$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa File: a5987cbb-27f3-317c-a6ba-afca614aced9.roa (raw, json) Hash identifier: Y9w0atDjzmZ/6VS5hc5kmeCOr8KMJI0H/9CpdmW9Rp8= Subject key identifier: C8:71:17:05:01:E8:B9:B7:B2:DB:2E:86:C3:F3:4A:71:3C:B9:CF:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D3EA5EFC17F0537E5300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 75.89.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d3:ea:5e:fc:17:f0:53:7e:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=9df1b5c5-c61a-4423-bab9-599633f2f0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4c:af:2e:87:50:48:b7:4b:57:e3:07:a0:f1: 09:9b:11:be:71:d8:be:27:4e:71:df:de:f1:61:c3: 1f:de:41:af:0c:47:0d:ea:a0:a1:21:a9:6f:3a:19: 13:29:d0:80:6a:c0:9c:7e:8d:77:1a:a5:88:27:4f: fa:06:cc:7f:f5:77:cb:a4:2d:55:5a:c6:40:cd:5a: 05:30:67:34:9d:ac:10:ad:29:59:42:7f:82:e5:d6: bb:f7:d2:26:0c:70:90:27:6d:75:1d:98:2b:8d:5f: 83:e7:f3:cc:38:b8:36:73:01:3e:07:8f:60:53:4e: 6a:c6:66:15:21:59:d6:e5:93:83:6f:f7:6f:1d:c1: e2:ff:be:0b:98:ca:45:47:20:33:c1:3e:a1:53:d8: c7:90:3e:01:45:26:b5:59:5a:4a:22:08:b1:f3:c9: 1c:6d:ee:50:3d:52:2a:b3:dd:8f:81:30:0d:e0:57: 63:b0:bd:8e:1d:dd:12:65:3f:9e:40:5a:2b:fa:e7: be:4b:ab:e6:a8:89:fd:e9:b3:50:d7:c0:63:2b:1e: 06:9f:5c:7f:b0:45:19:b3:b5:f6:03:32:f2:08:f1: 38:18:75:93:ce:8a:3e:96:fc:29:a7:68:72:4a:1a: 3e:a8:83:25:70:21:a2:3d:27:29:e3:63:7c:ef:de: 23:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:17:05:01:E8:B9:B7:B2:DB:2E:86:C3:F3:4A:71:3C:B9:CF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a5987cbb-27f3-317c-a6ba-afca614aced9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fa:cb:07:c7:b8:b1:29:e7:11:17:65:a1:df:35:48:65:1b: 61:8b:2d:d4:5c:58:9e:cb:c2:86:37:c7:65:b0:58:16:17:e0: d0:d6:10:be:11:a9:b5:f2:fe:72:84:d9:51:be:d9:58:76:7d: b2:35:79:86:8d:fc:e3:e8:77:ab:ce:3b:b1:25:ed:00:9f:2a: ca:c0:18:9b:74:6d:67:c4:e4:2e:8d:29:40:d4:67:73:ab:0d: 38:03:4d:52:76:68:10:e5:61:21:6d:b5:4e:24:23:d5:43:5e: 62:66:14:91:f0:e1:f8:54:fa:78:5c:b0:ad:67:ef:4a:4b:f5: 3e:eb:79:bb:48:0f:84:4a:6c:fb:c0:72:13:78:f0:54:48:17: 4c:0b:c3:4c:0f:0c:3a:af:20:b1:2b:94:9d:65:6b:01:04:89: 4e:a9:b7:f5:f6:d4:ee:e7:20:92:9c:4d:2f:99:35:59:74:b3: 44:bf:c6:ad:fb:3e:32:a6:a8:6f:ec:96:65:e2:be:b3:cc:75: e9:c3:f3:f3:bf:79:20:7d:61:95:cd:1b:7c:7a:7e:77:3f:df: 59:e2:41:b6:e5:75:ba:10:93:7e:8b:4e:e3:92:e6:69:16:82: df:38:e7:3a:bb:a7:f8:75:0d:49:ef:cd:de:80:32:b7:20:e2: 0b:f9:fa:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNPqXvwX8FN+UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk OWRmMWI1YzUtYzYxYS00NDIzLWJhYjktNTk5NjMzZjJmMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkyvLodQSLdLV+MHoPEJmxG+cdi+J05x397x YcMf3kGvDEcN6qChIalvOhkTKdCAasCcfo13GqWIJ0/6Bsx/9XfLpC1VWsZAzVoF MGc0nawQrSlZQn+C5da799ImDHCQJ211HZgrjV+D5/PMOLg2cwE+B49gU05qxmYV IVnW5ZODb/dvHcHi/74LmMpFRyAzwT6hU9jHkD4BRSa1WVpKIgix88kcbe5QPVIq s92PgTAN4FdjsL2OHd0SZT+eQFor+ue+S6vmqIn96bNQ18BjKx4Gn1x/sEUZs7X2 AzLyCPE4GHWTzoo+lvwpp2hySho+qIMlcCGiPScp42N8794jtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhxFwUB6Lm3stsuhsPzSnE8uc9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5ODdjYmItMjdmMy0z MTdjLWE2YmEtYWZjYTYxNGFjZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX6ywfHuLEp5xEXZaHfNUhlG2GLLdRcWJ7LwoY3x2WwWBYX4NDWEL4R qbXy/nKE2VG+2Vh2fbI1eYaN/OPod6vOO7El7QCfKsrAGJt0bWfE5C6NKUDUZ3Or DTgDTVJ2aBDlYSFttU4kI9VDXmJmFJHw4fhU+nhcsK1n70pL9T7rebtID4RKbPvA chN48FRIF0wLw0wPDDqvILErlJ1lawEEiU6pt/X21O7nIJKcTS+ZNVl0s0S/xq37 PjKmqG/slmXivrPMdenD8/O/eSB9YZXNG3x6fnc/31niQbbldboQk36LTuOS5mkW gt845zq7p/h1DUnvzd6AMrcg4gv5+jg= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:23 2025 by rpki-client