$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa File: fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa (raw, json) Hash identifier: ip+1Adh75oKpcCqccTCEsn5lSrC94RewKBR6lSjOlWs= Subject key identifier: 5A:4B:11:4B:56:28:02:4D:83:9C:CD:7B:46:7C:E9:7E:9F:7F:05:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40548A2483613E52723080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.89.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:54:8a:24:83:61:3e:52:72:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=16a623cb-d465-4c2b-b8e6-4127abca4ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:c7:42:8a:fa:cb:cf:6d:a8:4d:6b:95:36: c7:39:59:73:36:62:a6:4d:57:a3:f1:99:2d:da:da: e6:a3:fb:86:f4:e3:0a:12:5a:19:69:84:56:cf:fc: 4b:47:29:2b:f1:2c:f2:f4:b4:c4:5b:ba:57:5d:c3: da:eb:61:99:b8:9c:33:ea:d8:29:46:05:42:2b:7c: 8a:5b:b2:9a:23:4e:f2:cd:84:1d:45:bb:a6:59:9d: 63:86:c1:1c:8c:d5:2c:db:45:81:48:96:19:51:97: 29:bd:c0:7f:14:31:da:4e:7d:38:6a:72:ce:71:a4: b1:39:ad:44:2a:78:00:eb:00:02:87:91:30:11:29: 1e:96:01:ff:32:3c:c2:62:db:50:da:28:1a:ef:91: e3:09:80:de:f2:27:92:f3:2f:fc:97:c2:6e:e0:74: 8d:6e:79:8d:d8:50:83:dd:fe:96:cc:1f:21:3b:68: 05:cb:1b:41:00:6d:69:20:03:80:a0:03:30:17:84: 5d:2f:65:d3:40:33:27:89:dd:fb:35:6d:1d:f6:eb: 49:78:40:c6:82:56:ac:cf:a0:e0:88:61:ee:82:47: 52:83:fc:7d:85:23:dd:61:7e:48:41:b3:12:ce:d5: 7f:86:99:9c:0d:23:a9:13:7a:e7:e2:03:61:5c:da: f4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4B:11:4B:56:28:02:4D:83:9C:CD:7B:46:7C:E9:7E:9F:7F:05:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb7f1a3d-65fe-3210-8199-7feeee6a7056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ff:92:0e:c2:b8:90:6b:5f:51:e6:a0:94:f1:8b:e3:19:41: c7:61:7f:e1:f5:83:da:50:ba:f9:0f:2c:b6:ab:55:43:93:69: 19:cb:2b:b3:15:b1:8d:b6:fe:17:b3:5c:0e:de:cd:ec:fc:65: 5c:4d:e4:12:49:38:de:be:02:60:5e:63:87:3c:d2:23:3f:cc: f9:b3:e0:6f:f7:ee:53:1a:54:d6:e6:1c:b5:2d:a0:78:c0:c1: 7c:10:f8:f2:87:9f:e2:32:5b:9e:34:ef:b2:69:3c:87:72:78: a7:24:48:b4:f8:6e:b6:bb:21:a2:41:d3:b4:a6:3c:40:72:11: f2:4a:96:9d:ed:6d:ac:b1:3d:ae:a5:c2:da:93:cd:65:98:40: d0:94:b3:dc:46:85:69:d0:bb:d4:53:2c:f8:2d:f1:bd:4c:2f: b7:90:28:0a:3d:e0:4b:06:9f:a3:39:b9:36:65:b8:99:69:2a: 3e:0c:17:44:fc:cd:38:2b:9b:e3:1f:ce:0f:7f:9b:be:c9:bc: 67:d3:fa:49:c0:b4:36:41:2f:f8:9f:b5:81:86:b3:10:d0:b5: bb:88:40:66:fc:c1:f9:00:8f:09:69:e8:79:8f:da:83:1e:27: 5c:30:b1:e6:79:a0:d2:ba:70:aa:2c:51:8c:13:f1:51:3d:6f: c9:57:12:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFSKJINhPlJyMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MTZhNjIzY2ItZDQ2NS00YzJiLWI4ZTYtNDEyN2FiY2E0ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiafHQor6y89tqE1rlTbHOVlzNmKmTVej8Zkt 2trmo/uG9OMKEloZaYRWz/xLRykr8Szy9LTEW7pXXcPa62GZuJwz6tgpRgVCK3yK W7KaI07yzYQdRbumWZ1jhsEcjNUs20WBSJYZUZcpvcB/FDHaTn04anLOcaSxOa1E KngA6wACh5EwESkelgH/MjzCYttQ2iga75HjCYDe8ieS8y/8l8Ju4HSNbnmN2FCD 3f6WzB8hO2gFyxtBAG1pIAOAoAMwF4RdL2XTQDMnid37NW0d9utJeEDGglasz6Dg iGHugkdSg/x9hSPdYX5IQbMSztV/hpmcDSOpE3rn4gNhXNr0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpLEUtWKAJNg5zNe0Z86X6ffwUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI3ZjFhM2QtNjVmZS0z MjEwLTgxOTktN2ZlZWVlNmE3MDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1muMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn/kg7CuJBrX1HmoJTxi+MZQcdhf+H1g9pQuvkPLLarVUOTaRnLK7MV sY22/hezXA7ezez8ZVxN5BJJON6+AmBeY4c80iM/zPmz4G/37lMaVNbmHLUtoHjA wXwQ+PKHn+IyW54077JpPIdyeKckSLT4bra7IaJB07SmPEByEfJKlp3tbayxPa6l wtqTzWWYQNCUs9xGhWnQu9RTLPgt8b1ML7eQKAo94EsGn6M5uTZluJlpKj4MF0T8 zTgrm+Mfzg9/m77JvGfT+knAtDZBL/iftYGGsxDQtbuIQGb8wfkAjwlp6HmP2oMe J1wwseZ5oNK6cKosUYwT8VE9b8lXEmY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:58:53 2025 by rpki-client