$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa File: 8a67ce58-99c9-3737-87d0-09b3a62815bc.roa (raw, json) Hash identifier: Qo1InpgA+rzudHbbEaQHCyfE1K2d0zKUgtL94vC08L8= Subject key identifier: E7:F7:62:77:FE:78:A0:56:03:11:01:6D:AB:5B:65:67:55:A2:57:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2C9E9B4A48A030B7239DC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 75.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9e:9b:4a:48:a0:30:b7:23:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=76865ee6-c06c-4339-8d59-5f8e1e4dd003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ad:03:1f:a4:85:35:07:4d:5c:0a:77:b4:a0: ff:96:cf:26:4b:a2:43:2e:15:2d:5c:b9:8e:c1:d7: 21:2b:89:5b:ac:7d:d9:7e:3c:97:c8:32:02:2d:70: 79:cc:58:d6:f4:d8:fa:b9:62:c8:e3:fc:11:ae:c6: c6:cb:43:8f:fb:90:87:e2:9f:31:3c:11:b1:80:64: 00:f6:6a:6a:78:3d:b2:25:1b:1f:77:14:14:2d:80: 2b:58:a5:a5:e8:17:16:87:a0:bc:c3:e1:04:1e:80: 9f:1f:de:d3:d1:b0:99:fb:ab:8a:9c:cc:43:eb:fe: ea:3b:c6:46:8b:c2:54:68:72:0b:53:66:c6:4a:e5: 69:05:68:36:56:4b:1a:73:78:99:cb:07:e9:60:15: 93:b2:76:93:b2:10:00:cc:a7:f5:4c:8d:18:02:f2: 68:6a:48:84:a4:0b:77:87:b5:f4:f6:b9:09:a4:33: 99:13:98:e8:dd:96:1c:21:04:7e:6c:bf:ee:81:65: bf:86:79:e9:8e:88:f9:f6:0c:e5:8f:35:b1:05:48: 11:e0:af:26:94:7b:d5:f6:79:bb:ac:23:40:7a:0c: 07:bd:57:f9:46:2b:8f:52:e0:a5:5c:e6:79:9a:6e: ae:d2:7f:22:0e:8c:f5:58:f1:6c:1a:49:19:bd:b4: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:62:77:FE:78:A0:56:03:11:01:6D:AB:5B:65:67:55:A2:57:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:27:dc:60:8e:c6:fe:8a:24:14:c3:c2:a9:27:fc:88:19:4b: e3:4d:7b:04:4e:a6:c6:9d:7e:56:8a:60:3e:25:e5:b6:bf:e9: c7:f4:1e:53:e7:e1:f7:8d:bf:23:47:38:ed:30:63:4b:56:fb: bf:a9:86:2f:25:bf:10:36:67:43:63:40:f8:0d:e9:61:9e:91: d5:e8:55:1e:ac:0e:e3:14:a3:86:33:ac:60:88:90:da:5b:17: f0:1a:5a:6e:92:b1:da:0a:2a:8f:5b:ec:20:43:35:60:29:c6: 69:f7:ab:f9:e9:16:e9:4e:97:37:4f:b7:bb:27:18:3b:4d:45: 92:12:80:1a:c9:d6:02:da:e4:d1:24:3c:99:ac:50:27:68:b6: 04:32:40:b3:ed:8b:3b:a2:05:d4:f7:1f:be:df:da:0e:38:2f: 42:5b:c4:38:61:c6:48:7f:cd:9f:96:b1:25:29:d0:0b:0a:8e: ef:97:b0:43:76:ff:d5:4e:70:71:e7:f1:ed:42:8c:44:53:cc: b0:22:43:e2:a4:ad:06:38:a7:f1:ea:68:31:9c:1b:94:df:94: 13:75:05:30:f9:79:b6:0f:75:d7:81:01:eb:be:55:85:9e:b7: ab:34:99:49:1f:75:d8:2a:6c:d1:0b:a6:ef:8e:66:fd:fe:6e: a9:3d:65:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJ6bSkigMLcjncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzY4NjVlZTYtYzA2Yy00MzM5LThkNTktNWY4ZTFlNGRkMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA360DH6SFNQdNXAp3tKD/ls8mS6JDLhUtXLmO wdchK4lbrH3ZfjyXyDICLXB5zFjW9Nj6uWLI4/wRrsbGy0OP+5CH4p8xPBGxgGQA 9mpqeD2yJRsfdxQULYArWKWl6BcWh6C8w+EEHoCfH97T0bCZ+6uKnMxD6/7qO8ZG i8JUaHILU2bGSuVpBWg2Vksac3iZywfpYBWTsnaTshAAzKf1TI0YAvJoakiEpAt3 h7X09rkJpDOZE5jo3ZYcIQR+bL/ugWW/hnnpjoj59gzljzWxBUgR4K8mlHvV9nm7 rCNAegwHvVf5RiuPUuClXOZ5mm6u0n8iDoz1WPFsGkkZvbQrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf3Ynf+eKBWAxEBbatbZWdVolcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE2N2NlNTgtOTljOS0z NzM3LTg3ZDAtMDliM2E2MjgxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEn3GCOxv6KJBTDwqkn/IgZS+NNewROpsadflaKYD4l5ba/6cf0HlPn 4feNvyNHOO0wY0tW+7+phi8lvxA2Z0NjQPgN6WGekdXoVR6sDuMUo4YzrGCIkNpb F/AaWm6SsdoKKo9b7CBDNWApxmn3q/npFulOlzdPt7snGDtNRZISgBrJ1gLa5NEk PJmsUCdotgQyQLPtizuiBdT3H77f2g44L0JbxDhhxkh/zZ+WsSUp0AsKju+XsEN2 /9VOcHHn8e1CjERTzLAiQ+KkrQY4p/HqaDGcG5TflBN1BTD5ebYPddeBAeu+VYWe t6s0mUkfddgqbNELpu+OZv3+bqk9Zec= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:41 2025 by rpki-client