$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa File: e9b31ccf-98da-348c-b41c-4897b4b0a929.roa (raw, json) Hash identifier: dzPJjWHcNjvy07g7zcVZfwTEohfuS9pIaACIrd5R0Ec= Subject key identifier: 62:61:7B:B7:59:F4:F9:31:7C:D5:7A:D8:59:A5:8C:70:A8:2C:8E:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A9900CBBBE8936D278BDA67C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.88.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cb:bb:e8:93:6d:27:8b:da:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=bb1420c4-6e1a-4e29-a537-230e22d493aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:26:b0:6d:fb:6a:2b:1f:9e:c4:41:c7:02: bc:e5:b0:c8:67:12:21:95:7f:e9:db:d8:c8:98:f6: 26:a8:cf:5d:da:f2:9a:4d:ff:3e:68:9d:97:61:ac: ee:92:c6:80:61:a1:76:dd:04:af:d8:ac:7c:36:05: 34:dc:54:4d:70:ea:d9:ed:dc:8e:93:bf:0a:4f:79: d8:82:96:b9:0d:88:94:95:dc:e5:7d:68:03:46:0f: 31:98:11:54:91:08:f4:76:56:f4:5c:5f:5e:f7:8b: a2:68:87:34:f3:89:ab:68:c1:be:77:01:26:69:75: 6a:0b:4c:4f:e8:78:ec:31:18:0c:46:cc:90:b0:5c: 81:09:7e:1e:88:47:ae:30:4d:66:20:20:da:2e:09: af:9d:96:ae:27:e1:44:13:c0:16:ed:51:c8:18:54: 48:09:4c:7f:bd:5b:9a:58:71:f1:3b:4e:4f:11:57: 20:71:58:10:9f:da:3a:d0:68:f3:fa:b5:8f:b4:c3: a3:b7:50:07:f8:e5:55:42:c8:fb:f2:1c:56:96:0b: b7:84:da:74:9b:58:e4:e1:9d:fe:39:bb:6f:ba:04: 52:7a:5b:c1:bc:c0:ce:18:dc:43:d4:52:07:5c:bc: b6:26:88:5f:a8:83:bf:59:21:98:38:d0:a1:22:b9: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:61:7B:B7:59:F4:F9:31:7C:D5:7A:D8:59:A5:8C:70:A8:2C:8E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c4:37:fc:23:30:51:44:32:ae:d8:8f:70:c7:50:ce:ff:dd: 37:ec:d8:d8:43:d2:48:66:52:e0:1c:89:e8:59:57:4c:6f:01: 4f:5e:6b:ac:5c:46:f3:de:94:86:4d:d2:2b:c8:28:1c:8b:8e: 31:0e:d6:57:d0:b9:dc:0c:72:d8:6d:47:fb:c2:20:87:34:1e: 1f:df:a3:10:d5:bb:af:0c:f2:82:38:5f:9a:08:e7:1c:3c:6d: d2:df:69:0f:62:ed:b2:43:23:01:8c:d0:a5:7e:82:aa:7a:f4: ea:6e:99:73:0f:e7:ca:6f:b1:0a:56:ea:fa:f1:06:39:a7:5f: 1f:c1:61:c8:69:69:57:fc:1d:b3:3a:ed:c3:ca:a9:d6:c4:68: c8:ba:9a:be:5a:08:0d:06:b2:7f:a5:55:91:c6:18:2a:4e:45: 2b:89:3b:e5:0a:c1:53:96:1e:27:5b:20:99:fa:d3:08:f0:32: 4c:fd:a3:24:db:93:f5:b2:f9:d0:ba:bc:ee:78:e5:22:8c:40: 71:86:21:ed:a5:ed:03:89:15:6e:47:cb:94:b1:45:77:16:1b: 71:09:57:76:66:70:23:03:24:05:bd:5a:ef:2e:e1:9c:1e:0c: 71:91:2c:37:68:6b:15:90:7e:cf:83:04:2f:7d:52:d8:b4:64: 2e:e6:6d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMu76JNtJ4vaZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YmIxNDIwYzQtNmUxYS00ZTI5LWE1MzctMjMwZTIyZDQ5M2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwImsG37aisfnsRBxwK85bDIZxIhlX/p29jI mPYmqM9d2vKaTf8+aJ2XYazuksaAYaF23QSv2Kx8NgU03FRNcOrZ7dyOk78KT3nY gpa5DYiUldzlfWgDRg8xmBFUkQj0dlb0XF9e94uiaIc084mraMG+dwEmaXVqC0xP 6HjsMRgMRsyQsFyBCX4eiEeuME1mICDaLgmvnZauJ+FEE8AW7VHIGFRICUx/vVua WHHxO05PEVcgcVgQn9o60Gjz+rWPtMOjt1AH+OVVQsj78hxWlgu3hNp0m1jk4Z3+ ObtvugRSelvBvMDOGNxD1FIHXLy2JohfqIO/WSGYONChIrnu9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJhe7dZ9PkxfNV62FmljHCoLI7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTliMzFjY2YtOThkYS0z NDhjLWI0MWMtNDg5N2I0YjBhOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHEN/wjMFFEMq7Yj3DHUM7/3Tfs2NhD0khmUuAciehZV0xvAU9ea6xc RvPelIZN0ivIKByLjjEO1lfQudwMcthtR/vCIIc0Hh/foxDVu68M8oI4X5oI5xw8 bdLfaQ9i7bJDIwGM0KV+gqp69OpumXMP58pvsQpW6vrxBjmnXx/BYchpaVf8HbM6 7cPKqdbEaMi6mr5aCA0Gsn+lVZHGGCpORSuJO+UKwVOWHidbIJn60wjwMkz9oyTb k/Wy+dC6vO545SKMQHGGIe2l7QOJFW5Hy5SxRXcWG3EJV3ZmcCMDJAW9Wu8u4Zwe DHGRLDdoaxWQfs+DBC99Uti0ZC7mbRQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:32 2025 by rpki-client