$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa File: aa95e6bd-2010-3425-a8ae-10940c333c97.roa (raw, json) Hash identifier: g7xsEo8logXsUe5cDGnuYM+vwKnH6qa+3egewtO4Rkc= Subject key identifier: E9:6A:0F:7C:7D:0F:D6:85:0E:F6:FD:FB:7A:C9:C3:E8:1E:74:90:F1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40599081A25B8BC014AF84 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 76.161.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:59:90:81:a2:5b:8b:c0:14:af:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=7745fb5c-3359-4e91-8fb6-1626b7e92894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:83:75:7d:a3:3c:ae:51:60:a9:e7:19:94:8d: 67:62:22:69:11:16:8f:b6:3b:a8:1d:f0:20:ca:3d: 7d:3b:a7:7b:28:ed:38:af:4b:8e:de:8a:67:eb:b5: 7c:fd:1a:a6:33:70:b4:93:23:a0:ee:5f:5c:4c:44: 5a:8e:16:04:a4:69:c7:07:40:41:7b:56:e5:ab:82: 6c:00:cf:12:54:bd:b7:03:e4:16:cc:72:6c:fb:a9: b6:24:67:1f:de:bd:4d:77:f2:19:f9:ae:fd:79:66: b2:4c:b9:88:08:78:08:50:3a:16:03:2a:11:e8:18: 8e:bc:a1:0b:cd:ff:8e:92:6b:7a:08:4e:22:61:5b: 42:0b:3f:b2:1d:de:20:2f:df:6e:35:b4:58:56:b8: 71:2c:3d:d2:8a:0a:51:cc:63:27:41:5e:ed:d6:c1: 00:29:f4:86:fd:f3:52:4e:ab:3c:7c:dd:f1:a3:2f: 19:fa:17:8e:03:68:71:b6:f0:fa:18:0e:98:4f:33: 22:bd:11:f9:b3:fa:c2:fb:e6:47:78:75:2c:c8:ed: 2f:54:98:8e:27:b2:74:67:bb:8e:c3:a3:ec:ed:67: ce:bf:10:94:c1:7a:f9:41:d8:d2:4e:15:a9:1e:b4: 8b:f0:31:63:b1:34:07:26:69:09:a5:63:32:aa:81: e8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6A:0F:7C:7D:0F:D6:85:0E:F6:FD:FB:7A:C9:C3:E8:1E:74:90:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 76.161.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a4:64:98:3a:01:ec:bd:ed:78:3f:36:1e:23:f8:f2:3b:31: 9e:24:c7:dd:b4:44:f2:20:83:13:07:6e:82:4c:26:c0:8a:e1: db:32:7b:99:09:a1:d0:dc:ed:17:77:b4:84:4a:2d:6b:42:65: 18:a7:01:e8:50:94:5c:3d:f1:bf:d3:73:38:f2:80:b4:7f:01: 4c:9d:67:c8:b3:60:a2:25:9b:21:21:8f:c2:f3:80:d4:4d:95: 81:aa:6f:62:35:96:77:cf:d6:cb:cf:94:15:b5:5f:a0:79:cf: 2f:0e:b7:b0:60:86:a9:e8:12:28:22:9a:b4:d4:45:39:43:84: ae:b6:bb:d0:cd:bb:49:fd:c8:b4:9d:89:ce:63:b0:5c:5a:8c: 96:75:2a:df:25:b5:12:a8:7f:15:a6:92:19:49:a7:37:a8:55: aa:b2:a7:58:24:e2:29:a8:d0:58:eb:1a:7a:c7:9a:ce:2d:c6: eb:8d:68:ff:d4:00:58:71:63:7e:cc:76:f8:ac:6a:9b:c2:49: 7e:60:79:fe:16:e0:e3:b1:2e:68:8e:ae:49:c9:f7:5e:1b:a1: c7:55:9c:f1:f4:be:28:6e:a8:c9:9c:d9:4b:66:82:d6:2f:97: d7:3e:cd:28:77:61:d5:30:d1:b4:0e:a3:35:77:5e:53:db:68: b6:2f:3d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFmQgaJbi8AUr4QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk Nzc0NWZiNWMtMzM1OS00ZTkxLThmYjYtMTYyNmI3ZTkyODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYN1faM8rlFgqecZlI1nYiJpERaPtjuoHfAg yj19O6d7KO04r0uO3opn67V8/RqmM3C0kyOg7l9cTERajhYEpGnHB0BBe1blq4Js AM8SVL23A+QWzHJs+6m2JGcf3r1Nd/IZ+a79eWayTLmICHgIUDoWAyoR6BiOvKEL zf+Okmt6CE4iYVtCCz+yHd4gL99uNbRYVrhxLD3SigpRzGMnQV7t1sEAKfSG/fNS Tqs8fN3xoy8Z+heOA2hxtvD6GA6YTzMivRH5s/rC++ZHeHUsyO0vVJiOJ7J0Z7uO w6Ps7WfOvxCUwXr5QdjSThWpHrSL8DFjsTQHJmkJpWMyqoHoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlqD3x9D9aFDvb9+3rJw+gedJDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NWU2YmQtMjAxMC0z NDI1LWE4YWUtMTA5NDBjMzMzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqkZJg6Aey97Xg/Nh4j+PI7MZ4kx920RPIggxMHboJMJsCK4dsye5kJ odDc7Rd3tIRKLWtCZRinAehQlFw98b/TczjygLR/AUydZ8izYKIlmyEhj8LzgNRN lYGqb2I1lnfP1svPlBW1X6B5zy8Ot7BghqnoEigimrTURTlDhK62u9DNu0n9yLSd ic5jsFxajJZ1Kt8ltRKofxWmkhlJpzeoVaqyp1gk4imo0FjrGnrHms4txuuNaP/U AFhxY37MdvisapvCSX5gef4W4OOxLmiOrknJ914bocdVnPH0vihuqMmc2UtmgtYv l9c+zSh3YdUw0bQOozV3XlPbaLYvPbg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:44 2025 by rpki-client