$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa File: 98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa (raw, json) Hash identifier: xZQBFGAdSz0BagaD7ZaDMDTDB9wMGYiL+nlq8ETvknE= Subject key identifier: 78:1F:B4:E5:B3:67:3B:80:85:F1:58:47:EA:B8:00:20:03:ED:63:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E6069F1C114DCCD8E4EA780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:69:f1:c1:14:dc:cd:8e:4e:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=42577370-e372-44d9-9488-594f050c65a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:0d:25:d9:c8:c9:bc:d1:0c:27:50:15:4b: 09:be:39:88:79:fa:83:f7:7f:2e:96:2e:db:d2:54: 6e:08:19:76:1d:aa:fb:e2:3b:17:e0:c1:b1:b9:d9: 8e:85:cd:c0:43:17:b9:cd:77:99:4f:cb:e0:f0:03: 2f:e3:ae:38:dd:c9:0c:e2:68:b3:52:2d:a6:cc:d2: cb:19:49:c3:a4:d9:01:2c:68:29:c5:30:53:50:bd: d0:97:dd:97:f5:e2:11:12:40:fa:d1:55:45:36:dc: 3c:8f:76:a2:75:3b:b2:7c:2e:2e:da:b5:13:c1:00: 5f:4b:0c:9c:d1:d1:d2:87:e4:8f:f4:aa:0d:33:07: 98:87:f0:f0:46:a9:65:38:24:ba:3f:59:cb:d3:9f: 92:a6:68:83:d6:f5:24:2f:b0:e4:7c:c2:89:8d:72: 23:fc:5a:ec:e6:97:e2:2b:a0:ad:ed:bb:42:f4:0e: 08:f1:11:15:40:d6:2d:45:fc:a4:98:2c:7f:38:b7: ee:ea:f9:f0:24:f7:d3:53:8c:55:7b:bd:af:b9:21: d8:12:51:2f:ff:0d:d5:96:bd:df:5b:38:b5:dd:49: 13:28:47:2e:29:7c:73:f1:28:6d:00:d5:53:76:e9: 02:5b:0d:81:78:b4:44:a6:73:56:32:d8:b8:18:f8: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1F:B4:E5:B3:67:3B:80:85:F1:58:47:EA:B8:00:20:03:ED:63:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98035b9f-7634-35d4-9ec6-1ce7fae5f9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:74:ae:6d:10:1c:08:b9:da:dd:86:39:5b:ec:f0:57:5d:9f: 36:27:6d:b7:1f:7e:d2:d1:93:6c:92:29:ec:d5:fe:05:be:02: d4:f7:b4:2e:fc:2c:c7:b8:d0:3d:f1:ca:69:2c:1c:5b:4a:15: 28:01:74:c1:2d:7b:93:53:aa:fb:5c:a2:2d:5b:5f:35:ec:d3: 01:8b:82:9e:30:ab:83:d3:c6:fc:55:c8:16:0b:6c:40:24:8b: cd:ad:21:5e:e8:69:0b:b7:26:c8:9d:89:ac:64:48:93:d1:11: 26:1a:8e:d6:66:79:84:93:13:a0:3b:bc:7c:b8:f4:9f:22:46: 38:40:9c:18:53:e0:42:eb:6f:b9:05:d3:62:03:42:ca:ae:a5: d2:9f:a4:61:3e:1c:b0:e1:d0:0d:a2:01:57:cf:f1:44:87:33: 11:5a:04:83:f1:01:f9:e2:5c:10:0c:84:d0:8e:be:48:a3:8d: 18:9a:46:b5:6f:b0:3b:92:8f:e2:f2:7c:8f:60:e7:73:de:57: 96:84:c2:5d:34:76:9e:56:27:49:c1:c5:f9:66:7c:0a:3f:b9: 09:8b:ed:5b:dc:24:52:d7:11:c1:3d:a4:cc:7f:47:01:7a:d8: e6:46:dd:fd:da:60:dc:e0:59:58:81:a9:81:ec:28:4b:5a:86: b6:63:fa:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGnxwRTczY5Op4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk NDI1NzczNzAtZTM3Mi00NGQ5LTk0ODgtNTk0ZjA1MGM2NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+QNJdnIybzRDCdQFUsJvjmIefqD938uli7b 0lRuCBl2Har74jsX4MGxudmOhc3AQxe5zXeZT8vg8AMv46443ckM4mizUi2mzNLL GUnDpNkBLGgpxTBTUL3Ql92X9eIREkD60VVFNtw8j3aidTuyfC4u2rUTwQBfSwyc 0dHSh+SP9KoNMweYh/DwRqllOCS6P1nL05+SpmiD1vUkL7DkfMKJjXIj/Frs5pfi K6Ct7btC9A4I8REVQNYtRfykmCx/OLfu6vnwJPfTU4xVe72vuSHYElEv/w3Vlr3f Wzi13UkTKEcuKXxz8ShtANVTdukCWw2BeLREpnNWMti4GPiQ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgftOWzZzuAhfFYR+q4ACAD7WNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTgwMzViOWYtNzYzNC0z NWQ0LTllYzYtMWNlN2ZhZTVmOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV0rm0QHAi52t2GOVvs8FddnzYnbbcfftLRk2ySKezV/gW+AtT3tC78 LMe40D3xymksHFtKFSgBdMEte5NTqvtcoi1bXzXs0wGLgp4wq4PTxvxVyBYLbEAk i82tIV7oaQu3JsidiaxkSJPRESYajtZmeYSTE6A7vHy49J8iRjhAnBhT4ELrb7kF 02IDQsqupdKfpGE+HLDh0A2iAVfP8USHMxFaBIPxAfniXBAMhNCOvkijjRiaRrVv sDuSj+LyfI9g53PeV5aEwl00dp5WJ0nBxflmfAo/uQmL7VvcJFLXEcE9pMx/RwF6 2OZG3f3aYNzgWViBqYHsKEtahrZj+g8= -----END CERTIFICATE-----Generated at Wed Jul 9 13:08:47 2025 by rpki-client