$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073c75d-5101-3c29-98ae-450be1b47ec4.roa File: e073c75d-5101-3c29-98ae-450be1b47ec4.roa (raw, json) Hash identifier: HyQAIndqsD5CwHQrA7oniFwm3hloHyTvXp4owN91rr4= Subject key identifier: 38:38:43:A1:0E:5C:51:CB:38:AD:68:C5:3C:05:4B:34:7D:D9:65:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8C70D3B99587288A00912100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073c75d-5101-3c29-98ae-450be1b47ec4.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7029 IP address blocks: 75.88.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d3:b9:95:87:28:8a:00:91:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=5f4c53bc-0249-4076-aaaf-9b6d6088d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:79:90:39:5e:f0:38:7c:e9:90:a8:49:24: c1:b1:31:1a:79:13:cd:4f:6b:d7:12:52:ec:b6:40: 15:28:a3:ed:1f:7b:10:e9:e2:64:9e:73:66:47:e3: 55:2c:32:05:7d:91:5e:bc:e7:de:0b:8f:09:58:2d: 25:b6:b8:e1:b1:a6:a9:75:1a:d2:23:6f:af:24:4c: bd:0f:a7:34:b3:96:55:7b:fe:af:5b:10:03:e1:73: 7b:d6:21:74:8f:43:98:ad:78:18:7d:26:94:63:e4: 62:4f:5d:58:f9:06:41:6c:aa:72:8c:cb:08:40:bf: b4:d3:df:41:19:3a:b6:79:15:6b:83:05:a2:da:53: 28:29:1a:e8:e0:12:b6:fd:73:0d:b8:40:13:6b:0e: fd:cc:cc:3e:a2:07:38:14:16:3c:c6:e8:de:15:31: f1:47:b3:6e:5c:4e:0d:02:ea:d8:d3:41:cb:af:b9: 64:a8:c7:f9:0a:9c:6b:74:0e:0a:4d:c8:d5:3a:10: f3:5c:05:50:f3:36:fb:e3:47:11:2e:4d:5b:46:5e: c3:fc:73:08:37:74:b5:96:96:37:52:27:47:02:6e: 69:d3:92:aa:e2:9f:5a:86:f9:78:42:91:4f:ea:4e: 83:a2:a6:e6:b5:38:18:fc:a5:18:fe:3b:cd:be:7a: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:38:43:A1:0E:5C:51:CB:38:AD:68:C5:3C:05:4B:34:7D:D9:65:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073c75d-5101-3c29-98ae-450be1b47ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:29:7e:4b:36:04:07:74:83:e9:97:57:c8:aa:98:ee:c5: ac:77:62:a9:b0:d9:72:d6:59:ae:f2:a5:91:2f:2b:f2:33:d6: e8:9d:6b:9a:fd:b3:d8:c1:4d:c9:b4:cd:cb:14:5c:0a:e3:7a: bb:f7:b9:17:fc:c7:a1:4c:fc:1a:05:33:74:a4:31:bf:bc:c4: d5:2d:4e:4a:a5:38:2c:60:1c:96:64:94:01:ca:b8:8c:28:8e: 23:77:14:30:b0:39:4e:0e:35:b7:c8:47:16:b3:78:e4:5a:9d: a7:73:0b:be:d7:8a:f6:1e:af:4f:8d:e5:4d:43:ab:fd:7d:d7: 1e:ac:46:ad:21:82:85:b4:76:7a:fd:dd:51:2e:23:e2:39:79: 1c:bb:36:8b:82:52:a3:60:58:ab:f4:89:09:b6:d2:8c:f2:68: 34:ba:99:bc:21:55:97:95:4a:45:70:bb:5f:b1:24:4f:1e:a8: 93:e9:f0:c9:27:de:ad:f6:09:39:f4:06:fa:89:7c:5e:b3:68: a5:88:53:2a:d3:0c:75:27:3a:a9:e2:ef:b9:8d:cf:1b:68:ca: fd:ed:7d:f4:07:0a:66:8a:02:15:68:92:ac:2f:ab:d7:6f:5d: ab:09:3c:83:7e:33:dd:a9:d2:3b:e4:fe:ff:52:91:de:8b:48: 45:42:f9:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNO5lYcoigCRIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk NWY0YzUzYmMtMDI0OS00MDc2LWFhYWYtOWI2ZDYwODhkMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA95kDle8Dh86ZCoSSTBsTEaeRPNT2vXElLs tkAVKKPtH3sQ6eJknnNmR+NVLDIFfZFevOfeC48JWC0ltrjhsaapdRrSI2+vJEy9 D6c0s5ZVe/6vWxAD4XN71iF0j0OYrXgYfSaUY+RiT11Y+QZBbKpyjMsIQL+0099B GTq2eRVrgwWi2lMoKRro4BK2/XMNuEATaw79zMw+ogc4FBY8xujeFTHxR7NuXE4N AurY00HLr7lkqMf5CpxrdA4KTcjVOhDzXAVQ8zb740cRLk1bRl7D/HMIN3S1lpY3 UidHAm5p05Kq4p9ahvl4QpFP6k6DoqbmtTgY/KUY/jvNvnoDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg4Q6EOXFHLOK1oxTwFSzR92WVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTA3M2M3NWQtNTEwMS0z YzI5LTk4YWUtNDUwYmUxYjQ3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1j0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaVKX5LNgQHdIPpl1fIqpjuxax3Yqmw2XLWWa7ypZEvK/Iz1uida5r9 s9jBTcm0zcsUXArjerv3uRf8x6FM/BoFM3SkMb+8xNUtTkqlOCxgHJZklAHKuIwo jiN3FDCwOU4ONbfIRxazeORanadzC77XivYer0+N5U1Dq/191x6sRq0hgoW0dnr9 3VEuI+I5eRy7NouCUqNgWKv0iQm20ozyaDS6mbwhVZeVSkVwu1+xJE8eqJPp8Mkn 3q32CTn0BvqJfF6zaKWIUyrTDHUnOqni77mNzxtoyv3tffQHCmaKAhVokqwvq9dv XasJPIN+M92p0jvk/v9Skd6LSEVC+cY= -----END CERTIFICATE-----Generated at Wed Aug 6 12:34:59 2025 by rpki-client