$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa File: de52a646-8150-3baa-964a-af38db1002f1.roa (raw, json) Hash identifier: Q5+4z9XvMmg4n71puZmQzx4a7L9OLSXO4UP6gXDEgSM= Subject key identifier: 43:E5:9D:6C:6B:7D:E5:D4:5D:A2:4A:48:F6:AB:5F:EB:6F:C4:C0:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B16A15CBABDB01C4FFD834800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 75.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5c:ba:bd:b0:1c:4f:fd:83:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=82fc8377-3978-4bd8-a1d5-d31cbe879c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:c9:2e:e4:f7:d9:5c:89:31:bc:86:fe:4a: b5:e2:12:32:68:72:2f:8b:83:24:10:6e:83:c3:e5: 9d:dd:0c:dd:4d:00:28:5e:66:e6:1f:d9:99:c0:aa: de:65:76:77:ee:07:d3:4b:bf:8c:4a:4a:26:05:b2: b2:16:a6:66:a9:bb:38:f9:76:89:7d:a3:07:c8:e1: 1c:64:19:f1:d4:59:ef:a5:e7:9f:dd:02:c0:2b:6e: b6:25:3c:df:84:4f:a5:f0:13:b0:1a:50:0c:dd:b9: 7b:28:a8:b4:75:6b:b9:7e:40:f3:88:14:5c:1b:76: 0f:93:5c:7c:bc:22:eb:73:ba:fc:8f:20:3b:f5:cf: f7:6c:d2:dc:43:5d:c0:05:e5:f1:eb:f7:07:fa:12: be:1a:50:5a:e0:88:7e:91:89:6b:3e:67:94:7c:8f: 6a:5f:ea:69:ec:c7:93:e3:70:53:e3:fd:77:fa:c4: 7b:f9:03:48:e0:da:50:b9:63:17:96:23:f7:29:21: 5c:8a:65:1a:f0:5b:48:14:0b:33:f8:7e:da:db:37: 8b:7f:f0:41:f2:78:94:21:a9:5d:e0:66:35:85:f4: 65:74:e3:c3:b7:8b:fc:57:3f:fc:da:98:d7:e4:7b: c7:2c:6d:88:98:87:10:08:b0:a7:b7:04:65:c9:18: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E5:9D:6C:6B:7D:E5:D4:5D:A2:4A:48:F6:AB:5F:EB:6F:C4:C0:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c8:23:51:ed:ef:64:7d:db:09:4f:3b:db:48:c7:3c:2d:5b: 97:d9:18:7c:d2:ff:18:7e:56:a1:60:f9:78:f9:ca:c4:46:f3: 79:0e:19:b3:3c:7b:6a:ed:fa:a3:50:74:a1:30:83:17:7c:d9: 3a:c5:01:d2:04:40:96:16:c4:ed:0d:fe:c1:c0:c4:46:c0:f7: 7f:03:42:d4:6d:39:a2:5f:f8:30:d9:a9:a0:d4:15:62:fb:ef: e9:3b:9b:a1:e5:68:0a:73:34:49:05:f6:01:a5:47:d5:ed:ba: dc:95:a5:ee:ab:25:5c:89:ea:90:cf:5a:96:f7:ca:57:b7:e8: 4a:5c:ed:f4:a2:ea:ac:58:56:77:69:d8:17:4f:87:b9:25:ea: fd:04:30:ec:40:06:d1:a0:c7:a6:44:81:cf:28:93:47:60:72: 8c:f1:14:9a:80:5c:c9:8b:ab:1f:ce:13:9e:b7:e5:f1:96:bd: af:e0:53:b9:2a:f2:a9:17:e0:11:cb:5d:72:43:ad:43:d0:80: 78:07:ea:78:84:60:f2:56:23:c9:0d:14:92:3f:d7:df:0d:89: 2f:a8:25:bf:8f:f8:c1:41:37:a8:aa:7b:04:d1:7c:54:1d:ac: d3:e0:97:d5:42:db:eb:6a:18:f6:b1:ef:7f:ff:f5:f5:1e:df: e5:8f:26:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVy6vbAcT/2DSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ODJmYzgzNzctMzk3OC00YmQ4LWExZDUtZDMxY2JlODc5YzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnvJLuT32VyJMbyG/kq14hIyaHIvi4MkEG6D w+Wd3QzdTQAoXmbmH9mZwKreZXZ37gfTS7+MSkomBbKyFqZmqbs4+XaJfaMHyOEc ZBnx1Fnvpeef3QLAK262JTzfhE+l8BOwGlAM3bl7KKi0dWu5fkDziBRcG3YPk1x8 vCLrc7r8jyA79c/3bNLcQ13ABeXx6/cH+hK+GlBa4Ih+kYlrPmeUfI9qX+pp7MeT 43BT4/13+sR7+QNI4NpQuWMXliP3KSFcimUa8FtIFAsz+H7a2zeLf/BB8niUIald 4GY1hfRldOPDt4v8Vz/82pjX5HvHLG2ImIcQCLCntwRlyRilFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPlnWxrfeXUXaJKSParX+tvxMChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU1MmE2NDYtODE1MC0z YmFhLTk2NGEtYWYzOGRiMTAwMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES3WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXII1Ht72R92wlPO9tIxzwtW5fZGHzS/xh+VqFg+Xj5ysRG83kOGbM8 e2rt+qNQdKEwgxd82TrFAdIEQJYWxO0N/sHAxEbA938DQtRtOaJf+DDZqaDUFWL7 7+k7m6HlaApzNEkF9gGlR9XtutyVpe6rJVyJ6pDPWpb3yle36Epc7fSi6qxYVndp 2BdPh7kl6v0EMOxABtGgx6ZEgc8ok0dgcozxFJqAXMmLqx/OE5635fGWva/gU7kq 8qkX4BHLXXJDrUPQgHgH6niEYPJWI8kNFJI/198NiS+oJb+P+MFBN6iqewTRfFQd rNPgl9VC2+tqGPax73//9fUe3+WPJlI= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:08 2025 by rpki-client