$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa File: d99a7803-6985-3933-9ff5-a5ce01a6780f.roa (raw, json) Hash identifier: Fw8p9TassWtf0sFvuZESk4CA3pP59OMrAoOx9e5tG+U= Subject key identifier: 73:6B:D4:C9:53:E7:70:E4:16:96:AB:56:F4:15:DA:C9:2D:60:1B:F9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404C9098CC2C627DED4B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.117.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:90:98:cc:2c:62:7d:ed:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=9ba8c2f3-c8f8-417e-874c-126ace73f132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:2e:a3:fb:02:e7:0c:ec:61:56:62:2c:6b: f7:8a:7a:49:a9:e3:5c:1a:df:2b:5b:ed:02:b9:22: 31:78:cb:bf:77:4b:cd:c5:db:03:b7:16:7f:4b:4f: c9:43:15:32:ca:35:3a:fa:2f:9f:3b:16:67:f2:80: 03:dc:78:51:1c:ca:58:58:75:4c:8d:a7:2d:1c:ed: 08:18:61:2c:41:78:67:d9:88:fe:64:d8:9a:4f:09: 75:7b:cb:af:40:e5:cf:dc:29:14:6e:69:ef:5e:64: d8:0d:00:3d:40:28:ed:63:32:b2:06:07:f7:c7:9b: db:75:8e:f1:cd:11:69:db:5c:1e:1d:80:a9:43:62: 7e:7f:fc:92:01:63:00:7c:9b:ce:a1:aa:1f:24:62: f2:ea:3d:98:d1:ef:7d:72:58:a5:00:0e:8c:2b:12: aa:f9:ac:67:af:62:b7:8b:e1:74:a2:45:07:da:b0: bd:45:2b:3a:97:d8:b3:4a:95:bd:2c:ab:ca:b4:35: e5:fb:53:b1:eb:0b:e6:74:2a:b8:fc:bf:7b:5b:8b: cc:b5:8a:a2:7d:01:b7:45:2a:1e:33:fe:43:59:36: 11:07:17:12:55:99:89:85:e0:fb:64:b3:9d:c2:2a: 7c:8c:92:3a:2c:e6:2f:57:b3:1b:f4:3b:7c:a5:b9: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6B:D4:C9:53:E7:70:E4:16:96:AB:56:F4:15:DA:C9:2D:60:1B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:aa:44:c6:15:2c:23:e5:cc:d1:9f:83:32:f2:2a:da:ab:30: d9:a3:49:4a:58:e7:f8:e9:a5:2d:cb:f0:4b:3b:19:65:37:51: 2d:85:bc:b2:f0:01:71:df:1f:3a:3e:6e:f7:7a:3b:86:06:5d: 6f:fe:04:5e:ea:1e:7d:28:5c:2e:31:02:bd:0c:2f:78:d3:87: 5a:e3:1e:8d:97:0c:a6:cd:66:1b:64:d7:45:d3:5f:98:9c:31: c8:ca:13:08:8a:91:11:93:76:90:84:58:91:a0:27:f0:6d:15: c9:ae:bc:6e:41:cf:04:c4:6a:a5:2e:24:76:c5:9a:56:98:f4: 3b:4b:c4:ca:40:fd:0a:65:45:14:04:53:c1:de:9a:4e:0b:39: 50:6b:20:13:bf:d7:d4:d1:14:30:aa:2b:24:ab:dd:e6:65:1a: 85:ec:ee:04:f2:ce:32:2b:56:66:0b:6c:22:7c:2b:28:9c:44: 61:9c:46:cb:4f:2e:99:de:74:6b:b1:30:27:67:22:3f:20:52: 30:0c:79:e8:e9:15:71:09:ea:64:07:f7:fb:70:98:45:f1:8d: f2:52:d3:1a:3d:3f:fc:0b:54:b5:73:1c:7f:00:58:df:ae:2c: eb:c7:ce:1e:96:01:e2:1c:2a:11:62:21:54:cb:01:41:76:f0: 1f:fe:99:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEyQmMwsYn3tS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk OWJhOGMyZjMtYzhmOC00MTdlLTg3NGMtMTI2YWNlNzNmMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD4uo/sC5wzsYVZiLGv3inpJqeNcGt8rW+0C uSIxeMu/d0vNxdsDtxZ/S0/JQxUyyjU6+i+fOxZn8oAD3HhRHMpYWHVMjactHO0I GGEsQXhn2Yj+ZNiaTwl1e8uvQOXP3CkUbmnvXmTYDQA9QCjtYzKyBgf3x5vbdY7x zRFp21weHYCpQ2J+f/ySAWMAfJvOoaofJGLy6j2Y0e99clilAA6MKxKq+axnr2K3 i+F0okUH2rC9RSs6l9izSpW9LKvKtDXl+1Ox6wvmdCq4/L97W4vMtYqifQG3RSoe M/5DWTYRBxcSVZmJheD7ZLOdwip8jJI6LOYvV7Mb9Dt8pbmJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNr1MlT53DkFparVvQV2sktYBv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk5YTc4MDMtNjk4NS0z OTMzLTlmZjUtYTVjZTAxYTY3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3WCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGqRMYVLCPlzNGfgzLyKtqrMNmjSUpY5/jppS3L8Es7GWU3US2FvLLw AXHfHzo+bvd6O4YGXW/+BF7qHn0oXC4xAr0ML3jTh1rjHo2XDKbNZhtk10XTX5ic McjKEwiKkRGTdpCEWJGgJ/BtFcmuvG5BzwTEaqUuJHbFmlaY9DtLxMpA/QplRRQE U8Hemk4LOVBrIBO/19TRFDCqKySr3eZlGoXs7gTyzjIrVmYLbCJ8KyicRGGcRstP LpnedGuxMCdnIj8gUjAMeejpFXEJ6mQH9/twmEXxjfJS0xo9P/wLVLVzHH8AWN+u LOvHzh6WAeIcKhFiIVTLAUF28B/+meQ= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:50 2025 by rpki-client