$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8755948-b61e-3ef5-98a3-109689c371cd.roa File: d8755948-b61e-3ef5-98a3-109689c371cd.roa (raw, json) Hash identifier: 9eXUM27Gg1KLgB9lfvWF7HuqtXBBTTiPzA7ZUzjA4l8= Subject key identifier: 6E:5B:DC:2B:62:99:D2:12:4D:51:85:E1:51:9D:0F:DB:29:C7:99:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B889476C5420A4B124420F220 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8755948-b61e-3ef5-98a3-109689c371cd.roa Signing time: Wed 15 Oct 2025 20:36:46 +0000 ROA not before: Wed 15 Oct 2025 20:36:46 +0000 ROA not after: Tue 13 Jan 2026 21:36:46 +0000 asID: 7029 IP address blocks: 75.89.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:94:76:c5:42:0a:4b:12:44:20:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 15 20:36:46 2025 GMT Not After : Jan 13 21:36:46 2026 GMT Subject: CN=e5dc746e-427b-4986-b761-e32a505efa58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:34:2c:85:4a:c8:6c:a9:10:6f:88:10:37:da: 32:e1:33:2b:49:39:e2:96:01:1a:82:b7:3d:38:ec: ca:fe:80:68:91:15:ca:3c:4d:ab:05:fe:23:ea:8f: 9a:76:46:e1:45:fe:95:59:d0:83:11:3a:4b:ce:07: 2b:f9:f4:52:0a:ff:ff:aa:cc:b1:ff:be:ac:d7:11: 64:f9:a1:4c:05:e3:35:59:45:a1:9c:fc:47:ec:d7: cf:76:7e:3d:ef:c7:df:03:26:de:8f:7a:b1:c2:d3: e2:01:22:c3:73:67:92:f1:74:12:58:95:7d:01:41: 81:d3:da:97:76:bb:92:0d:03:99:97:ba:72:56:0d: e2:68:5e:4b:36:e0:18:e2:3c:e0:99:28:0a:cf:ea: c7:f9:3f:f5:fe:d5:75:d7:53:fb:b4:52:23:e6:25: c2:b0:93:7e:74:af:c5:5d:ba:ed:40:ec:e2:5a:22: 4a:81:88:05:84:8e:61:43:58:06:4b:c5:df:aa:b6: 19:57:72:eb:15:95:40:aa:85:25:34:46:87:e6:73: 62:21:11:71:dd:42:c6:c0:52:37:59:9e:33:96:3f: 65:ab:7a:17:79:cc:89:7b:72:11:a8:0b:f3:29:af: 74:42:ff:bc:bd:ce:af:01:e1:0d:8b:8c:99:db:58: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5B:DC:2B:62:99:D2:12:4D:51:85:E1:51:9D:0F:DB:29:C7:99:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8755948-b61e-3ef5-98a3-109689c371cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:22:ca:56:ed:54:36:5e:da:8c:d9:96:3f:f0:db:c5:a8:ac: 80:ce:6d:c3:a7:8d:08:bb:96:ca:92:32:f8:74:c4:e3:1e:78: 9a:59:81:0e:c2:28:aa:2e:85:2d:83:e7:24:96:24:43:50:ca: f5:0d:da:aa:f8:7b:3a:66:c9:23:e5:5c:50:cb:c0:b2:19:de: 01:85:ea:a0:62:4b:de:55:02:ec:7b:41:21:2f:fe:94:b0:bc: 23:97:1a:d6:2e:69:d6:82:99:3f:c0:8e:b5:d0:28:a0:a5:c7: 58:04:c9:ec:15:4c:37:10:a9:4c:d0:9b:21:38:94:9e:9f:d8: c1:86:4c:5d:16:12:0f:b9:92:ee:ba:d0:e6:02:3f:d0:71:cc: a8:0b:88:9e:f7:65:24:2a:72:11:f2:5a:6f:76:7f:72:7f:79: 38:5a:28:91:27:87:58:f9:45:b2:d3:31:06:55:ac:84:20:d3: aa:8e:b2:4b:36:3a:d8:22:39:4e:6f:10:7d:1c:f4:db:60:87: a8:bd:eb:5a:38:84:00:70:0f:93:fc:68:cc:b6:d0:c3:0a:44: bd:73:e6:53:55:46:05:ab:36:77:9f:2c:df:12:27:58:48:c9: c9:fe:17:2f:d5:b5:4b:61:54:d4:20:e5:a3:7d:70:89:bf:0a: bd:50:9e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIlHbFQgpLEkQg8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxNTIwMzY0NloXDTI2MDExMzIxMzY0NlowLzEtMCsGA1UEAxMk ZTVkYzc0NmUtNDI3Yi00OTg2LWI3NjEtZTMyYTUwNWVmYTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDQshUrIbKkQb4gQN9oy4TMrSTnilgEagrc9 OOzK/oBokRXKPE2rBf4j6o+adkbhRf6VWdCDETpLzgcr+fRSCv//qsyx/76s1xFk +aFMBeM1WUWhnPxH7NfPdn4978ffAybej3qxwtPiASLDc2eS8XQSWJV9AUGB09qX druSDQOZl7pyVg3iaF5LNuAY4jzgmSgKz+rH+T/1/tV111P7tFIj5iXCsJN+dK/F XbrtQOziWiJKgYgFhI5hQ1gGS8XfqrYZV3LrFZVAqoUlNEaH5nNiIRFx3ULGwFI3 WZ4zlj9lq3oXecyJe3IRqAvzKa90Qv+8vc6vAeENi4yZ21guRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5b3CtimdISTVGF4VGdD9spx5kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg3NTU5NDgtYjYxZS0z ZWY1LTk4YTMtMTA5Njg5YzM3MWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMiylbtVDZe2ozZlj/w28WorIDObcOnjQi7lsqSMvh0xOMeeJpZgQ7C KKouhS2D5ySWJENQyvUN2qr4ezpmySPlXFDLwLIZ3gGF6qBiS95VAux7QSEv/pSw vCOXGtYuadaCmT/AjrXQKKClx1gEyewVTDcQqUzQmyE4lJ6f2MGGTF0WEg+5ku66 0OYCP9BxzKgLiJ73ZSQqchHyWm92f3J/eThaKJEnh1j5RbLTMQZVrIQg06qOsks2 OtgiOU5vEH0c9Ntgh6i961o4hABwD5P8aMy20MMKRL1z5lNVRgWrNnefLN8SJ1hI ycn+Fy/VtUthVNQg5aN9cIm/Cr1Qnmc= -----END CERTIFICATE-----Generated at Sun Oct 19 18:34:26 2025 by rpki-client