$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa File: f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa (raw, json) Hash identifier: H4wNgtXH0ApLwLeYiiMssWeP+mSom+LlRYg9qbfAmUc= Subject key identifier: 01:2C:79:3B:5A:BD:A1:4F:5D:57:A0:BF:AD:32:1C:E2:C1:05:4D:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC7470A3907FF9A675C8700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 75.88.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:47:0a:39:07:ff:9a:67:5c:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f032a515-5e88-49c7-9ab1-860eb6a7ee7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:a8:00:f1:0f:73:85:d4:55:34:58:fd:ff: 85:06:e5:33:a1:d8:79:b8:d5:f9:8b:86:62:1b:af: 4c:b9:45:7d:1c:92:df:28:d7:ca:77:e2:00:d1:f3: 78:1d:98:4d:fc:c5:e7:62:75:37:d1:61:ea:c3:74: be:34:85:2f:fd:c4:b4:37:19:b4:a4:d2:71:a9:a4: 02:6b:78:cb:5a:63:53:42:c1:ed:0b:39:15:a7:c6: b5:de:10:50:9b:a8:d1:22:bf:98:9f:7c:1f:7f:07: e7:af:f6:d2:cd:c7:40:7d:4d:9c:10:19:75:84:f9: a7:cf:fd:07:37:a8:9c:e0:e6:fc:fc:14:80:9b:a0: e5:10:4e:8e:6e:cf:48:a9:1c:ed:ad:62:a1:c2:e9: 0b:1e:09:90:87:00:45:76:62:b4:cc:bb:47:83:c1: a0:f0:5b:6b:ea:38:b1:e0:fb:e8:b9:52:9b:80:79: a2:de:d8:4f:cc:a9:58:27:15:2d:0b:98:09:6f:62: c6:bd:03:8d:c8:49:af:0e:13:c1:94:11:4e:31:22: 26:76:64:45:6b:12:37:3f:c4:6a:f5:02:b1:f0:c0: b5:08:56:db:70:a9:2b:b2:68:91:92:03:54:41:74: eb:83:27:9d:1b:8c:f5:a4:15:2f:a1:db:a1:d3:7f: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:79:3B:5A:BD:A1:4F:5D:57:A0:BF:AD:32:1C:E2:C1:05:4D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:65:8f:3c:df:e2:69:6e:5f:f6:bd:77:e2:09:c8:bd:86:55: f2:b8:e8:d5:dc:9f:f9:47:09:b5:c2:97:0c:b6:2a:f0:76:7d: 43:1c:3b:76:a9:14:28:e1:26:3f:e7:99:05:92:1c:f5:b8:47: 0e:8b:01:a3:16:3c:80:5c:f6:21:3d:8a:26:96:90:81:72:c8: 72:0f:cf:fe:67:03:fb:cd:86:95:c4:a4:c8:57:b9:5c:4f:1b: 79:1d:71:1d:24:5e:53:ac:93:c1:d2:01:bd:34:1c:37:6c:23: 0a:89:ab:19:e9:69:ac:33:57:90:34:de:10:f7:5f:11:52:31: 1c:a2:c8:55:b8:bf:1e:1a:e1:70:44:ee:9a:64:58:8b:b5:fe: 92:d5:62:ac:ea:29:68:62:df:90:9b:74:f7:26:db:c2:e0:df: d5:91:82:90:0e:29:ab:3d:77:e1:d7:18:fd:c1:86:5f:4d:1f: 55:36:79:8a:59:3a:21:2f:cc:ac:6c:f0:05:f7:7c:f0:91:ee: 1e:4e:d3:52:06:5f:c3:d4:b6:6e:61:f6:ca:ca:bb:34:a2:29: 4c:36:57:c0:c9:83:b0:d8:0b:80:5d:6f:0f:8a:15:9f:00:cb: 12:52:9c:91:b5:ab:23:73:5f:fd:a0:00:4d:10:5d:10:86:86: 4b:ff:de:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0cKOQf/mmdchwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjAzMmE1MTUtNWU4OC00OWM3LTlhYjEtODYwZWI2YTdlZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO2oAPEPc4XUVTRY/f+FBuUzodh5uNX5i4Zi G69MuUV9HJLfKNfKd+IA0fN4HZhN/MXnYnU30WHqw3S+NIUv/cS0Nxm0pNJxqaQC a3jLWmNTQsHtCzkVp8a13hBQm6jRIr+Yn3wffwfnr/bSzcdAfU2cEBl1hPmnz/0H N6ic4Ob8/BSAm6DlEE6Obs9IqRztrWKhwukLHgmQhwBFdmK0zLtHg8Gg8Ftr6jix 4PvouVKbgHmi3thPzKlYJxUtC5gJb2LGvQONyEmvDhPBlBFOMSImdmRFaxI3P8Rq 9QKx8MC1CFbbcKkrsmiRkgNUQXTrgyedG4z1pBUvoduh03+nZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEseTtavaFPXVegv60yHOLBBU0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc4N2FhNTYtZDZiMC0z Y2I1LWI4OWUtNWQxZTRlNzMxOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpljzzf4mluX/a9d+IJyL2GVfK46NXcn/lHCbXClwy2KvB2fUMcO3ap FCjhJj/nmQWSHPW4Rw6LAaMWPIBc9iE9iiaWkIFyyHIPz/5nA/vNhpXEpMhXuVxP G3kdcR0kXlOsk8HSAb00HDdsIwqJqxnpaawzV5A03hD3XxFSMRyiyFW4vx4a4XBE 7ppkWIu1/pLVYqzqKWhi35CbdPcm28Lg39WRgpAOKas9d+HXGP3Bhl9NH1U2eYpZ OiEvzKxs8AX3fPCR7h5O01IGX8PUtm5h9srKuzSiKUw2V8DJg7DYC4Bdbw+KFZ8A yxJSnJG1qyNzX/2gAE0QXRCGhkv/3iI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:23 2025 by rpki-client