$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12800354-1bf7-3dda-85b0-ba75faca4e23.roa File: 12800354-1bf7-3dda-85b0-ba75faca4e23.roa (raw, json) Hash identifier: vKY5SEoAls6vzkQhXVATytpqrVoVcXSj7CdlVCpS730= Subject key identifier: 5F:F6:17:93:16:49:7A:C0:F5:76:75:03:64:64:B4:96:19:34:A0:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B75D9CD161B9C307973A63FB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12800354-1bf7-3dda-85b0-ba75faca4e23.roa Signing time: Thu 09 Oct 2025 03:36:07 +0000 ROA not before: Thu 09 Oct 2025 03:36:07 +0000 ROA not after: Wed 07 Jan 2026 04:36:07 +0000 asID: 7029 IP address blocks: 75.89.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:d9:cd:16:1b:9c:30:79:73:a6:3f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 9 03:36:07 2025 GMT Not After : Jan 7 04:36:07 2026 GMT Subject: CN=d83def31-2a70-48ea-9bfd-254481f66565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:b2:16:df:f3:20:9c:8d:74:66:b4:67:c1: f3:5f:1d:a6:85:c0:ee:78:34:9f:39:9c:7e:eb:c2: 78:c0:98:62:7f:07:aa:27:88:f0:38:73:d6:c4:52: c7:2d:89:43:82:3e:6e:7d:21:e4:22:3f:04:09:e4: e4:0a:79:7a:78:c2:c5:b5:a1:54:b2:9b:ab:cf:9d: ee:cd:df:a8:93:6c:bd:b2:aa:62:f2:ce:0a:48:c4: 5c:bd:59:3b:dc:75:f8:2e:3e:17:97:38:62:55:59: 5f:d3:2d:5c:87:bb:3b:79:e5:2e:78:c3:46:d9:78: 48:9c:e9:f8:b2:0f:2b:a8:cd:f7:c1:32:27:7e:68: d0:22:34:e7:5b:b7:31:ad:1b:31:81:6b:86:e2:89: f7:7a:c7:3b:01:a4:a4:3b:48:99:c2:80:42:c6:d9: 81:da:2c:10:fb:95:62:58:41:15:82:bd:b0:b8:12: 24:40:6b:c2:81:57:59:8b:ce:2d:9a:68:47:a8:51: 25:e4:94:20:17:82:16:f7:3e:b1:a0:28:fd:1f:44: c4:70:75:07:b7:c2:df:29:f5:c7:c7:db:14:ce:30: 55:d6:31:e9:a3:b5:bf:e7:45:be:6a:a6:ea:68:9e: 95:51:78:49:47:93:93:af:bd:26:dd:89:0c:c5:c7: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F6:17:93:16:49:7A:C0:F5:76:75:03:64:64:B4:96:19:34:A0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12800354-1bf7-3dda-85b0-ba75faca4e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:db:8c:12:17:ac:40:50:53:fa:2c:70:4e:6b:88:b9:e9:62: 63:39:7e:54:1e:06:5f:3e:81:29:a3:ba:e8:74:50:1d:4e:a1: 5c:8a:33:a0:b2:d6:34:cc:01:b7:b8:7d:f1:31:f1:bd:f3:5e: 2a:8e:14:ff:aa:8b:16:d8:4c:cb:2a:92:59:f8:05:ea:22:3f: 43:bb:29:9b:6a:e7:f0:71:88:5e:e6:f4:cb:cc:0e:b0:b7:7a: f7:55:c3:19:2b:87:f2:51:7b:95:2b:fc:c1:3d:85:5c:bf:01: ee:fd:9e:ef:38:49:71:4f:20:14:e4:d0:7f:ba:58:7d:ff:03: d4:30:a2:ab:e0:90:eb:e7:7c:08:62:24:23:7e:86:69:c2:46: 20:2d:a2:cb:8b:7c:3f:22:db:c2:d2:5b:7d:c1:d9:1d:93:b1: 25:2b:17:34:a1:22:c9:79:cc:ce:81:c8:53:90:8a:04:0d:62: 34:3e:4c:86:c8:bc:92:74:17:44:a9:e7:c6:a8:c0:ba:84:7f: e4:7d:0d:ca:27:d4:d1:d1:98:d4:ff:6b:f6:40:5b:59:70:fc: 1f:c1:3d:c7:91:26:22:1a:ad:a2:87:ce:3c:ca:34:59:55:3d: 6e:a4:e5:ef:f3:4d:6a:fd:eb:d3:4e:16:75:d9:d2:ca:c1:49: ee:6a:36:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt12c0WG5wweXOmP7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwOTAzMzYwN1oXDTI2MDEwNzA0MzYwN1owLzEtMCsGA1UEAxMk ZDgzZGVmMzEtMmE3MC00OGVhLTliZmQtMjU0NDgxZjY2NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MmyFt/zIJyNdGa0Z8HzXx2mhcDueDSfOZx+ 68J4wJhifweqJ4jwOHPWxFLHLYlDgj5ufSHkIj8ECeTkCnl6eMLFtaFUspurz53u zd+ok2y9sqpi8s4KSMRcvVk73HX4Lj4XlzhiVVlf0y1ch7s7eeUueMNG2XhInOn4 sg8rqM33wTInfmjQIjTnW7cxrRsxgWuG4on3esc7AaSkO0iZwoBCxtmB2iwQ+5Vi WEEVgr2wuBIkQGvCgVdZi84tmmhHqFEl5JQgF4IW9z6xoCj9H0TEcHUHt8LfKfXH x9sUzjBV1jHpo7W/50W+aqbqaJ6VUXhJR5OTr70m3YkMxcdBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/2F5MWSXrA9XZ1A2RktJYZNKCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTI4MDAzNTQtMWJmNy0z ZGRhLTg1YjAtYmE3NWZhY2E0ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDbjBIXrEBQU/oscE5riLnpYmM5flQeBl8+gSmjuuh0UB1OoVyKM6Cy 1jTMAbe4ffEx8b3zXiqOFP+qixbYTMsqkln4BeoiP0O7KZtq5/BxiF7m9MvMDrC3 evdVwxkrh/JRe5Ur/ME9hVy/Ae79nu84SXFPIBTk0H+6WH3/A9QwoqvgkOvnfAhi JCN+hmnCRiAtosuLfD8i28LSW33B2R2TsSUrFzShIsl5zM6ByFOQigQNYjQ+TIbI vJJ0F0Sp58aowLqEf+R9Dcon1NHRmNT/a/ZAW1lw/B/BPceRJiIaraKHzjzKNFlV PW6k5e/zTWr969NOFnXZ0srBSe5qNmg= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:29 2025 by rpki-client