$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa File: 8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa (raw, json) Hash identifier: WzPmeoP4hIUYjmCoiZL/jZTsmEARSoOheXJcPbNdbcI= Subject key identifier: B8:DF:3F:A9:FC:A5:28:E0:12:79:95:8A:4A:38:6D:B6:4A:3E:ED:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B742753B7EAE1007E986C6C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 75.117.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:53:b7:ea:e1:00:7e:98:6c:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=7517f81c-1e08-48bc-9123-57ee1f4f9e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:da:62:60:82:48:6b:a9:c2:13:8d:70:56:2b: d4:5e:90:bb:1a:fc:d1:72:a6:31:76:09:97:b2:64: ee:c1:fd:4f:b2:1b:8d:f8:f5:da:1e:66:c1:51:18: 9e:da:3f:85:1b:4f:08:17:55:b5:97:93:d3:c0:39: 8d:78:d0:01:cc:f6:c1:35:90:1a:3a:e5:dc:af:43: b4:64:a5:61:b9:03:b5:fc:39:fa:45:d0:74:2e:fa: 02:c2:51:56:6a:d3:4d:6e:aa:28:32:f6:66:24:11: a6:f8:1d:32:b8:57:c6:e6:4c:16:09:8d:3c:1d:88: bb:28:1b:a9:70:ba:68:9d:67:05:42:15:4c:5b:7c: dc:08:ac:f9:84:61:eb:12:25:17:da:fd:be:bb:da: 51:c8:ac:bd:63:e9:ef:15:88:ec:5a:35:9f:a3:1c: e9:02:4f:c6:d3:00:67:ba:09:18:ad:e5:9a:64:a7: 41:aa:5f:3b:eb:74:5d:2c:8e:48:13:9c:06:8b:3e: a1:d6:bc:d4:dc:92:92:c6:3e:e5:b4:df:41:43:61: 7a:3c:3c:1c:03:aa:8b:63:21:96:db:15:d7:8c:27: 86:f8:d0:54:33:31:65:c7:7b:e2:b9:b2:e0:86:79: c7:00:43:13:a3:6c:34:3e:c1:bb:56:7b:f1:4d:de: b3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DF:3F:A9:FC:A5:28:E0:12:79:95:8A:4A:38:6D:B6:4A:3E:ED:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d0a1101-0a6f-3fea-aad2-0637eeb6638c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:43:2f:80:aa:32:ac:12:00:3e:07:61:14:40:62:24:19:18: da:24:76:9d:b7:38:ba:f0:16:9b:9e:78:d1:93:a3:a5:0d:c6: b8:c9:3a:e7:58:01:b5:85:b3:60:7b:e8:68:5d:73:70:f2:62: 1a:9b:03:cd:c7:80:d6:51:5c:b7:8e:57:57:4a:1a:a4:27:1f: 0d:ed:14:df:d7:97:99:cc:d7:65:64:4e:16:2d:23:3d:57:79: 4d:08:e2:58:25:8f:9f:9a:b0:76:65:97:24:13:53:34:c5:d6: 93:51:3d:5f:58:24:d0:ba:75:ab:e9:cc:ac:dc:59:ca:ab:d1: ee:c3:88:5f:db:3e:ac:aa:e5:50:9e:20:11:ce:09:f5:c7:87: 91:76:d0:6a:51:9e:bd:f4:60:61:79:54:14:f4:95:f0:5c:c1: e3:3d:74:25:d7:76:09:fb:b0:59:34:1d:f3:30:15:d6:04:e5: b2:23:92:23:b9:8f:54:aa:f5:a1:57:1f:44:02:66:b2:a0:a4: b8:e8:6a:49:cc:08:b1:d6:67:57:d0:56:73:7e:15:86:9c:4d: 4c:09:d9:b1:34:24:dc:ae:2f:33:fb:de:2e:66:d0:ac:be:fd: a8:14:ee:17:3f:b4:da:0c:cb:07:1d:1c:ac:f9:00:5a:39:1e: 74:4b:f1:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1O36uEAfphsbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NzUxN2Y4MWMtMWUwOC00OGJjLTkxMjMtNTdlZTFmNGY5ZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNpiYIJIa6nCE41wVivUXpC7GvzRcqYxdgmX smTuwf1PshuN+PXaHmbBURie2j+FG08IF1W1l5PTwDmNeNABzPbBNZAaOuXcr0O0 ZKVhuQO1/Dn6RdB0LvoCwlFWatNNbqooMvZmJBGm+B0yuFfG5kwWCY08HYi7KBup cLponWcFQhVMW3zcCKz5hGHrEiUX2v2+u9pRyKy9Y+nvFYjsWjWfoxzpAk/G0wBn ugkYreWaZKdBql8763RdLI5IE5wGiz6h1rzU3JKSxj7ltN9BQ2F6PDwcA6qLYyGW 2xXXjCeG+NBUMzFlx3viubLghnnHAEMTo2w0PsG7VnvxTd6zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjfP6n8pSjgEnmViko4bbZKPu3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQwYTExMDEtMGE2Zi0z ZmVhLWFhZDItMDYzN2VlYjY2MzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3U7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBDL4CqMqwSAD4HYRRAYiQZGNokdp23OLrwFpueeNGTo6UNxrjJOudY AbWFs2B76Ghdc3DyYhqbA83HgNZRXLeOV1dKGqQnHw3tFN/Xl5nM12VkThYtIz1X eU0I4lglj5+asHZllyQTUzTF1pNRPV9YJNC6davpzKzcWcqr0e7DiF/bPqyq5VCe IBHOCfXHh5F20GpRnr30YGF5VBT0lfBcweM9dCXXdgn7sFk0HfMwFdYE5bIjkiO5 j1Sq9aFXH0QCZrKgpLjoaknMCLHWZ1fQVnN+FYacTUwJ2bE0JNyuLzP73i5m0Ky+ /agU7hc/tNoMywcdHKz5AFo5HnRL8f0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:03 2025 by rpki-client