$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa File: 8a67ce58-99c9-3737-87d0-09b3a62815bc.roa (raw, json) Hash identifier: CewJGmPRLKltHnEuHF/c93GobKhEsfY2Aww3JguJz/M= Subject key identifier: DD:ED:DE:F1:0C:CA:02:63:39:58:3D:70:FB:8B:10:6C:F8:1D:AA:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D3C94A6F0D208420BCC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 75.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d3:c9:4a:6f:0d:20:84:20:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=b6c2ebbd-74e6-4aec-baef-64217d3a51e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:9e:d8:25:95:84:2f:9c:4e:98:5a:8c:78: 09:79:9f:94:3a:10:13:5b:f2:ad:79:a8:e6:56:86: 17:8d:de:db:82:a0:98:a4:0f:ab:0a:d9:45:21:7d: f1:80:5b:8c:c7:07:e4:96:87:9a:ea:96:75:ce:ac: ad:04:ef:2b:5a:48:16:1b:6d:0d:19:53:9c:59:36: fa:4e:66:cd:c1:4d:0a:d2:27:13:d0:44:f2:18:39: ca:02:29:9b:ca:20:ce:f6:1c:48:d4:eb:4f:d8:2b: 61:2d:38:2c:d7:27:85:78:80:84:a4:7c:2d:c1:84: 73:ee:b5:cd:56:21:80:93:b8:71:84:c5:95:d0:af: 16:56:08:d1:3b:fb:b4:a4:89:d6:cf:4f:ad:b3:6c: c7:a5:96:f6:cd:ce:5e:a6:4b:76:62:cc:e0:8c:f3: 0e:d9:f4:ce:f3:43:6a:1e:a6:49:6f:9c:48:ea:1f: dd:2f:49:f5:6a:a5:ae:dd:5a:2f:7b:c4:7e:81:31: 94:71:ff:58:d1:e8:f7:de:11:4d:7c:25:cc:f6:cc: 01:f1:61:ac:55:fc:52:f3:d2:ef:9d:3b:9a:84:8c: a1:cb:4d:d9:66:c9:a2:d2:db:22:26:60:ac:4a:b2: 40:4d:78:57:20:01:d1:23:36:e5:13:ca:2b:3d:fe: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:ED:DE:F1:0C:CA:02:63:39:58:3D:70:FB:8B:10:6C:F8:1D:AA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a1:b2:ce:5c:b5:63:c5:88:07:29:e2:25:b6:ac:73:4f:5c: d1:18:1d:1b:d1:14:1f:2c:6e:5c:02:f3:36:de:0b:63:30:73: 73:e5:ae:73:8c:5a:d0:3b:bc:91:c6:ca:75:11:54:70:67:11: 26:0b:0e:47:bd:95:86:4f:90:e5:09:57:ed:86:95:3f:b6:bb: 85:c5:2c:24:22:ae:df:d3:c6:24:1f:5a:e2:c7:22:54:25:3c: 12:f9:18:45:f9:7c:b6:4b:f3:3a:e5:2b:45:af:0e:a7:f7:2b: 8a:1c:40:dd:a7:bd:1d:61:83:d7:45:29:88:d9:38:d6:95:09: 1b:52:eb:74:24:37:2a:8e:0b:63:ff:ba:30:87:87:6b:76:80: 08:f3:d3:df:70:be:63:e2:99:35:34:ea:47:fb:b0:d6:c0:31: bc:9f:f1:7e:fe:91:1f:d8:b7:f1:da:ed:b2:32:cf:79:af:bf: 96:6c:a3:27:7b:91:10:f0:9d:c2:36:89:47:fc:61:ae:a3:46: 7f:8c:95:17:e5:07:13:fc:54:11:77:7e:27:a4:1d:3d:17:39: db:5d:da:99:19:70:97:48:e3:ec:c4:ff:df:5f:9a:8f:0b:7f: 23:1b:43:fd:45:39:e0:d6:bf:57:8e:dd:a3:34:a3:87:f2:5d: 81:0f:a6:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNPJSm8NIIQgvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YjZjMmViYmQtNzRlNi00YWVjLWJhZWYtNjQyMTdkM2E1MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxqe2CWVhC+cTphajHgJeZ+UOhATW/Kteajm VoYXjd7bgqCYpA+rCtlFIX3xgFuMxwfkloea6pZ1zqytBO8rWkgWG20NGVOcWTb6 TmbNwU0K0icT0ETyGDnKAimbyiDO9hxI1OtP2CthLTgs1yeFeICEpHwtwYRz7rXN ViGAk7hxhMWV0K8WVgjRO/u0pInWz0+ts2zHpZb2zc5epkt2YszgjPMO2fTO80Nq HqZJb5xI6h/dL0n1aqWu3Vove8R+gTGUcf9Y0ej33hFNfCXM9swB8WGsVfxS89Lv nTuahIyhy03ZZsmi0tsiJmCsSrJATXhXIAHRIzblE8orPf7SGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3t3vEMygJjOVg9cPuLEGz4HapQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE2N2NlNTgtOTljOS0z NzM3LTg3ZDAtMDliM2E2MjgxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGhss5ctWPFiAcp4iW2rHNPXNEYHRvRFB8sblwC8zbeC2Mwc3PlrnOM WtA7vJHGynURVHBnESYLDke9lYZPkOUJV+2GlT+2u4XFLCQirt/TxiQfWuLHIlQl PBL5GEX5fLZL8zrlK0WvDqf3K4ocQN2nvR1hg9dFKYjZONaVCRtS63QkNyqOC2P/ ujCHh2t2gAjz099wvmPimTU06kf7sNbAMbyf8X7+kR/Yt/Ha7bIyz3mvv5Zsoyd7 kRDwncI2iUf8Ya6jRn+MlRflBxP8VBF3fiekHT0XOdtd2pkZcJdI4+zE/99fmo8L fyMbQ/1FOeDWv1eO3aM0o4fyXYEPpq8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:12 2025 by rpki-client