$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa File: b7574509-07d2-3b87-8fb2-24340597ec22.roa (raw, json) Hash identifier: 52GfI9kOpE4APEEPqknPMek+dkO8aVe7RT4aLyBEs4s= Subject key identifier: 14:7A:48:81:24:C1:01:AE:92:56:41:A5:5D:73:FD:C9:7D:95:21:15 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B617F9C861F547DFE2213F540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa Signing time: Wed 01 Oct 2025 20:38:14 +0000 ROA not before: Wed 01 Oct 2025 20:38:14 +0000 ROA not after: Tue 30 Dec 2025 21:38:14 +0000 asID: 7029 IP address blocks: 75.88.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:7f:9c:86:1f:54:7d:fe:22:13:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 1 20:38:14 2025 GMT Not After : Dec 30 21:38:14 2025 GMT Subject: CN=7d9eb7ab-1134-4fc0-b3c8-42f840837950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:a7:8e:84:34:e4:67:18:d7:fe:02:62:40: ad:16:f7:93:23:ca:3b:13:71:cd:9e:07:d8:92:f2: cb:9f:02:0a:39:1e:ad:6d:f9:0d:6d:2d:c8:b4:4c: c6:19:ed:c2:9f:ef:54:1c:02:59:28:3a:40:85:83: 0c:df:27:61:80:65:df:21:78:ed:ff:2e:7b:0c:0b: f2:6b:a7:0e:8d:9b:4a:38:86:41:2c:27:cd:01:3a: de:5a:aa:ee:31:7a:46:c0:dd:f8:3e:a1:29:93:74: ff:dd:a8:e8:5d:07:0d:c2:e7:bf:c8:e4:1c:d3:b3: ba:d1:74:20:8d:f8:b6:b3:e4:07:31:93:ec:2f:ff: 8d:ca:1c:18:17:36:59:50:37:ec:cb:d8:16:dc:ba: 3f:f2:a3:07:41:d8:25:09:5e:dc:16:80:e2:40:e0: 22:73:01:38:d0:66:a5:e5:ee:9b:e3:1c:46:6f:7c: 2c:61:01:0d:6f:cd:c1:70:28:4d:73:00:7d:af:40: bd:06:19:d5:11:99:d2:ae:e3:25:de:20:08:40:7a: 11:ce:11:cd:31:70:d6:99:78:59:75:ef:68:6e:22: 38:02:4e:30:57:73:a9:30:e9:43:08:59:e0:e8:fd: 26:5a:86:f5:77:4e:29:f6:af:b6:18:c0:4e:e6:26: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7A:48:81:24:C1:01:AE:92:56:41:A5:5D:73:FD:C9:7D:95:21:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7574509-07d2-3b87-8fb2-24340597ec22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:25:8d:b7:3c:78:8a:46:05:2b:f6:28:2e:88:52:de:9f:5c: 1d:72:ca:12:48:a5:76:a2:4e:d3:af:90:a5:78:b4:b6:70:63: c5:36:26:54:82:0b:d9:ca:02:ec:c1:76:8a:38:38:b9:c4:7c: 75:cd:4c:c3:2e:9f:15:61:8f:26:c9:b2:df:bb:29:7e:fe:f9: 46:0b:2a:c1:f4:31:6b:0a:38:3d:3b:6d:6a:f7:c0:88:48:db: 0a:31:a7:ad:38:80:cc:dd:1b:5b:f7:eb:14:0b:f7:d7:bb:29: ad:ab:91:7f:e0:47:e8:de:6a:79:06:04:5e:6e:c4:0c:b9:a5: 97:bc:76:01:39:a8:29:4d:da:83:37:9c:55:83:d0:85:d6:07: 89:ef:5e:f8:e2:88:da:55:54:a4:6d:91:15:a0:7b:2a:c1:18: 7a:31:f4:8d:83:24:9b:8f:e6:2a:eb:95:97:e3:6f:4d:ca:e1: 85:37:34:fd:12:ff:db:eb:b5:39:89:37:d0:fb:25:96:90:1c: 71:ae:ff:b4:cd:e1:cc:4e:e8:0d:16:81:5d:7f:6d:47:bf:bb: 3e:78:62:75:93:4d:1d:da:1f:0d:9a:23:8d:4d:76:d9:71:4c: 10:d9:79:ba:ba:de:16:d2:18:0f:9e:01:e8:43:31:93:3f:bd: 5c:16:01:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthf5yGH1R9/iIT9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwMTIwMzgxNFoXDTI1MTIzMDIxMzgxNFowLzEtMCsGA1UEAxMk N2Q5ZWI3YWItMTEzNC00ZmMwLWIzYzgtNDJmODQwODM3OTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLGnjoQ05GcY1/4CYkCtFveTI8o7E3HNngfY kvLLnwIKOR6tbfkNbS3ItEzGGe3Cn+9UHAJZKDpAhYMM3ydhgGXfIXjt/y57DAvy a6cOjZtKOIZBLCfNATreWqruMXpGwN34PqEpk3T/3ajoXQcNwue/yOQc07O60XQg jfi2s+QHMZPsL/+NyhwYFzZZUDfsy9gW3Lo/8qMHQdglCV7cFoDiQOAicwE40Gal 5e6b4xxGb3wsYQENb83BcChNcwB9r0C9BhnVEZnSruMl3iAIQHoRzhHNMXDWmXhZ de9obiI4Ak4wV3OpMOlDCFng6P0mWob1d04p9q+2GMBO5iY7+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR6SIEkwQGuklZBpV1z/cl9lSEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc1NzQ1MDktMDdkMi0z Yjg3LThmYjItMjQzNDA1OTdlYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1iVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoljbc8eIpGBSv2KC6IUt6fXB1yyhJIpXaiTtOvkKV4tLZwY8U2JlSC C9nKAuzBdoo4OLnEfHXNTMMunxVhjybJst+7KX7++UYLKsH0MWsKOD07bWr3wIhI 2woxp604gMzdG1v36xQL99e7Ka2rkX/gR+jeankGBF5uxAy5pZe8dgE5qClN2oM3 nFWD0IXWB4nvXvjiiNpVVKRtkRWgeyrBGHox9I2DJJuP5irrlZfjb03K4YU3NP0S /9vrtTmJN9D7JZaQHHGu/7TN4cxO6A0WgV1/bUe/uz54YnWTTR3aHw2aI41Ndtlx TBDZebq63hbSGA+eAehDMZM/vVwWAZA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:28 2025 by rpki-client