$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa File: d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa (raw, json) Hash identifier: QQQyUxdnZr7HYQSezsR4r1RmuPYxf62kofnuFjSXAvs= Subject key identifier: C4:87:12:26:82:49:16:03:6C:7D:44:31:56:6F:73:7C:A8:34:7D:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC750794188A125F52B8D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 75.89.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:50:79:41:88:a1:25:f5:2b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=284a68e6-40dd-4a3d-919b-6b1df7edc9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:5f:3e:c4:47:ab:12:10:c2:e9:42:fd:77: 48:2b:4c:55:f0:14:c7:4b:0b:a1:0e:44:77:a0:04: 24:c8:72:3f:36:ac:c6:a3:92:d4:a5:2c:b1:64:40: d3:ca:0e:a7:dc:ea:fb:ac:78:47:4b:17:f0:77:e7: c3:4d:db:47:7b:bd:bd:26:18:f7:3b:76:d1:92:82: e6:31:a8:28:28:48:02:39:e4:33:a1:c5:71:7a:e8: 92:e7:f3:0c:f7:ac:5d:ec:5d:84:76:7d:2a:76:48: b5:6d:da:90:48:0f:d0:c2:3d:08:fb:7b:f1:99:61: d0:bd:1a:6f:a1:b3:b9:28:19:5f:48:a6:d6:66:fd: 5f:a4:55:fd:f3:e1:e7:c7:28:1d:b5:cd:55:a3:83: 08:2d:89:25:3c:94:7b:1c:4b:12:2c:73:ce:44:a3: 4a:b0:97:ec:d5:da:60:6a:33:83:11:0d:e9:4c:bb: 18:4b:c9:6c:d3:37:67:a0:c1:a6:39:88:cb:05:2c: bf:f2:7e:b9:54:da:4c:90:e9:8d:d1:75:19:89:61: 16:b2:2a:ae:d8:51:95:dc:ef:5d:9a:cf:c6:25:f3: 34:4d:fe:b5:54:16:f4:e6:f6:61:85:e5:a4:73:23: 0d:6c:e7:9a:f9:9e:4e:2e:93:d1:40:cf:af:24:e4: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:12:26:82:49:16:03:6C:7D:44:31:56:6F:73:7C:A8:34:7D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d81a1a2f-d1dd-3720-b5a4-b76d35c50546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:01:4c:a5:72:d0:cb:3f:e0:99:12:9c:b3:6b:f4:da:0c:f6: 97:85:81:e9:72:3e:de:9f:8e:57:dc:3f:41:c0:f0:57:49:a5: 3d:d6:7e:5a:32:ed:19:3b:8c:6e:0e:3c:27:22:fc:b5:aa:c2: 8b:d2:18:da:24:c4:36:96:5a:20:41:bc:9d:35:c8:d5:28:2d: c6:96:05:24:67:0c:14:92:37:19:40:32:52:75:20:ed:12:c4: 89:a1:18:df:7e:2d:90:87:d4:c9:2d:d0:9f:0f:23:70:a9:52: ae:df:66:a2:0b:f3:b8:40:47:c7:83:32:53:fc:bd:52:85:2a: 1a:e8:af:18:7e:1a:a1:a4:13:b2:16:08:a9:11:5a:8a:67:13: cf:b9:2a:8b:9a:36:27:b6:9f:1e:3d:0a:bc:2a:2f:7d:79:df: 49:d3:15:41:f9:2c:35:17:cf:7e:5d:ca:a0:7a:18:2c:b9:6f: 98:c8:c3:a9:82:f9:9a:b2:dc:bb:4b:8b:73:1a:9a:f8:f5:26: 35:8d:24:3f:bf:e1:f2:e2:7f:43:cc:49:fd:52:8c:55:43:89: 29:0f:d0:b6:61:dd:b4:1c:13:cb:8c:06:75:29:57:55:48:9b: 6e:40:0a:d7:84:cb:45:1c:b6:74:95:bc:ab:9c:91:80:0c:bd: 93:32:26:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx1B5QYihJfUrjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk Mjg0YTY4ZTYtNDBkZC00YTNkLTkxOWItNmIxZGY3ZWRjOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBfPsRHqxIQwulC/XdIK0xV8BTHSwuhDkR3 oAQkyHI/NqzGo5LUpSyxZEDTyg6n3Or7rHhHSxfwd+fDTdtHe729Jhj3O3bRkoLm MagoKEgCOeQzocVxeuiS5/MM96xd7F2Edn0qdki1bdqQSA/Qwj0I+3vxmWHQvRpv obO5KBlfSKbWZv1fpFX98+Hnxygdtc1Vo4MILYklPJR7HEsSLHPORKNKsJfs1dpg ajODEQ3pTLsYS8ls0zdnoMGmOYjLBSy/8n65VNpMkOmN0XUZiWEWsiqu2FGV3O9d ms/GJfM0Tf61VBb05vZhheWkcyMNbOea+Z5OLpPRQM+vJOQRPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSHEiaCSRYDbH1EMVZvc3yoNH2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDgxYTFhMmYtZDFkZC0z NzIwLWI1YTQtYjc2ZDM1YzUwNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1noMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgBTKVy0Ms/4JkSnLNr9NoM9peFgelyPt6fjlfcP0HA8FdJpT3Wfloy 7Rk7jG4OPCci/LWqwovSGNokxDaWWiBBvJ01yNUoLcaWBSRnDBSSNxlAMlJ1IO0S xImhGN9+LZCH1Mkt0J8PI3CpUq7fZqIL87hAR8eDMlP8vVKFKhrorxh+GqGkE7IW CKkRWopnE8+5KouaNie2nx49CrwqL31530nTFUH5LDUXz35dyqB6GCy5b5jIw6mC +Zqy3LtLi3Mamvj1JjWNJD+/4fLif0PMSf1SjFVDiSkP0LZh3bQcE8uMBnUpV1VI m25ACteEy0UctnSVvKuckYAMvZMyJig= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:14 2025 by rpki-client