$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c3deab-fc14-328d-89a8-724bce89a057.roa File: d7c3deab-fc14-328d-89a8-724bce89a057.roa (raw, json) Hash identifier: JZyHG2AhX6eavbQ5h0pGCyuYnAlFBGQ2R+h3QxBWz3c= Subject key identifier: E0:19:FC:4C:5B:96:D0:84:AF:F5:0B:AE:96:E5:DB:E3:AD:22:7C:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3F1C5605F42FC30596944CA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c3deab-fc14-328d-89a8-724bce89a057.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 75.117.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:56:05:f4:2f:c3:05:96:94:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=2edd3833-4eb3-469a-a24e-2a016a5db414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:fc:e8:a7:62:56:e9:9e:3f:25:78:06:ec: 3c:93:15:b4:d8:eb:c1:e6:3b:df:a4:82:ef:e3:41: 0e:7c:a3:54:6a:b1:45:f1:35:56:ea:6f:e4:d5:26: 53:f3:70:1b:2b:87:85:b4:dc:e8:e9:a3:bd:c6:a5: 3f:b6:cf:9c:dd:81:8c:b3:7b:2e:30:b2:28:1b:95: f1:10:d5:c3:b0:24:9d:f8:f1:88:16:4a:94:fd:91: d1:d8:7e:bd:77:df:92:9c:5f:5f:a3:8d:6d:91:db: 2c:8e:52:00:ec:f1:18:ba:45:e1:c2:14:7c:d1:bc: f4:da:cd:df:2e:d3:fd:81:60:d3:22:72:fa:fd:8c: 5e:8d:c5:7d:95:8f:ea:e5:ff:39:f7:5e:3e:34:1f: 97:57:8e:cf:7f:93:56:81:16:1a:78:e5:64:f2:4b: 11:58:f2:9f:12:d6:0c:c0:34:a7:75:57:2e:05:2b: 1b:d9:01:3c:09:fb:39:4f:85:74:41:4d:7d:73:91: b0:e4:52:21:8f:28:b8:50:82:b9:35:5b:03:27:5a: 85:30:5e:09:58:54:0d:93:45:2e:51:d3:2e:86:65: db:64:9b:1b:dd:fe:31:5c:91:98:d4:cf:05:ec:fb: df:ff:d2:be:e4:77:8b:ba:d9:51:3a:45:2f:dd:8f: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:FC:4C:5B:96:D0:84:AF:F5:0B:AE:96:E5:DB:E3:AD:22:7C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c3deab-fc14-328d-89a8-724bce89a057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:04:00:37:3f:29:26:82:ba:90:98:54:51:2e:b4:24:af:72: 1d:7d:2f:17:81:e0:f1:95:f0:58:a7:bb:76:eb:d8:2c:0b:1e: 6e:6d:48:38:42:ab:e6:e9:7a:17:0a:8c:f0:d3:62:2e:15:bf: ef:22:12:1d:b0:e3:b5:49:5c:41:e4:24:f7:83:7d:e6:8a:8e: b6:00:c2:08:9e:db:c2:0a:eb:cf:69:d2:53:3a:bc:77:ce:83: fe:90:2d:f9:e9:d6:45:23:71:d3:8e:a9:79:1d:16:89:3f:1a: 4d:be:fc:f2:7c:36:a9:26:6e:20:27:4f:d8:05:f2:59:f8:e3: 1a:6f:d9:c5:42:b9:32:1d:32:3d:c6:f2:08:f1:2d:3c:58:e2: ee:a9:6a:18:c3:98:53:53:44:2d:27:d9:08:b8:7a:dd:e8:df: dc:19:06:f2:b6:1f:81:cb:d4:3b:05:6a:8a:02:ed:5e:50:31: 55:28:17:d5:c1:dc:c1:10:53:43:5c:18:90:b4:62:2c:2d:1a: 54:85:54:cc:ce:21:8b:88:0c:10:95:32:af:33:a6:21:a6:a7: ba:6c:65:7a:3e:81:d1:c7:57:87:34:3b:11:b3:34:3a:12:01: 8d:44:4a:d5:34:c0:4e:0e:e8:0d:ff:ac:c8:3a:61:75:8e:4d: 72:bd:6f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFYF9C/DBZaUTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MmVkZDM4MzMtNGViMy00NjlhLWEyNGUtMmEwMTZhNWRiNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x/86KdiVumePyV4Buw8kxW02OvB5jvfpILv 40EOfKNUarFF8TVW6m/k1SZT83AbK4eFtNzo6aO9xqU/ts+c3YGMs3suMLIoG5Xx ENXDsCSd+PGIFkqU/ZHR2H69d9+SnF9fo41tkdssjlIA7PEYukXhwhR80bz02s3f LtP9gWDTInL6/YxejcV9lY/q5f85914+NB+XV47Pf5NWgRYaeOVk8ksRWPKfEtYM wDSndVcuBSsb2QE8Cfs5T4V0QU19c5Gw5FIhjyi4UIK5NVsDJ1qFMF4JWFQNk0Uu UdMuhmXbZJsb3f4xXJGY1M8F7Pvf/9K+5HeLutlROkUv3Y/1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAZ/ExbltCEr/ULrpbl2+OtInzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjM2RlYWItZmMxNC0z MjhkLTg5YTgtNzI0YmNlODlhMDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkEADc/KSaCupCYVFEutCSvch19LxeB4PGV8Finu3br2CwLHm5tSDhC q+bpehcKjPDTYi4Vv+8iEh2w47VJXEHkJPeDfeaKjrYAwgie28IK689p0lM6vHfO g/6QLfnp1kUjcdOOqXkdFok/Gk2+/PJ8NqkmbiAnT9gF8ln44xpv2cVCuTIdMj3G 8gjxLTxY4u6pahjDmFNTRC0n2Qi4et3o39wZBvK2H4HL1DsFaooC7V5QMVUoF9XB 3MEQU0NcGJC0YiwtGlSFVMzOIYuIDBCVMq8zpiGmp7psZXo+gdHHV4c0OxGzNDoS AY1EStU0wE4O6A3/rMg6YXWOTXK9bzc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:44 2025 by rpki-client