$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0750fab-489b-39aa-8efe-8538c03ae074.roa File: d0750fab-489b-39aa-8efe-8538c03ae074.roa (raw, json) Hash identifier: TgL0NGEd0L9mTSHV8O6G47Lb40TJ0mM0d6/kE9x3vLI= Subject key identifier: 4B:14:FE:B2:D3:F6:F0:BA:1B:E4:D1:86:8F:DB:9C:AD:EA:46:88:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B28C6EA6E6080A7FAE4E92BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0750fab-489b-39aa-8efe-8538c03ae074.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 27338 IP address blocks: 74.8.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ea:6e:60:80:a7:fa:e4:e9:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=b8a0b3c6-9cb7-41ad-901c-fe47f560e188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:1c:4d:d5:7d:a2:cd:05:25:57:b6:9d:59: a0:4c:72:ed:62:d2:18:2d:56:bb:d5:34:aa:a8:3b: 26:37:5f:75:de:bc:25:50:ba:0c:35:a4:1f:19:c1: 59:fe:2d:b6:bf:2b:36:f1:e4:e6:64:a7:4b:98:b8: 22:22:91:e5:4a:fc:a3:ae:56:0d:74:de:2f:e6:4d: 02:25:56:fc:be:20:ab:f7:2c:23:7c:60:66:e8:3d: d4:52:f4:b5:1c:fd:a0:0b:43:0c:11:87:85:22:99: f3:1e:2c:c8:ad:7b:34:2a:d4:cd:53:1e:e5:09:3a: 18:84:aa:6b:86:00:f0:d3:ee:bc:41:71:27:89:f1: 74:84:f2:9d:64:db:6b:36:e7:a1:f2:57:9b:6f:37: f6:cc:c8:ad:2e:6c:5e:75:19:26:73:82:78:61:67: 65:1a:37:8f:24:84:8b:78:1d:2b:bf:a6:8e:8e:f8: 2c:88:f0:cd:76:26:5e:dd:6b:bb:2a:bf:28:37:a7: 8b:50:82:bc:1c:7d:fe:f4:d7:92:87:29:0e:78:58: 2c:bc:97:66:a4:d0:56:9f:4d:43:2b:80:c5:48:b3: 83:b3:1a:d1:29:f1:31:81:95:23:e9:5b:6c:85:f2: ef:25:80:9a:80:4d:53:d0:0a:33:af:01:cd:01:0f: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:FE:B2:D3:F6:F0:BA:1B:E4:D1:86:8F:DB:9C:AD:EA:46:88:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d0750fab-489b-39aa-8efe-8538c03ae074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:61:05:11:7b:06:28:61:62:1c:8a:05:5a:f9:c5:a0:35:b1: bd:c4:eb:81:7f:70:ee:26:03:5d:48:dd:66:cb:1c:83:2c:3b: 6f:de:c7:fe:25:7e:23:1a:ca:1a:ab:05:b9:4e:50:25:e6:0b: 08:a1:c1:3b:55:11:2b:ac:4e:91:5e:fd:fc:f7:ad:e3:55:b8: 8a:b2:d7:21:c5:d5:5f:71:1a:6f:19:01:07:e9:6a:62:93:f8: cd:3b:67:4a:99:c4:00:9f:50:70:cc:c2:31:18:11:a1:cd:1c: 16:4b:c8:de:eb:a0:0c:89:43:48:6e:1f:e1:3c:88:20:44:fd: 69:0a:d4:16:cb:b0:60:e6:c2:81:9f:98:77:a7:dc:56:90:51: 21:3a:6d:62:29:d4:2f:13:9f:67:68:31:f8:88:97:7e:31:40: 91:6c:13:54:41:4e:94:e3:d5:f6:8a:88:cf:2c:48:33:03:dd: d3:66:be:64:c2:ff:d3:12:cd:9e:4a:1e:bf:6d:79:90:ec:41: ce:3f:46:f7:58:9d:65:5b:d8:be:35:7b:ca:44:95:94:0c:80: d9:4e:99:bb:51:11:d5:41:24:2b:e2:ad:05:c3:14:f6:92:c4: 89:21:c9:b2:6d:8b:b4:55:f7:14:7d:d2:46:a3:25:7a:78:25: 23:9a:c5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxupuYICn+uTpK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YjhhMGIzYzYtOWNiNy00MWFkLTkwMWMtZmU0N2Y1NjBlMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5ocTdV9os0FJVe2nVmgTHLtYtIYLVa71TSq qDsmN1913rwlULoMNaQfGcFZ/i22vys28eTmZKdLmLgiIpHlSvyjrlYNdN4v5k0C JVb8viCr9ywjfGBm6D3UUvS1HP2gC0MMEYeFIpnzHizIrXs0KtTNUx7lCToYhKpr hgDw0+68QXEnifF0hPKdZNtrNueh8lebbzf2zMitLmxedRkmc4J4YWdlGjePJISL eB0rv6aOjvgsiPDNdiZe3Wu7Kr8oN6eLUIK8HH3+9NeShykOeFgsvJdmpNBWn01D K4DFSLODsxrRKfExgZUj6VtshfLvJYCagE1T0AozrwHNAQ+ztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsU/rLT9vC6G+TRho/bnK3qRoimMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDA3NTBmYWItNDg5Yi0z OWFhLThlZmUtODUzOGMwM2FlMDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxhBRF7BihhYhyKBVr5xaA1sb3E64F/cO4mA11I3WbLHIMsO2/ex/4l fiMayhqrBblOUCXmCwihwTtVESusTpFe/fz3reNVuIqy1yHF1V9xGm8ZAQfpamKT +M07Z0qZxACfUHDMwjEYEaHNHBZLyN7roAyJQ0huH+E8iCBE/WkK1BbLsGDmwoGf mHen3FaQUSE6bWIp1C8Tn2doMfiIl34xQJFsE1RBTpTj1faKiM8sSDMD3dNmvmTC /9MSzZ5KHr9teZDsQc4/RvdYnWVb2L41e8pElZQMgNlOmbtREdVBJCvirQXDFPaS xIkhybJti7RV9xR90kajJXp4JSOaxcs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:20 2025 by rpki-client