$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa File: 8ec35253-fae3-31b5-8251-ff663b8b8790.roa (raw, json) Hash identifier: KNZLbNxRXzstop6ldaSFfR5E8V0p3u2KMVIW45/Q2TQ= Subject key identifier: 98:89:2C:BA:D3:AD:34:EE:38:A7:5C:E5:C1:E1:4A:AA:89:CC:3D:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CAACE25F171F70D99200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.117.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:ca:ac:e2:5f:17:1f:70:d9:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=859fb996-2d92-4100-8bcd-7d93135f6609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:f7:ce:57:63:44:2a:b9:08:91:35:ec:ec: 22:14:62:cc:19:e1:40:f2:66:89:d7:25:fa:fb:84: 6d:24:1e:97:91:29:24:dd:c7:30:1a:f5:6a:3f:09: 18:87:ff:2b:0c:33:3a:9a:fd:fb:88:79:9a:44:f7: 28:eb:fd:e4:8a:3b:68:45:38:f5:43:f5:b6:bb:07: a5:c4:77:d4:4b:bb:c4:3a:0f:8d:ef:5f:b5:2c:d6: d3:f5:91:a4:21:2b:2e:17:22:8f:d9:78:5f:b8:f6: a7:ba:0d:b4:12:bb:13:c9:c2:79:43:38:a1:e5:0a: b1:69:4c:98:c4:88:6b:4f:73:45:f3:d5:64:d3:c4: 89:94:f7:e8:dc:f0:90:c0:83:ae:2a:63:85:3f:ea: 2e:f0:e0:40:eb:86:7a:a1:2d:37:58:21:4a:de:05: 41:6d:53:57:46:dc:9c:41:56:e2:79:03:7f:87:ef: bb:30:a6:b8:c2:ef:4a:a5:17:14:68:e5:21:94:58: 84:9e:01:3c:8b:88:29:3c:65:ed:07:19:50:00:9b: 80:d6:21:69:61:61:a6:69:e1:09:98:31:a3:e5:0d: b7:20:85:c8:b6:82:8b:af:b8:99:58:2b:a6:e9:5e: b8:67:64:17:1e:aa:52:58:3a:43:be:fd:63:73:c3: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:89:2C:BA:D3:AD:34:EE:38:A7:5C:E5:C1:E1:4A:AA:89:CC:3D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0b:d1:04:17:79:ae:29:40:aa:bf:ab:af:cf:7e:28:7f:d1: 1c:f9:99:69:0f:17:59:fb:d8:b6:05:5f:70:d6:c0:d8:ba:8b: de:8f:0c:d4:cf:ae:4e:57:87:a8:18:a1:cd:b5:89:43:60:2f: 6c:a4:63:07:65:1d:d0:7d:84:94:74:0f:89:9c:f1:d0:f2:cb: 76:87:9f:86:3b:5b:b2:2c:89:9f:1a:56:70:39:99:79:40:17: be:64:1d:45:8b:d8:5a:cc:65:fb:89:37:f0:9d:9c:f5:cc:cd: 96:a5:da:a5:ce:76:cb:74:c7:f9:4d:c6:b2:c3:a0:5b:19:c0: d3:74:73:ca:4c:a3:65:b9:01:a4:25:a2:0e:e4:d1:39:97:5e: e6:d6:82:c9:0b:2f:93:b1:6d:a9:21:28:97:98:2a:4a:cd:3b: ed:43:e3:4e:af:97:90:af:76:b5:9c:2c:95:5f:f1:0d:bd:4b: c3:82:e8:93:54:f4:46:d8:fd:ef:62:84:7f:0e:34:15:86:08: d0:78:6d:3d:f1:9b:25:de:f8:67:57:92:b5:1b:95:e6:50:92: c6:9a:c6:00:39:7e:46:ba:fc:e5:ff:f6:8e:5c:07:b6:c5:fa: b9:96:72:64:95:62:17:ad:c3:12:86:5e:d0:a1:95:24:19:50: 20:69:75:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMqs4l8XH3DZkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ODU5ZmI5OTYtMmQ5Mi00MTAwLThiY2QtN2Q5MzEzNWY2NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAX3zldjRCq5CJE17OwiFGLMGeFA8maJ1yX6 +4RtJB6XkSkk3ccwGvVqPwkYh/8rDDM6mv37iHmaRPco6/3kijtoRTj1Q/W2uwel xHfUS7vEOg+N71+1LNbT9ZGkISsuFyKP2XhfuPanug20ErsTycJ5Qzih5QqxaUyY xIhrT3NF89Vk08SJlPfo3PCQwIOuKmOFP+ou8OBA64Z6oS03WCFK3gVBbVNXRtyc QVbieQN/h++7MKa4wu9KpRcUaOUhlFiEngE8i4gpPGXtBxlQAJuA1iFpYWGmaeEJ mDGj5Q23IIXItoKLr7iZWCum6V64Z2QXHqpSWDpDvv1jc8OTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiJLLrTrTTuOKdc5cHhSqqJzD1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGVjMzUyNTMtZmFlMy0z MWI1LTgyNTEtZmY2NjNiOGI4NzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYL0QQXea4pQKq/q6/Pfih/0Rz5mWkPF1n72LYFX3DWwNi6i96PDNTP rk5Xh6gYoc21iUNgL2ykYwdlHdB9hJR0D4mc8dDyy3aHn4Y7W7IsiZ8aVnA5mXlA F75kHUWL2FrMZfuJN/CdnPXMzZal2qXOdst0x/lNxrLDoFsZwNN0c8pMo2W5AaQl og7k0TmXXubWgskLL5OxbakhKJeYKkrNO+1D406vl5CvdrWcLJVf8Q29S8OC6JNU 9EbY/e9ihH8ONBWGCNB4bT3xmyXe+GdXkrUbleZQksaaxgA5fka6/OX/9o5cB7bF +rmWcmSVYhetwxKGXtChlSQZUCBpdcM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:38 2025 by rpki-client