$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa File: a96851a4-7472-3b88-acd3-ca0735351b67.roa (raw, json) Hash identifier: r5lcPRV+DJ02CCTPlbRd6kh6e3HIC1HfBelWKQmNSqg= Subject key identifier: 7D:6B:67:C8:26:7F:9B:2A:2D:37:91:6E:8D:8A:A8:E4:7E:F5:D4:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC746045842856CB13BEBEB Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 75.117.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:46:04:58:42:85:6c:b1:3b:eb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=80b961d8-21f3-4876-b9e6-06ce8404b01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:b6:b6:47:15:3e:b1:1f:2b:ce:96:12:63: aa:46:ec:64:25:9b:60:ec:8a:7f:41:79:55:67:a7: c9:81:a3:08:43:27:94:1f:69:a5:bd:4f:5c:71:e9: 4e:38:64:e1:b1:14:34:f4:32:ac:01:ce:b1:c0:92: 66:15:de:17:d2:6f:8a:b9:25:59:92:da:cc:ee:f3: 5f:e5:91:d2:8e:be:26:2d:60:ae:fb:3d:03:54:ae: 33:c5:90:d5:31:62:23:96:e5:cb:07:b3:b1:5e:5e: 59:2a:4c:60:f4:eb:36:fd:d1:67:05:01:b4:c4:a7: 00:20:7d:5b:b5:7d:5c:a3:f0:d5:a4:48:ef:ea:ab: cd:e4:df:00:ad:fa:2f:6d:ca:3e:f3:d2:da:6d:fb: 64:66:b2:d0:e0:87:e6:58:8f:35:37:9d:d3:bd:11: 49:3c:3a:45:9f:e3:d6:a9:12:67:50:14:cf:5a:50: 3b:7d:7f:88:07:39:56:f8:a0:ea:c7:49:8a:da:77: 87:cb:00:1f:05:45:d5:7e:81:2d:99:30:79:19:9c: 42:31:2d:ca:09:bd:88:77:21:94:bb:c9:77:a5:7d: ac:c9:5f:d0:5e:69:20:0c:1e:f1:95:a8:37:fb:f9: 57:01:50:0a:f9:2c:47:e3:8e:35:d7:9d:6d:f5:1e: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:67:C8:26:7F:9B:2A:2D:37:91:6E:8D:8A:A8:E4:7E:F5:D4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a96851a4-7472-3b88-acd3-ca0735351b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:37:3a:11:cd:ba:8e:15:55:8d:37:1f:4a:e7:3b:49:dd:a9: e8:7e:f0:21:dc:4b:61:fa:ac:22:f0:01:fb:81:91:2a:49:68: bf:ab:70:d0:bc:f2:bf:fb:20:33:7a:ef:48:c4:46:81:f9:60: 77:d1:f1:5b:bd:13:0a:5b:7d:bc:c4:30:b9:4b:2e:b1:4c:f6: 36:5f:cd:2f:12:a8:f1:ee:85:e3:b1:c7:23:e7:c2:a2:98:a7: 2f:6d:34:8b:55:d6:bf:00:2a:68:ed:a7:b8:39:0f:40:bb:68: 71:15:e9:8a:09:56:f5:e5:b2:9d:20:40:2c:52:51:b6:ae:74: ca:08:a7:55:2a:47:88:23:1f:3d:2f:84:bb:f5:9e:10:f4:50: bf:e3:d5:cb:ca:da:4b:bb:ac:c3:48:f2:61:7d:5f:f5:b3:ba: 86:26:71:c2:62:63:fe:94:be:ac:3e:57:ce:e3:0a:ed:da:c1: 48:0d:93:ed:f2:e8:6d:7c:f0:c1:a1:31:1d:e6:29:31:1b:6b: 23:72:d1:6c:55:cb:87:28:fe:d2:cb:8b:33:23:92:83:ee:8f: 3f:41:e7:a2:51:15:34:6b:23:1c:ef:dd:6b:30:42:03:c9:03: 31:97:5d:d2:20:5e:df:8d:2a:be:5e:6a:f0:95:b5:5e:f2:1d: 99:08:fb:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0YEWEKFbLE76+swDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ODBiOTYxZDgtMjFmMy00ODc2LWI5ZTYtMDZjZTg0MDRiMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrK2tkcVPrEfK86WEmOqRuxkJZtg7Ip/QXlV Z6fJgaMIQyeUH2mlvU9ccelOOGThsRQ09DKsAc6xwJJmFd4X0m+KuSVZktrM7vNf 5ZHSjr4mLWCu+z0DVK4zxZDVMWIjluXLB7OxXl5ZKkxg9Os2/dFnBQG0xKcAIH1b tX1co/DVpEjv6qvN5N8Arfovbco+89LabftkZrLQ4IfmWI81N53TvRFJPDpFn+PW qRJnUBTPWlA7fX+IBzlW+KDqx0mK2neHywAfBUXVfoEtmTB5GZxCMS3KCb2IdyGU u8l3pX2syV/QXmkgDB7xlag3+/lXAVAK+SxH4441151t9R5E8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1rZ8gmf5sqLTeRbo2KqOR+9dR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTk2ODUxYTQtNzQ3Mi0z Yjg4LWFjZDMtY2EwNzM1MzUxYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM3OhHNuo4VVY03H0rnO0ndqeh+8CHcS2H6rCLwAfuBkSpJaL+rcNC8 8r/7IDN670jERoH5YHfR8Vu9EwpbfbzEMLlLLrFM9jZfzS8SqPHuheOxxyPnwqKY py9tNItV1r8AKmjtp7g5D0C7aHEV6YoJVvXlsp0gQCxSUbaudMoIp1UqR4gjHz0v hLv1nhD0UL/j1cvK2ku7rMNI8mF9X/WzuoYmccJiY/6Uvqw+V87jCu3awUgNk+3y 6G188MGhMR3mKTEbayNy0WxVy4co/tLLizMjkoPujz9B56JRFTRrIxzv3WswQgPJ AzGXXdIgXt+NKr5eavCVtV7yHZkI+2Q= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:39 2025 by rpki-client