$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/999dae75-f8a0-39fb-9e07-c5f9a158c8d9.roa File: 999dae75-f8a0-39fb-9e07-c5f9a158c8d9.roa (raw, json) Hash identifier: Fzb05+KII1QfRfG7rqzb3vhfxYphUvcSF80KKvBFqvQ= Subject key identifier: 12:53:B1:E7:35:B9:9A:C5:5D:EA:CD:81:98:0B:6A:B2:B7:0C:8C:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605BDA08BFF09340D36740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/999dae75-f8a0-39fb-9e07-c5f9a158c8d9.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 75.88.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5b:da:08:bf:f0:93:40:d3:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=3d9590cc-eec8-46af-af7b-fd7e322aa333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:60:47:a0:b9:78:57:8d:75:cc:52:16:45: ac:7e:c5:af:b8:49:cc:e0:83:e5:22:c2:a0:40:ee: 5c:56:db:05:16:99:29:62:9b:56:b3:de:6f:b2:d4: 50:fd:ff:5a:cd:fb:77:43:c0:7d:de:92:c1:7b:2a: 4d:16:33:44:48:e4:fa:42:e8:11:21:9c:aa:5f:34: ad:a1:17:f6:2a:32:1f:a6:61:ca:fd:bc:49:84:35: 64:c5:f7:e5:14:26:0b:63:0b:8f:11:b2:a0:33:7b: 8b:1d:fc:bd:6f:38:c5:3b:de:85:cb:93:6e:56:47: d2:e7:d3:01:10:3a:82:79:51:3b:4b:8c:cb:07:cf: 0d:bb:b5:e0:a7:88:ea:5c:2f:3d:cc:c3:06:3c:fd: d9:9a:ef:15:94:4d:1e:99:f6:b0:fc:b1:1d:a6:69: 14:c0:91:e5:13:90:5e:89:38:4d:08:c7:45:39:63: 98:c7:3c:a4:8a:ab:a4:7f:71:77:b7:0f:be:cc:aa: 7a:55:e6:9a:4a:3c:3f:eb:fa:ea:e0:fd:3c:5a:87: fc:bc:46:56:77:9c:4e:6e:d4:ea:42:0e:6b:3c:af: 3b:08:07:a3:2c:26:58:1e:64:2b:87:ac:61:26:7d: 3c:e5:c2:ab:44:b4:21:fc:1d:8d:66:23:72:46:c6: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:B1:E7:35:B9:9A:C5:5D:EA:CD:81:98:0B:6A:B2:B7:0C:8C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/999dae75-f8a0-39fb-9e07-c5f9a158c8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:20:20:18:c4:66:58:e3:49:e2:37:fc:48:ff:08:ed:08:b5: d3:4d:b9:6b:c8:cd:1f:76:54:52:ac:09:2c:d7:f0:3e:4b:98: 6c:7e:e0:6a:c4:fb:9c:a1:91:92:1b:3d:92:3f:58:95:74:3b: f7:4d:08:80:2f:90:2e:97:3f:aa:69:c5:92:27:2f:5d:d3:9f: 97:99:a6:16:aa:53:f4:4f:4f:b0:e2:01:79:2d:5c:00:22:92: dc:06:37:c6:ba:96:65:d7:35:29:be:21:cf:ce:ce:1a:ad:55: 05:b3:80:96:ec:cf:29:ac:22:43:89:73:7a:06:5e:8c:a6:47: cb:ee:e8:c2:b5:3c:38:43:a0:db:93:01:9b:ef:dd:d5:eb:dd: 3b:88:6a:9a:f2:67:81:ab:3c:3e:46:e2:c4:a4:bc:7f:5e:de: b6:58:93:ec:a6:8d:6a:3d:7c:c1:ee:14:34:ad:4f:0a:cf:90: 7e:89:ff:c8:33:52:e9:14:20:21:51:2a:f6:2c:91:ca:1d:d9: 17:1c:2c:57:ea:69:c3:54:48:67:56:3e:bd:aa:37:54:f9:78: d1:fd:f2:77:36:81:28:1b:fb:3c:2c:3d:a0:a1:34:6a:04:0e: 15:ed:35:5a:1e:26:5a:d3:4b:38:eb:9e:73:0b:bf:6d:00:d5: d0:f0:70:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYFvaCL/wk0DTZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk M2Q5NTkwY2MtZWVjOC00NmFmLWFmN2ItZmQ3ZTMyMmFhMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibtgR6C5eFeNdcxSFkWsfsWvuEnM4IPlIsKg QO5cVtsFFpkpYptWs95vstRQ/f9azft3Q8B93pLBeypNFjNESOT6QugRIZyqXzSt oRf2KjIfpmHK/bxJhDVkxfflFCYLYwuPEbKgM3uLHfy9bzjFO96Fy5NuVkfS59MB EDqCeVE7S4zLB88Nu7Xgp4jqXC89zMMGPP3Zmu8VlE0emfaw/LEdpmkUwJHlE5Be iThNCMdFOWOYxzykiqukf3F3tw++zKp6VeaaSjw/6/rq4P08Wof8vEZWd5xObtTq Qg5rPK87CAejLCZYHmQrh6xhJn085cKrRLQh/B2NZiNyRsZaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJTsec1uZrFXerNgZgLarK3DIzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTk5ZGFlNzUtZjhhMC0z OWZiLTllMDctYzVmOWExNThjOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1iIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwgIBjEZljjSeI3/Ej/CO0ItdNNuWvIzR92VFKsCSzX8D5LmGx+4GrE +5yhkZIbPZI/WJV0O/dNCIAvkC6XP6ppxZInL13Tn5eZphaqU/RPT7DiAXktXAAi ktwGN8a6lmXXNSm+Ic/OzhqtVQWzgJbszymsIkOJc3oGXoymR8vu6MK1PDhDoNuT AZvv3dXr3TuIapryZ4GrPD5G4sSkvH9e3rZYk+ymjWo9fMHuFDStTwrPkH6J/8gz UukUICFRKvYskcod2RccLFfqacNUSGdWPr2qN1T5eNH98nc2gSgb+zwsPaChNGoE DhXtNVoeJlrTSzjrnnMLv20A1dDwcIg= -----END CERTIFICATE-----Generated at Wed Jul 9 12:26:05 2025 by rpki-client