$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95be5404-c089-38a7-ba34-8b182748eb78.roa File: 95be5404-c089-38a7-ba34-8b182748eb78.roa (raw, json) Hash identifier: FD6pw+V13GJt9ZkhyZLjSsuj5E6mSR2OjHastG3xrKc= Subject key identifier: F0:80:84:84:6F:0A:B6:B1:95:E7:3B:EF:09:8A:88:D6:7E:AF:B9:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404A12882A6C5C4E05C000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95be5404-c089-38a7-ba34-8b182748eb78.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.88.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4a:12:88:2a:6c:5c:4e:05:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=6b586df8-5091-4b9a-9bda-df6b44b53320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:a4:fa:bc:b2:8a:75:f4:62:45:e1:94:f4: db:45:39:40:67:d5:31:f8:97:ba:a6:a4:b5:4a:b8: ff:3f:db:c0:19:72:46:5b:19:5c:ec:14:1b:75:4f: 4c:72:e2:87:72:9a:05:cf:c9:6f:57:fe:da:ec:fb: 8b:e8:65:a8:77:b1:37:e4:3f:62:a0:a1:46:07:87: d0:dd:86:92:83:44:24:15:0c:a2:1c:cc:33:26:cb: 23:43:57:fb:24:42:3c:18:6b:31:4c:da:04:b1:fb: 5b:68:22:34:49:d8:42:5b:d3:ca:0b:e8:f9:03:f4: 94:4a:61:0d:26:6a:71:59:ec:3e:f5:ac:76:b7:11: 6b:f1:02:e7:f3:81:f0:ab:56:7b:ad:76:e8:4b:e1: 5a:39:cc:11:f0:f9:b3:1f:a0:63:8c:62:90:e7:22: ca:c4:93:6e:51:26:c4:87:a1:51:2d:23:f0:de:d5: f6:f0:bf:4e:35:ea:02:8b:00:f5:4d:ca:19:3c:1d: 4f:74:c4:03:d0:03:c0:b4:d3:6a:f6:67:8a:a7:76: 73:7b:d2:69:50:ef:53:e9:71:7b:ae:d8:15:9a:b9: ac:cc:69:2f:ef:37:35:3b:af:9f:cf:b3:3e:51:46: 4c:64:c8:d0:f3:8f:d4:9a:71:c8:e8:44:a0:d1:e2: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:80:84:84:6F:0A:B6:B1:95:E7:3B:EF:09:8A:88:D6:7E:AF:B9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/95be5404-c089-38a7-ba34-8b182748eb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d1:d0:20:b6:c5:15:8a:e9:25:22:d8:65:a2:d4:9b:16:cc: 4c:0a:e8:48:a5:d7:e3:4b:c9:8e:4f:00:23:32:30:aa:b1:66: 34:03:f6:8c:dd:28:23:8f:fd:0f:e1:bc:1b:74:2f:f3:90:ec: 7e:29:20:f7:51:c9:56:97:7e:ce:3c:46:51:7a:a8:d3:10:2e: 1c:ee:7f:3d:a8:c2:ce:db:02:ab:8f:7d:9b:a3:2c:a9:3f:d4: 70:8f:43:68:81:05:17:fc:f7:0c:0d:6d:2b:4d:bf:98:a7:15: eb:b9:36:45:5b:af:34:31:99:06:5a:71:1e:c6:e1:9f:fb:10: da:f5:c3:44:08:f7:2d:27:d9:4c:39:20:c9:f4:22:06:fe:b1: d0:29:2a:a8:a4:8c:38:60:52:e4:01:d6:52:99:db:7b:03:62: 7b:5a:dd:d3:5f:89:51:79:a4:b6:69:68:40:4e:38:89:36:ba: 41:e8:1f:62:76:36:8e:be:b4:82:8e:74:fc:f7:74:a0:54:3c: 97:ba:23:73:a6:fd:ed:50:1f:eb:3c:27:1a:24:61:82:e5:5c: 37:44:f5:e3:4b:17:3c:d6:d1:24:1f:44:17:b6:92:df:11:d3: 77:12:f5:5d:1a:8f:5c:72:e0:75:71:21:69:25:f2:48:27:32: d9:17:76:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEoSiCpsXE4FwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NmI1ODZkZjgtNTA5MS00YjlhLTliZGEtZGY2YjQ0YjUzMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipWk+ryyinX0YkXhlPTbRTlAZ9Ux+Je6pqS1 Srj/P9vAGXJGWxlc7BQbdU9McuKHcpoFz8lvV/7a7PuL6GWod7E35D9ioKFGB4fQ 3YaSg0QkFQyiHMwzJssjQ1f7JEI8GGsxTNoEsftbaCI0SdhCW9PKC+j5A/SUSmEN JmpxWew+9ax2txFr8QLn84Hwq1Z7rXboS+FaOcwR8PmzH6BjjGKQ5yLKxJNuUSbE h6FRLSPw3tX28L9ONeoCiwD1TcoZPB1PdMQD0APAtNNq9meKp3Zze9JpUO9T6XF7 rtgVmrmszGkv7zc1O6+fz7M+UUZMZMjQ84/UmnHI6ESg0eIlrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCAhIRvCraxlec77wmKiNZ+r7k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTViZTU0MDQtYzA4OS0z OGE3LWJhMzQtOGIxODI3NDhlYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrR0CC2xRWK6SUi2GWi1JsWzEwK6Eil1+NLyY5PACMyMKqxZjQD9ozd KCOP/Q/hvBt0L/OQ7H4pIPdRyVaXfs48RlF6qNMQLhzufz2ows7bAquPfZujLKk/ 1HCPQ2iBBRf89wwNbStNv5inFeu5NkVbrzQxmQZacR7G4Z/7ENr1w0QI9y0n2Uw5 IMn0Igb+sdApKqikjDhgUuQB1lKZ23sDYnta3dNfiVF5pLZpaEBOOIk2ukHoH2J2 No6+tIKOdPz3dKBUPJe6I3Om/e1QH+s8JxokYYLlXDdE9eNLFzzW0SQfRBe2kt8R 03cS9V0aj1xy4HVxIWkl8kgnMtkXdos= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:26 2025 by rpki-client