$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa File: c6ff6d20-53db-3e7c-9876-4387d2386e03.roa (raw, json) Hash identifier: sc2S73SX711qCzNKEP4954ZISjMI5qTgrhURN2MQawE= Subject key identifier: DF:B3:80:D1:83:CF:14:B9:5D:68:25:EB:3F:3D:F0:26:42:AB:94:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA6D32C1198C470F90900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 75.117.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a6:d3:2c:11:98:c4:70:f9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=6c6c76d6-60b1-49bd-aea8-c3199b65d616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:14:2d:30:34:0e:fb:e0:33:75:7d:d3:c9:31: 5a:2a:76:f7:4a:a3:1f:6e:66:03:35:ab:2f:56:ef: f8:c8:58:ac:39:d7:2e:ea:0e:80:cb:f0:9a:fd:cd: 69:fa:ec:6c:0c:4c:50:ed:95:27:96:13:a8:8a:4c: 05:99:3e:01:b5:28:b4:ec:7c:29:03:97:c6:73:dd: 4a:23:33:9e:1b:00:6e:82:a8:86:68:40:44:d6:70: e1:a0:70:4e:4d:e2:72:24:61:2d:55:fe:a1:d1:19: b4:e6:39:14:72:5b:80:fb:a3:99:5f:25:6d:49:5a: 2d:21:53:ef:c2:58:6b:03:08:0e:a8:b1:36:76:f9: 6e:54:db:d7:ce:db:90:ed:f2:10:5f:ce:ad:db:ff: 55:bb:43:c7:88:0f:75:ef:2c:29:d2:0c:ec:c5:ff: 00:11:ef:1b:d9:7b:b8:cd:66:f5:62:24:32:ae:f0: 01:cd:96:0c:e1:27:91:e2:b7:63:b4:31:5f:00:4e: e8:c0:8a:32:5c:ca:b1:b7:44:a9:8a:dc:66:e3:b5: 86:91:15:b4:51:09:71:84:ae:72:07:7f:db:4a:02: 5c:6f:4e:66:42:8f:65:9c:0d:34:bd:2c:7d:c2:7c: 0c:f5:37:68:14:99:1b:d1:9d:c9:7c:6a:87:15:3b: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B3:80:D1:83:CF:14:B9:5D:68:25:EB:3F:3D:F0:26:42:AB:94:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c6ff6d20-53db-3e7c-9876-4387d2386e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:5b:ce:89:7e:fa:69:04:a5:31:52:98:5b:1b:64:59:41: 73:01:6b:2d:b4:c6:44:69:71:f2:21:8f:71:6e:f7:08:5b:9f: 29:34:1b:aa:8d:8c:79:af:aa:e1:a4:78:82:e0:e8:12:ad:e8: 44:3d:ef:9a:49:19:89:54:44:d9:a5:7e:8c:93:0e:bf:51:77: bc:b4:ec:ea:16:0e:c9:ff:b3:70:a8:aa:5a:04:84:3c:22:1c: 55:99:e5:a5:ef:2e:c3:f3:a7:02:c5:ca:f3:3e:d3:5d:c4:6c: e6:69:d8:1a:02:74:3f:90:c5:49:aa:f3:32:08:d9:26:5b:09: 36:86:eb:5b:e9:13:9c:bf:e7:a8:91:eb:60:9f:e6:46:3e:09: 99:fb:69:33:ac:27:82:0e:fa:ad:66:02:9a:08:5e:db:e1:7d: 66:2b:8b:af:dc:f8:ad:69:f5:8b:e8:91:17:14:f0:46:0e:5b: 33:a5:cb:01:50:e0:07:73:33:92:9d:a2:76:0c:61:bd:b1:32: 63:01:19:79:da:d2:02:d4:0d:bf:42:7f:85:ae:f5:33:44:24: c9:09:8e:e0:5c:69:c4:ba:e0:b7:de:fa:21:15:07:4d:f0:5d: 6c:18:03:81:0f:0d:45:1e:a5:2a:05:ae:96:9c:a5:b9:02:04: 6d:c2:fa:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKbTLBGYxHD5CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NmM2Yzc2ZDYtNjBiMS00OWJkLWFlYTgtYzMxOTliNjVkNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xQtMDQO++AzdX3TyTFaKnb3SqMfbmYDNasv Vu/4yFisOdcu6g6Ay/Ca/c1p+uxsDExQ7ZUnlhOoikwFmT4BtSi07HwpA5fGc91K IzOeGwBugqiGaEBE1nDhoHBOTeJyJGEtVf6h0Rm05jkUcluA+6OZXyVtSVotIVPv wlhrAwgOqLE2dvluVNvXztuQ7fIQX86t2/9Vu0PHiA917ywp0gzsxf8AEe8b2Xu4 zWb1YiQyrvABzZYM4SeR4rdjtDFfAE7owIoyXMqxt0Spitxm47WGkRW0UQlxhK5y B3/bSgJcb05mQo9lnA00vSx9wnwM9TdoFJkb0Z3JfGqHFTs2XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+zgNGDzxS5XWgl6z898CZCq5S0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzZmZjZkMjAtNTNkYi0z ZTdjLTk4NzYtNDM4N2QyMzg2ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3U8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLOW86JfvppBKUxUphbG2RZQXMBay20xkRpcfIhj3Fu9whbnyk0G6qN jHmvquGkeILg6BKt6EQ975pJGYlURNmlfoyTDr9Rd7y07OoWDsn/s3CoqloEhDwi HFWZ5aXvLsPzpwLFyvM+013EbOZp2BoCdD+QxUmq8zII2SZbCTaG61vpE5y/56iR 62Cf5kY+CZn7aTOsJ4IO+q1mApoIXtvhfWYri6/c+K1p9YvokRcU8EYOWzOlywFQ 4AdzM5KdonYMYb2xMmMBGXna0gLUDb9Cf4Wu9TNEJMkJjuBcacS64Lfe+iEVB03w XWwYA4EPDUUepSoFrpacpbkCBG3C+uk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:59:20 2025 by rpki-client