$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa File: cec08d31-df68-3707-8836-0a81fc4c5ff3.roa (raw, json) Hash identifier: daK8n4+LJNyHU7WYz5dsQkH37pFUfNKuP6/v/OQiiNA= Subject key identifier: 89:5B:C2:09:DE:6E:7D:AC:34:E8:4D:C9:85:63:47:23:E4:82:5F:D6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40552A939C22B9176EB660 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.88.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:2a:93:9c:22:b9:17:6e:b6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=78034a3a-18da-46c6-9988-2fb3b865d6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:72:af:19:4a:ef:83:a7:48:2f:d1:6f:12:7f: d1:6c:4b:8c:44:29:3f:4f:1c:0d:36:ad:40:4a:76: 15:35:f6:3a:87:07:51:d3:11:83:a4:12:bf:d3:29: 4c:d2:67:0b:fb:c5:46:33:be:ed:80:83:eb:7a:f1: 8a:1c:f9:63:20:3f:32:1b:43:b1:fa:48:78:c4:b9: fa:02:cf:23:32:56:ff:22:1f:ac:56:78:fc:d4:2e: 10:cd:c6:db:e5:81:8c:03:5e:41:9e:a5:86:74:b0: ed:41:b3:82:75:56:a6:a4:8a:26:03:67:14:a0:36: 9e:c4:8d:2b:59:0e:8a:57:54:63:57:22:35:28:41: 41:c2:ef:9a:1b:0b:21:bb:00:bc:a8:54:62:3a:4c: 9f:f6:c3:e6:8c:2e:01:41:e7:70:7b:6c:79:00:8f: 0a:e1:c9:ea:94:6a:24:52:35:11:75:6e:e2:1c:73: 30:61:f6:fb:19:d1:9a:be:6b:c5:8c:4d:cd:cd:73: ca:68:26:d1:54:4f:6f:16:d0:58:8b:77:f0:c7:08: 3d:8e:8b:16:8b:4e:ac:39:ea:40:b4:a9:34:0a:46: 5d:18:50:cb:b5:a6:be:46:c1:b3:d0:e0:66:9d:f8: 41:ce:ec:7a:af:db:76:f6:e4:37:c1:84:12:33:fc: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5B:C2:09:DE:6E:7D:AC:34:E8:4D:C9:85:63:47:23:E4:82:5F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:17:aa:b6:75:03:38:e2:c4:58:cf:2b:2b:d9:11:1c:54:58: 37:3b:a7:dd:e3:44:a5:cc:22:1f:62:3b:69:bb:f0:61:a7:be: 97:d8:df:31:4e:28:ff:d5:9a:5a:6d:b3:9f:09:7d:be:0d:ef: 42:b4:a1:58:d9:ac:ea:53:b1:ae:f1:dc:d2:d2:5d:03:aa:b7: 5a:81:de:52:90:5f:19:47:1a:b6:27:aa:2f:00:d7:0e:d7:36: b0:0e:fb:0d:6b:05:ba:d8:2b:7a:2a:64:07:85:0d:1d:7a:0f: 1f:91:45:0f:a7:49:d1:f9:4a:25:d8:cd:01:d4:82:cd:f3:88: 85:7f:27:42:9d:db:73:3d:66:e7:8f:91:63:b0:f3:23:74:02: 63:51:bf:d7:53:95:73:8d:25:c1:18:18:0d:ed:d5:ea:6c:6e: f2:e7:03:0c:e5:22:dc:08:22:62:db:f5:d8:e3:3a:b8:86:32: 93:e4:74:68:6f:a1:09:00:76:16:08:eb:6d:e1:39:3c:9c:12: a2:d1:5b:22:11:cd:40:7c:44:44:c7:7e:6d:69:c3:b0:0b:96: 21:91:8e:91:23:55:da:df:a7:7b:fb:6a:b2:0d:f2:a3:c8:70: 5f:68:32:63:d0:41:94:90:c6:3a:47:cc:67:bd:41:2c:5e:6c: 27:21:79:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFUqk5wiuRdutmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzgwMzRhM2EtMThkYS00NmM2LTk5ODgtMmZiM2I4NjVkNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHKvGUrvg6dIL9FvEn/RbEuMRCk/TxwNNq1A SnYVNfY6hwdR0xGDpBK/0ylM0mcL+8VGM77tgIPrevGKHPljID8yG0Ox+kh4xLn6 As8jMlb/Ih+sVnj81C4Qzcbb5YGMA15BnqWGdLDtQbOCdVampIomA2cUoDaexI0r WQ6KV1RjVyI1KEFBwu+aGwshuwC8qFRiOkyf9sPmjC4BQedwe2x5AI8K4cnqlGok UjURdW7iHHMwYfb7GdGavmvFjE3NzXPKaCbRVE9vFtBYi3fwxwg9josWi06sOepA tKk0CkZdGFDLtaa+RsGz0OBmnfhBzux6r9t29uQ3wYQSM/yFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlbwgnebn2sNOhNyYVjRyPkgl/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VjMDhkMzEtZGY2OC0z NzA3LTg4MzYtMGE4MWZjNGM1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAXqrZ1AzjixFjPKyvZERxUWDc7p93jRKXMIh9iO2m78GGnvpfY3zFO KP/Vmlpts58Jfb4N70K0oVjZrOpTsa7x3NLSXQOqt1qB3lKQXxlHGrYnqi8A1w7X NrAO+w1rBbrYK3oqZAeFDR16Dx+RRQ+nSdH5SiXYzQHUgs3ziIV/J0Kd23M9ZueP kWOw8yN0AmNRv9dTlXONJcEYGA3t1epsbvLnAwzlItwIImLb9djjOriGMpPkdGhv oQkAdhYI623hOTycEqLRWyIRzUB8RETHfm1pw7ALliGRjpEjVdrfp3v7arIN8qPI cF9oMmPQQZSQxjpHzGe9QSxebCcheRo= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:06 2025 by rpki-client