$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa File: 1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa (raw, json) Hash identifier: tCMy1D5mdj4sTNvvEo3RW7h1S9FzlBCurhFB8yI7IdM= Subject key identifier: 6E:C0:BD:07:A4:6E:E6:AD:8D:B2:90:7C:73:A0:AD:1E:34:B3:BC:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC337EFB38ABFAB73C800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 75.91.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c3:37:ef:b3:8a:bf:ab:73:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=9e8a0d97-2402-4b2c-b7e9-502893e8eb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:e1:e5:79:21:dc:bf:3e:f8:b1:0e:db:e2: 58:a7:53:42:26:27:00:2d:f9:7b:d5:42:7f:08:bf: 8b:af:4e:b8:98:db:8f:03:12:41:be:42:90:96:94: 9d:6c:15:93:6a:97:4b:38:ce:3d:8d:d5:5d:0c:67: 16:87:a9:ab:2d:16:f3:55:bf:06:0c:4c:57:70:7f: 5c:ac:54:c4:c1:8c:a9:1c:e3:55:b5:67:77:e0:54: 2d:6b:89:2f:15:22:4c:47:1e:89:77:c6:a7:ae:25: 57:d9:92:08:38:5c:e1:5c:5f:a6:46:75:04:4d:14: 12:39:0e:8c:82:f4:3d:04:2f:d0:ac:dc:28:b3:d7: 13:1e:2d:62:bf:06:38:b8:16:89:e1:17:f4:5c:e3: 68:1a:2f:56:71:a8:e1:66:55:bc:eb:b5:90:69:3d: 21:09:1d:54:65:49:86:32:47:fe:2e:1e:0a:f3:f0: 45:63:ce:86:1c:fb:59:cd:49:f8:4d:9f:c3:dc:0b: c0:44:83:b6:20:ac:1b:7a:f1:45:94:08:d3:c9:fd: 00:8c:0e:0e:64:14:b0:ee:f8:4c:ce:79:28:98:81: f5:96:90:25:0e:ea:fa:4f:89:98:a4:1e:f2:b3:f8: 0b:14:de:12:8d:d1:63:36:84:5e:d0:d0:c0:f5:82: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C0:BD:07:A4:6E:E6:AD:8D:B2:90:7C:73:A0:AD:1E:34:B3:BC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c9:1b:6b:f7:e0:7e:a8:df:4a:e7:1d:92:d5:eb:13:bf:d9: 7c:12:0e:eb:96:c0:79:88:18:33:bc:8e:01:17:2f:b3:1a:bd: 1a:5c:8a:74:39:3b:ab:ae:f3:8f:90:4f:53:f2:ac:8e:52:de: d2:22:eb:33:9f:41:e8:95:eb:1b:e2:66:48:d5:d1:f8:3a:f6: 6d:66:d5:e2:42:76:d9:6d:75:50:6d:1d:e3:fa:88:c0:88:84: 10:93:c7:90:ba:ea:ec:78:a7:59:52:14:20:65:9c:ca:ac:9d: 33:34:7f:bc:fd:37:48:f5:04:9f:59:0c:48:cc:88:cd:78:4d: cd:d9:8d:23:06:87:02:59:40:eb:f5:02:9e:0e:60:18:52:89: ef:ec:74:6b:93:20:43:b9:19:45:6e:1f:90:39:30:0e:34:62: 64:fe:05:7f:14:83:43:4f:d6:95:ea:a0:44:63:fb:38:2b:33: 87:d8:fe:c8:04:d4:4c:a8:de:2c:67:10:76:31:82:1c:92:a3: 0a:59:7e:c1:7a:1d:9f:da:ee:df:b7:64:4e:7f:45:04:8f:46: 52:ea:08:c7:ac:7c:17:21:93:15:d6:6f:57:6c:03:f6:a8:a0: ca:a3:44:56:96:72:32:35:08:46:7f:41:9a:0e:01:d4:69:d6: a4:b3:d0:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMM377OKv6tzyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OWU4YTBkOTctMjQwMi00YjJjLWI3ZTktNTAyODkzZThlYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4Ph5Xkh3L8++LEO2+JYp1NCJicALfl71UJ/ CL+Lr064mNuPAxJBvkKQlpSdbBWTapdLOM49jdVdDGcWh6mrLRbzVb8GDExXcH9c rFTEwYypHONVtWd34FQta4kvFSJMRx6Jd8anriVX2ZIIOFzhXF+mRnUETRQSOQ6M gvQ9BC/QrNwos9cTHi1ivwY4uBaJ4Rf0XONoGi9WcajhZlW867WQaT0hCR1UZUmG Mkf+Lh4K8/BFY86GHPtZzUn4TZ/D3AvARIO2IKwbevFFlAjTyf0AjA4OZBSw7vhM znkomIH1lpAlDur6T4mYpB7ys/gLFN4SjdFjNoRe0NDA9YLhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7AvQekbuatjbKQfHOgrR40s7x8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA4OGY5MzUtZTVlYy0z YzBmLWFjMmEtNWYxNmJjZmNiMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfJG2v34H6o30rnHZLV6xO/2XwSDuuWwHmIGDO8jgEXL7MavRpcinQ5 O6uu84+QT1PyrI5S3tIi6zOfQeiV6xviZkjV0fg69m1m1eJCdtltdVBtHeP6iMCI hBCTx5C66ux4p1lSFCBlnMqsnTM0f7z9N0j1BJ9ZDEjMiM14Tc3ZjSMGhwJZQOv1 Ap4OYBhSie/sdGuTIEO5GUVuH5A5MA40YmT+BX8Ug0NP1pXqoERj+zgrM4fY/sgE 1Eyo3ixnEHYxghySowpZfsF6HZ/a7t+3ZE5/RQSPRlLqCMesfBchkxXWb1dsA/ao oMqjRFaWcjI1CEZ/QZoOAdRp1qSz0G4= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:29 2025 by rpki-client