$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7225d59-b2f4-38d7-9f8b-90283f6aa481.roa File: c7225d59-b2f4-38d7-9f8b-90283f6aa481.roa (raw, json) Hash identifier: bb8C+OtBGh9QM9tzzKqmSqsQg6oT5a0aXJuUOk7PJyE= Subject key identifier: 3D:65:74:0D:A7:38:8B:93:30:7F:D4:2A:53:86:DA:7C:01:7B:30:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B4E1299A6947002C95AB51680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7225d59-b2f4-38d7-9f8b-90283f6aa481.roa Signing time: Wed 24 Sep 2025 21:38:14 +0000 ROA not before: Wed 24 Sep 2025 21:38:14 +0000 ROA not after: Tue 23 Dec 2025 22:38:14 +0000 asID: 7029 IP address blocks: 75.88.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:12:99:a6:94:70:02:c9:5a:b5:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 24 21:38:14 2025 GMT Not After : Dec 23 22:38:14 2025 GMT Subject: CN=307f5fdf-c723-4372-90f1-5c0bbd40b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9e:d5:c3:02:18:cd:0d:91:b8:35:f3:ab:94: fb:57:fa:e9:47:0f:28:c2:d5:3b:62:09:61:05:85: ba:81:fe:01:fe:2a:c9:f0:0f:95:d1:e6:b7:ac:96: da:f2:b6:2a:ab:37:60:72:a6:79:e8:c4:4b:1a:bd: 27:c3:8b:92:2a:96:b5:fc:bc:d6:4d:b6:da:ec:4e: 27:2d:41:7a:60:c9:52:61:fb:a9:74:04:04:1c:cd: a1:f3:67:4d:92:36:27:b9:ec:c0:50:0e:a4:a7:f9: cf:0b:6e:f3:c8:5e:aa:18:00:7f:f5:34:ca:3c:0e: a9:21:34:ac:b5:93:2f:bc:0b:4a:7a:41:84:d7:7b: 84:9b:08:0e:52:49:fe:61:9c:67:91:b3:a5:2e:7f: 8f:0d:13:93:2d:67:b5:be:e3:00:4d:a0:5b:53:8f: f4:f7:ca:00:8f:b7:dd:1b:8c:f2:86:3d:bd:ea:dc: 48:c9:f6:de:0c:e1:75:e5:31:f5:41:e8:e6:14:94: cc:35:0f:e7:22:47:b5:53:f8:79:0c:b3:8f:1d:2d: aa:56:8a:d6:da:61:f3:0e:99:f1:20:85:97:8a:0e: 45:93:e5:a5:e4:55:8e:bf:e6:8c:23:41:3b:33:4d: d6:3f:ab:ad:0a:91:d7:71:e1:d9:cc:09:b2:c0:ba: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:65:74:0D:A7:38:8B:93:30:7F:D4:2A:53:86:DA:7C:01:7B:30:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7225d59-b2f4-38d7-9f8b-90283f6aa481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:72:89:70:d6:b5:26:e4:d8:3b:9c:5d:1d:98:3a:de:80:4d: cb:42:97:bf:f4:1e:18:78:f5:33:67:20:af:bd:51:4e:a3:db: 43:da:c2:5e:a9:cc:9d:8e:44:93:ec:48:d0:77:65:a9:ca:d2: 20:86:c0:e2:53:0c:f8:b8:9e:71:9c:a6:d2:f7:8b:ee:4b:cd: e5:0c:e9:b1:7e:c7:cd:ea:fe:9f:9c:05:63:12:be:4e:ad:ab: 26:bb:23:89:be:07:a3:1e:e4:f7:90:9e:d2:36:d9:f9:60:d8: 80:b9:19:53:26:06:ca:06:c5:e7:89:ff:21:43:c7:58:c7:22: 16:95:01:8b:c7:5d:d6:6d:71:7e:49:09:25:72:78:5c:58:54: e2:db:84:04:58:e5:31:5e:85:5e:69:2b:ac:ac:e8:df:1d:1e: f7:d0:b7:89:1e:df:b9:80:7b:9f:47:25:f0:74:9f:b8:8c:45: d5:55:91:5a:d4:25:ca:1b:f5:27:ae:91:b9:1d:f1:22:91:9e: 50:1c:d1:8a:ce:6d:97:32:c3:6c:e1:96:d1:da:9d:01:52:c7: 18:f6:7e:84:00:29:0f:4f:ee:4f:a7:e1:d4:57:b8:32:80:eb: 95:32:9c:80:b5:05:eb:81:8d:43:43:0f:a4:a9:83:f3:92:78: 81:b4:45:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOEpmmlHACyVq1FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkyNDIxMzgxNFoXDTI1MTIyMzIyMzgxNFowLzEtMCsGA1UEAxMk MzA3ZjVmZGYtYzcyMy00MzcyLTkwZjEtNWMwYmJkNDBiMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip7VwwIYzQ2RuDXzq5T7V/rpRw8owtU7Yglh BYW6gf4B/irJ8A+V0ea3rJba8rYqqzdgcqZ56MRLGr0nw4uSKpa1/LzWTbba7E4n LUF6YMlSYfupdAQEHM2h82dNkjYnuezAUA6kp/nPC27zyF6qGAB/9TTKPA6pITSs tZMvvAtKekGE13uEmwgOUkn+YZxnkbOlLn+PDROTLWe1vuMATaBbU4/098oAj7fd G4zyhj296txIyfbeDOF15TH1QejmFJTMNQ/nIke1U/h5DLOPHS2qVorW2mHzDpnx IIWXig5Fk+Wl5FWOv+aMI0E7M03WP6utCpHXceHZzAmywLrTRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1ldA2nOIuTMH/UKlOG2nwBezC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzcyMjVkNTktYjJmNC0z OGQ3LTlmOGItOTAyODNmNmFhNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1iTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9yiXDWtSbk2DucXR2YOt6ATctCl7/0Hhh49TNnIK+9UU6j20Pawl6p zJ2ORJPsSNB3ZanK0iCGwOJTDPi4nnGcptL3i+5LzeUM6bF+x83q/p+cBWMSvk6t qya7I4m+B6Me5PeQntI22flg2IC5GVMmBsoGxeeJ/yFDx1jHIhaVAYvHXdZtcX5J CSVyeFxYVOLbhARY5TFehV5pK6ys6N8dHvfQt4ke37mAe59HJfB0n7iMRdVVkVrU Jcob9Seukbkd8SKRnlAc0YrObZcyw2zhltHanQFSxxj2foQAKQ9P7k+n4dRXuDKA 65UynIC1BeuBjUNDD6Spg/OSeIG0RQE= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:24 2025 by rpki-client