$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa File: b89a6365-8e78-393e-bb31-7d79d69262a9.roa (raw, json) Hash identifier: ozoMVZPX4Is+/G9SmLpqdIowQAHHJ+ZkIPQIfuZDpkQ= Subject key identifier: 68:A2:FD:25:77:A9:25:04:BD:99:81:16:AE:A2:62:B8:87:E3:F9:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CC52180C114147A82500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.88.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cc:52:18:0c:11:41:47:a8:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=6cef3851-318e-4c3a-9951-3ed25c1c8f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:75:ed:52:ee:13:9b:98:25:cc:e0:20:b0: a1:2e:86:54:51:73:c0:a0:c7:ed:e2:83:f8:42:b9: a8:ae:9e:5b:6c:43:39:79:17:05:e4:ca:dd:24:87: 31:2f:8d:ad:bf:1d:0f:cd:f3:8a:4b:98:07:83:bc: 79:ba:3d:31:96:09:13:db:27:50:44:3b:7e:f9:94: 33:4d:6a:f4:bb:84:17:97:c7:92:24:1f:48:e3:69: c9:c1:6b:5b:48:12:04:73:3c:b2:ca:7f:2e:58:9c: a0:87:f2:f6:94:f3:16:cc:95:50:0e:32:e1:5d:b8: 80:4f:a7:e7:68:1d:af:21:17:eb:6e:8e:85:a3:9d: cf:bc:22:2e:62:ab:ad:b9:19:3b:93:cb:e9:ae:63: ed:93:df:51:ba:d1:35:ee:87:0f:ed:a4:93:76:64: 18:8e:2d:e5:e4:ce:74:51:74:40:29:f3:11:3b:08: bc:39:f5:79:91:97:2b:46:8b:f2:a1:24:54:cf:83: 15:2a:b4:31:80:87:2d:d9:ab:7e:d9:08:03:b5:07: cb:44:ce:25:d7:00:0e:9b:dd:bf:88:9e:b1:87:93: 92:64:3b:3e:e6:37:05:ed:4e:14:9f:6a:08:e3:26: da:78:fd:4f:8d:58:3e:7d:c0:e9:7c:51:02:08:ca: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:FD:25:77:A9:25:04:BD:99:81:16:AE:A2:62:B8:87:E3:F9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b89a6365-8e78-393e-bb31-7d79d69262a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1b:29:85:5d:13:ce:ba:22:23:fa:1c:8f:5b:ac:48:05:1f: 6a:7c:26:bc:0f:d4:4f:f5:87:b8:59:84:a7:be:c1:03:82:60: eb:25:88:76:7e:f4:20:a1:5b:f6:26:43:ac:e2:f3:45:28:25: 26:6d:f6:25:a3:91:ba:95:fa:0e:c1:c5:ed:f9:4a:3f:18:06: 90:b3:a4:4c:b0:e7:e0:34:f6:fa:1b:b6:35:1e:d1:85:ff:3c: 76:de:2f:0a:aa:ea:22:3f:b1:5f:50:0e:f9:51:60:bd:cd:e1: fa:80:de:8c:3b:a3:b3:93:c3:29:8e:b5:56:da:33:14:03:2b: 93:90:83:61:25:0c:08:d3:f0:f8:1b:f8:6a:63:d5:0d:95:4f: a5:7b:80:e9:55:7e:d7:c0:1f:6a:fb:03:9e:33:47:2d:a1:b4: d3:33:5d:a3:f4:6f:f0:60:44:0f:ea:0d:68:28:c9:c6:3a:3f: 0e:b9:c4:f2:d1:a9:fc:60:0b:e0:f4:2d:54:3f:68:bd:14:cc: 29:a4:e3:b5:e5:6a:c4:9f:58:0b:8e:8a:66:95:d8:70:24:0e: b6:74:a2:0f:e7:50:1b:f1:ce:37:8a:df:86:28:a5:28:8b:c7: c9:fe:6a:d1:93:c8:08:43:b8:52:7f:af:bc:da:a1:e4:2b:10: 99:c4:8f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMxSGAwRQUeoJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NmNlZjM4NTEtMzE4ZS00YzNhLTk5NTEtM2VkMjVjMWM4ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1R17VLuE5uYJczgILChLoZUUXPAoMft4oP4 Qrmorp5bbEM5eRcF5MrdJIcxL42tvx0PzfOKS5gHg7x5uj0xlgkT2ydQRDt++ZQz TWr0u4QXl8eSJB9I42nJwWtbSBIEczyyyn8uWJygh/L2lPMWzJVQDjLhXbiAT6fn aB2vIRfrbo6Fo53PvCIuYqutuRk7k8vprmPtk99RutE17ocP7aSTdmQYji3l5M50 UXRAKfMROwi8OfV5kZcrRovyoSRUz4MVKrQxgIct2at+2QgDtQfLRM4l1wAOm92/ iJ6xh5OSZDs+5jcF7U4Un2oI4ybaeP1PjVg+fcDpfFECCMp/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGii/SV3qSUEvZmBFq6iYriH4/nZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg5YTYzNjUtOGU3OC0z OTNlLWJiMzEtN2Q3OWQ2OTI2MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4bKYVdE866IiP6HI9brEgFH2p8JrwP1E/1h7hZhKe+wQOCYOsliHZ+ 9CChW/YmQ6zi80UoJSZt9iWjkbqV+g7Bxe35Sj8YBpCzpEyw5+A09vobtjUe0YX/ PHbeLwqq6iI/sV9QDvlRYL3N4fqA3ow7o7OTwymOtVbaMxQDK5OQg2ElDAjT8Pgb +Gpj1Q2VT6V7gOlVftfAH2r7A54zRy2htNMzXaP0b/BgRA/qDWgoycY6Pw65xPLR qfxgC+D0LVQ/aL0UzCmk47XlasSfWAuOimaV2HAkDrZ0og/nUBvxzjeK34YopSiL x8n+atGTyAhDuFJ/r7zaoeQrEJnEj0g= -----END CERTIFICATE-----Generated at Thu Aug 7 03:53:36 2025 by rpki-client