY0zxWFz4AmAFWgBkdoqCnZY8OJ7+dkzASaxnbGQG77a41 fJyguqXmxNQ1Fhd5b3nyknAKLQp/nwu3bp3nDpfcpoKh9cJ5erkaWqSNsFxk0AKV 8Q4Nz9qALOM6jdMJ7saGCGReB0lEz9Z3KJ48YzF8HCTJ+Wmpl9XdZp0skPdYkF9l AnVla5G2j/1NmYkLpuLlZpvrxg9GFAg= -----END CERTIFICATE-----Generated at Sat Aug 9 02:50:59 2025 by rpki-client