$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa File: 931f944c-59db-3179-9f11-33a8b6222d41.roa (raw, json) Hash identifier: GAfHEGf+lH7brfO+ZjGNR0qVKfqn6WxhhD9CHkfIkkc= Subject key identifier: 8A:91:9D:A1:1B:90:74:26:33:9D:45:AB:4C:44:14:31:C0:99:59:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0FAFCBDF6EE8682D80E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 7029 IP address blocks: 75.89.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:fa:fc:bd:f6:ee:86:82:d8:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=6d22f5df-67d1-4f94-86c4-f11646c73233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:58:f0:3b:89:f2:fa:a3:18:a9:6c:e7:68:7a: 65:61:11:d5:77:88:dc:bd:61:65:54:f8:1f:45:79: 10:c4:36:89:8a:16:e2:48:a6:9f:6f:98:c8:b9:a5: d0:18:a9:8d:57:3b:15:16:20:8c:a7:37:00:20:cd: 9f:5a:00:e3:a4:c2:93:32:a7:20:e3:71:c4:9d:d1: f8:30:d4:ba:4f:f7:dc:64:eb:4d:db:dd:8b:2c:04: 42:ce:e1:76:af:fc:29:ca:62:d1:fa:fd:07:d4:00: 53:19:9d:ef:b0:27:66:4a:15:04:ad:19:de:64:8f: d7:8a:0f:f8:da:4b:30:18:97:fb:f6:21:0e:85:19: 1d:72:83:84:10:e5:10:6c:52:c2:80:1d:11:0f:97: b5:04:77:fc:56:26:1f:69:e8:96:d0:e8:f3:6d:15: 0e:eb:4e:19:74:b6:73:2d:93:57:e3:a8:35:aa:6a: ea:76:8e:2b:fc:9b:b8:c5:8b:86:1d:84:0f:5f:34: 83:d4:1a:43:d1:db:9c:d8:28:34:ee:08:ba:3c:e9: 2f:57:aa:00:4c:a5:4b:a7:fb:08:8c:b7:83:92:1b: ad:12:ce:a3:2f:66:93:95:ef:ea:a6:08:4a:c4:f5: 51:e6:11:39:58:03:00:5f:c9:2b:86:83:2b:4d:16: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:91:9D:A1:1B:90:74:26:33:9D:45:AB:4C:44:14:31:C0:99:59:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/931f944c-59db-3179-9f11-33a8b6222d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a6:80:c5:82:61:c7:21:23:28:ac:12:d9:69:e4:04:e3:ec: 57:38:ff:99:b8:7b:d1:4f:2b:18:c0:06:d2:de:22:c4:d2:f9: 65:97:71:ea:81:23:3e:1b:21:81:ea:f2:8c:d9:6e:a8:b2:49: 95:8f:ff:07:b5:a0:2f:cf:92:9b:c2:3b:ce:6f:72:ad:9c:0e: 1e:11:0b:6a:d0:05:67:d8:43:17:c2:b7:e7:3b:7f:14:c8:2d: 49:b0:22:17:99:64:f1:9b:97:95:55:53:19:7f:63:13:e6:0f: d8:fe:d3:fb:81:03:05:09:8f:96:58:ed:07:cf:25:3b:7d:26: fe:8a:8a:47:7d:d4:2c:60:92:0f:3e:f5:74:56:da:32:56:18: d2:0b:08:f3:1d:ff:3c:0e:77:8d:a0:28:e6:cf:b9:88:83:d3: c7:0f:55:f0:d3:c5:3f:4d:9e:ed:86:f7:5e:de:25:8c:04:c0: 49:e3:d0:b7:9a:56:95:63:7e:bd:29:81:b8:68:7b:d8:fa:3f: ed:b1:72:73:f1:b0:eb:dd:ce:50:2b:a7:5a:bd:5f:d5:1b:58: 88:aa:28:f2:1a:cc:b9:0f:50:a7:8e:7d:32:7d:88:c8:28:20: f3:be:8c:ba:8a:50:d6:9c:c1:6c:e0:3e:0f:5c:98:c5:f5:5e: 86:8b:a2:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoPr8vfbuhoLYDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NmQyMmY1ZGYtNjdkMS00Zjk0LTg2YzQtZjExNjQ2YzczMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFjwO4ny+qMYqWznaHplYRHVd4jcvWFlVPgf RXkQxDaJihbiSKafb5jIuaXQGKmNVzsVFiCMpzcAIM2fWgDjpMKTMqcg43HEndH4 MNS6T/fcZOtN292LLARCzuF2r/wpymLR+v0H1ABTGZ3vsCdmShUErRneZI/Xig/4 2kswGJf79iEOhRkdcoOEEOUQbFLCgB0RD5e1BHf8ViYfaeiW0OjzbRUO604ZdLZz LZNX46g1qmrqdo4r/Ju4xYuGHYQPXzSD1BpD0duc2Cg07gi6POkvV6oATKVLp/sI jLeDkhutEs6jL2aTle/qpghKxPVR5hE5WAMAX8krhoMrTRZnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqRnaEbkHQmM51Fq0xEFDHAmVn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxZjk0NGMtNTlkYi0z MTc5LTlmMTEtMzNhOGI2MjIyZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKmgMWCYcchIyisEtlp5ATj7Fc4/5m4e9FPKxjABtLeIsTS+WWXceqB Iz4bIYHq8ozZbqiySZWP/we1oC/PkpvCO85vcq2cDh4RC2rQBWfYQxfCt+c7fxTI LUmwIheZZPGbl5VVUxl/YxPmD9j+0/uBAwUJj5ZY7QfPJTt9Jv6Kikd91Cxgkg8+ 9XRW2jJWGNILCPMd/zwOd42gKObPuYiD08cPVfDTxT9Nnu2G917eJYwEwEnj0Lea VpVjfr0pgbhoe9j6P+2xcnPxsOvdzlArp1q9X9UbWIiqKPIazLkPUKeOfTJ9iMgo IPO+jLqKUNacwWzgPg9cmMX1XoaLoj8= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:28 2025 by rpki-client