$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa File: a272cf84-389e-36f8-928e-85ab374fb3f0.roa (raw, json) Hash identifier: 0JW4nM/8BrUm/zhUsmgvChjN1rGyelYyodAhm93wlmo= Subject key identifier: E4:54:57:E1:6F:53:46:CB:C8:8F:2F:71:44:68:FF:EA:C8:1A:5B:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404B9AFA22DCD9217705D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.89.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4b:9a:fa:22:dc:d9:21:77:05:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c0b40bdd-9f33-4d78-ab22-ccbec95eca2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:ce:0d:35:1f:91:ee:c3:1d:4b:06:18:29: 51:77:41:8c:5c:2d:a5:d8:6d:7b:8b:67:a7:3b:57: 62:ac:87:d9:ee:6f:75:fd:b5:ef:98:ab:6d:c7:dd: b3:91:fe:b5:ea:85:fe:95:73:9f:fa:9b:75:f0:b5: 19:52:33:03:e4:2e:73:a3:b6:a5:8b:b8:f0:c3:65: 83:c2:78:7e:c0:eb:17:ef:dd:9c:e6:b5:13:8d:28: ef:43:7f:b2:da:2e:33:ea:7c:c7:14:56:7b:73:66: 33:a9:1f:e1:51:83:c5:f4:f6:96:73:05:61:00:c2: 42:de:30:66:77:1e:7a:a7:ed:a3:f0:73:dd:e5:bb: 6c:99:a6:af:93:3d:3c:90:c2:67:45:16:db:e9:4d: 17:2b:b3:30:88:4c:ae:6f:a5:5c:af:ae:05:ce:d1: 4c:45:22:52:dd:7f:df:fe:e1:46:d5:ac:8e:44:13: d1:ee:ee:5e:5c:30:b1:49:5e:cd:00:4e:7f:b8:59: 31:76:e9:0d:84:cf:6a:47:1e:0c:f6:ab:6d:56:ca: d5:82:4e:83:6d:be:6f:aa:9c:af:4a:4f:9a:a5:05: 60:06:6a:3d:11:c9:0e:71:e3:04:29:1f:ad:06:0f: 65:9a:e2:11:bf:f9:fd:d6:c8:d7:72:58:cc:18:7f: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:54:57:E1:6F:53:46:CB:C8:8F:2F:71:44:68:FF:EA:C8:1A:5B:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a272cf84-389e-36f8-928e-85ab374fb3f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:18:05:aa:04:0e:ae:0a:5d:8d:8f:ec:22:2c:3d:5d:82:0b: 1a:71:7d:75:9f:3b:45:f5:ea:59:b9:d3:4e:7d:2c:d9:70:b7: d5:82:e8:45:29:9a:cf:10:bc:8d:2b:24:bc:74:cc:12:be:7a: a9:82:c1:59:72:70:79:fe:1e:b1:49:6a:39:e2:2d:75:eb:e6: 78:0a:c1:3a:d9:f5:1c:7a:b1:56:f5:00:a7:d4:ca:50:f6:f5: f3:3a:de:cb:5d:ed:9a:a8:e9:82:36:f0:ff:d6:85:f3:c4:d7: 24:ce:9f:03:29:12:61:ec:59:e4:82:b2:72:81:95:81:a6:f8: 80:3c:11:1c:e5:0c:90:17:80:db:ea:ca:d0:c0:d0:7f:50:2d: 25:6f:05:fe:cf:84:2e:90:df:ca:81:9f:60:58:ab:44:f9:84: f6:0a:8c:5e:71:3a:c1:a5:d6:84:51:62:19:99:c3:20:46:88: d1:48:c1:8f:0d:e8:f0:24:26:e6:e6:7d:ac:54:32:46:af:5d: 9f:fd:93:5e:5c:d0:2c:b8:a2:85:3a:cd:51:25:7c:ce:e6:e8: c9:54:f0:a3:ff:13:74:43:fb:bd:6b:f1:e3:f2:67:fd:5d:f2: c3:cb:ac:1f:2a:81:a0:b8:61:90:eb:9b:ed:81:24:60:00:11: 6b:96:ab:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEua+iLc2SF3BdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzBiNDBiZGQtOWYzMy00ZDc4LWFiMjItY2NiZWM5NWVjYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4rODTUfke7DHUsGGClRd0GMXC2l2G17i2en O1dirIfZ7m91/bXvmKttx92zkf616oX+lXOf+pt18LUZUjMD5C5zo7ali7jww2WD wnh+wOsX792c5rUTjSjvQ3+y2i4z6nzHFFZ7c2YzqR/hUYPF9PaWcwVhAMJC3jBm dx56p+2j8HPd5btsmaavkz08kMJnRRbb6U0XK7MwiEyub6Vcr64FztFMRSJS3X/f /uFG1ayORBPR7u5eXDCxSV7NAE5/uFkxdukNhM9qRx4M9qttVsrVgk6Dbb5vqpyv Sk+apQVgBmo9EckOceMEKR+tBg9lmuIRv/n91sjXcljMGH8f8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORUV+FvU0bLyI8vcURo/+rIGlttMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTI3MmNmODQtMzg5ZS0z NmY4LTkyOGUtODVhYjM3NGZiM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1mvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4YBaoEDq4KXY2P7CIsPV2CCxpxfXWfO0X16lm50059LNlwt9WC6EUp ms8QvI0rJLx0zBK+eqmCwVlycHn+HrFJajniLXXr5ngKwTrZ9Rx6sVb1AKfUylD2 9fM63std7Zqo6YI28P/WhfPE1yTOnwMpEmHsWeSCsnKBlYGm+IA8ERzlDJAXgNvq ytDA0H9QLSVvBf7PhC6Q38qBn2BYq0T5hPYKjF5xOsGl1oRRYhmZwyBGiNFIwY8N 6PAkJubmfaxUMkavXZ/9k15c0Cy4ooU6zVElfM7m6MlU8KP/E3RD+71r8ePyZ/1d 8sPLrB8qgaC4YZDrm+2BJGAAEWuWq9A= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:09 2025 by rpki-client