$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa File: d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa (raw, json) Hash identifier: H/adfD95Tl4YWsjvFZ2kNeTFipnUvv0czzH7Ksi488U= Subject key identifier: CA:8F:9A:22:9A:BA:B3:7E:77:2D:FE:96:66:94:CC:94:C9:CB:ED:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B562EFD7F61851248B480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 75.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:56:2e:fd:7f:61:85:12:48:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=3136583e-944f-4a7d-b6fb-b95acaed4101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:57:1d:b5:6d:57:f7:ed:1a:a0:4a:0e:74:fd: ea:ba:e1:90:34:03:1f:ae:7e:71:5d:88:cf:a1:24: 9a:d6:56:61:13:b2:a6:e6:03:b3:ce:0a:dc:b2:a9: a5:65:5b:68:24:44:f1:71:08:6e:b0:70:86:61:49: a7:5c:72:a0:fa:fc:dc:37:7d:c5:ad:0b:c4:9d:3c: 88:83:e9:b1:b6:b2:26:c4:78:6a:df:22:a8:79:9d: 8c:bc:b6:d6:f2:d3:22:06:dd:9a:d5:e8:ea:fd:4b: e4:01:63:05:e9:54:42:5e:cc:4b:fd:fd:7c:f7:92: 2f:b6:de:f9:3b:97:0d:e5:32:75:f4:af:6f:7c:1c: 09:a5:73:4f:80:48:6b:26:ce:89:5e:b4:00:c0:7f: 3b:e8:52:58:7b:b5:92:cf:60:95:75:ca:9c:97:36: e8:92:8f:25:a7:df:9f:6a:f1:93:6c:29:3b:e6:f2: a9:af:bc:98:5e:76:17:bc:a6:95:67:63:2c:dd:68: 15:43:1b:11:e3:c2:e8:38:fd:8f:ce:da:b8:03:5f: 2b:99:cf:19:fa:e6:3a:d1:05:22:88:c3:88:a5:98: 9d:01:cb:bd:5f:fe:3f:1f:60:72:f8:ab:eb:7a:0c: 65:0d:99:c1:2f:cd:c2:ac:6a:e8:79:d0:31:45:c8: 20:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8F:9A:22:9A:BA:B3:7E:77:2D:FE:96:66:94:CC:94:C9:CB:ED:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6d:bc:31:e6:cb:71:b1:b2:48:2f:59:2d:49:36:48:d2:a6: 57:77:bb:8e:af:2c:ad:88:22:60:ff:61:9e:aa:05:c0:1d:fe: 9b:26:c2:86:52:c6:96:cc:aa:f7:bd:16:72:11:d3:6e:52:86: 06:d2:ae:b9:02:28:4f:2b:ee:04:df:67:da:b7:75:1c:86:ff: 83:49:a9:c9:82:be:94:16:44:38:50:d3:2e:0b:ee:7f:07:a0: 86:9b:f7:21:38:78:fc:be:e5:49:dc:bf:f5:e7:8a:f6:41:b1: 98:2f:ae:13:d3:34:bc:8d:7e:c6:d3:16:d1:8b:0c:60:15:e9: cb:9f:74:cf:04:48:ed:3e:79:be:5e:f7:b7:12:7c:9b:fe:6f: ce:32:e4:6c:96:cc:a1:d3:4b:1a:f9:a6:7d:4a:42:c1:e9:f8: aa:29:a9:89:d6:11:af:70:4f:44:de:b4:19:92:12:50:86:1c: 7e:da:21:3d:5b:d0:0e:0e:f4:f7:33:d9:a6:bb:d5:e6:35:c7: 13:76:95:bc:e7:6f:63:27:43:a2:0e:74:ea:8d:f2:66:2a:8b: 1a:88:22:5e:5e:56:fc:7e:b4:4f:80:dd:4f:53:1c:0c:16:0e: 21:0e:af:53:aa:55:7f:38:23:10:ca:1d:e9:8c:a0:51:56:cf: d9:6c:cd:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC1Yu/X9hhRJItIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk MzEzNjU4M2UtOTQ0Zi00YTdkLWI2ZmItYjk1YWNhZWQ0MTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1cdtW1X9+0aoEoOdP3quuGQNAMfrn5xXYjP oSSa1lZhE7Km5gOzzgrcsqmlZVtoJETxcQhusHCGYUmnXHKg+vzcN33FrQvEnTyI g+mxtrImxHhq3yKoeZ2MvLbW8tMiBt2a1ejq/UvkAWMF6VRCXsxL/f1895Ivtt75 O5cN5TJ19K9vfBwJpXNPgEhrJs6JXrQAwH876FJYe7WSz2CVdcqclzboko8lp9+f avGTbCk75vKpr7yYXnYXvKaVZ2Ms3WgVQxsR48LoOP2Pztq4A18rmc8Z+uY60QUi iMOIpZidAcu9X/4/H2By+KvregxlDZnBL83CrGroedAxRcgg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqPmiKaurN+dy3+lmaUzJTJy+1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgxYTFhMmYtZDFkZC0z NzIwLWI1YTQtYjc2ZDM1YzUwNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENtvDHmy3GxskgvWS1JNkjSpld3u46vLK2IImD/YZ6qBcAd/psmwoZS xpbMqve9FnIR025ShgbSrrkCKE8r7gTfZ9q3dRyG/4NJqcmCvpQWRDhQ0y4L7n8H oIab9yE4ePy+5Uncv/XnivZBsZgvrhPTNLyNfsbTFtGLDGAV6cufdM8ESO0+eb5e 97cSfJv+b84y5GyWzKHTSxr5pn1KQsHp+KopqYnWEa9wT0TetBmSElCGHH7aIT1b 0A4O9Pcz2aa71eY1xxN2lbznb2MnQ6IOdOqN8mYqixqIIl5eVvx+tE+A3U9THAwW DiEOr1OqVX84IxDKHemMoFFWz9lsza0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:20:34 2025 by rpki-client