$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa File: 2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa (raw, json) Hash identifier: 7ffpMvkWDIDfDgQV8lkWtWQD3IxEhY9iPPatZINAgKY= Subject key identifier: B2:9F:1E:12:F9:D7:63:99:C5:20:4C:EC:F0:55:60:49:B9:67:BF:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC3283448C37DCC341600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 75.90.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c3:28:34:48:c3:7d:cc:34:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=3ff8d4d8-4736-41eb-919b-7680baa22102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:7a:34:34:55:1d:cf:7c:4b:3a:17:5e:18: 66:fa:fd:ce:81:ff:73:2f:05:5e:7c:02:98:39:89: 65:92:44:32:da:62:d8:d3:fa:75:88:3a:fd:27:95: f7:9b:e1:b5:ae:8b:e4:1f:52:dc:c4:7b:f1:05:7a: 12:b0:16:38:34:17:0d:a8:b7:13:b0:94:a2:33:23: bd:45:e8:2c:f8:a0:5a:81:bf:57:4b:46:bc:cf:cc: f1:d0:60:37:a0:99:0d:2a:be:60:1a:40:78:94:63: 3c:2d:62:f9:94:4d:0e:d5:2f:3f:e4:3e:01:b1:c4: e7:12:af:ee:99:5c:a4:64:73:fd:8d:22:0d:8e:0b: 7b:b4:4d:bc:08:b3:fb:43:6a:00:7e:fa:7b:f0:ba: aa:6f:66:a2:68:47:91:f4:f7:80:88:5e:3b:ce:da: 24:14:0d:ce:30:61:92:12:ac:ff:0a:4d:97:42:57: 06:d3:ab:c5:2a:17:23:6b:ec:f1:81:2a:9a:66:78: df:29:9a:79:4c:5b:86:44:ce:8d:e9:ce:05:48:c1: 88:aa:d2:da:d2:04:a9:68:62:d2:44:93:cd:46:be: 49:e2:31:93:83:46:96:7c:b1:47:84:31:ec:da:ed: 6a:50:70:28:4c:21:02:15:b8:2a:53:5b:95:e9:60: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9F:1E:12:F9:D7:63:99:C5:20:4C:EC:F0:55:60:49:B9:67:BF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2bf14f02-6b9c-3804-aa27-dd5a687a45bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:eb:75:65:30:c0:c9:3e:d4:5d:a4:c6:e6:73:b1:a5:ec:6d: b6:af:a4:d1:9e:fa:bb:80:af:b5:bd:76:4d:00:ca:fb:9e:b3: 78:b3:57:80:5e:0d:13:9d:e9:78:64:27:4b:5d:5c:e3:7d:cd: 7c:33:72:ad:17:19:be:4a:a2:92:ac:3c:30:e9:1c:0d:9e:9d: 81:8c:ec:9b:95:2e:bb:8d:bd:f9:24:9e:a4:69:83:2c:76:3b: a1:fe:4c:9e:05:2d:aa:dd:00:d5:9a:bb:cf:99:28:f6:79:30: a8:82:3f:0f:9a:fe:63:c6:f6:f8:bb:37:6f:f7:62:79:76:64: 6e:2e:36:4a:d3:f4:c4:7f:74:41:4a:6b:16:67:ee:f9:d4:e4: 8b:13:58:02:58:61:4f:4d:da:e0:f9:c6:f9:df:b0:29:8d:6f: 0e:58:e4:a9:5c:d2:1d:27:26:02:a3:fa:71:08:46:77:fd:66: f4:66:19:d5:76:a0:35:90:05:de:bf:2f:0d:e4:44:68:92:24: 83:00:18:41:14:dc:17:ca:14:66:b1:77:fe:cc:02:0d:78:28: 33:77:b5:8f:75:94:f8:be:89:6a:92:0a:6a:f7:b5:6c:94:18: ad:a8:5d:9b:15:80:9e:94:4f:96:20:ef:5e:cf:f6:d8:b7:59: b0:ca:92:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMMoNEjDfcw0FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk M2ZmOGQ0ZDgtNDczNi00MWViLTkxOWItNzY4MGJhYTIyMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeN6NDRVHc98SzoXXhhm+v3Ogf9zLwVefAKY OYllkkQy2mLY0/p1iDr9J5X3m+G1rovkH1LcxHvxBXoSsBY4NBcNqLcTsJSiMyO9 Regs+KBagb9XS0a8z8zx0GA3oJkNKr5gGkB4lGM8LWL5lE0O1S8/5D4BscTnEq/u mVykZHP9jSINjgt7tE28CLP7Q2oAfvp78Lqqb2aiaEeR9PeAiF47ztokFA3OMGGS Eqz/Ck2XQlcG06vFKhcja+zxgSqaZnjfKZp5TFuGRM6N6c4FSMGIqtLa0gSpaGLS RJPNRr5J4jGTg0aWfLFHhDHs2u1qUHAoTCECFbgqU1uV6WAzwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKfHhL512OZxSBM7PBVYEm5Z78UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmJmMTRmMDItNmI5Yy0z ODA0LWFhMjctZGQ1YTY4N2E0NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1roMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPrdWUwwMk+1F2kxuZzsaXsbbavpNGe+ruAr7W9dk0Ayvues3izV4Be DROd6XhkJ0tdXON9zXwzcq0XGb5KopKsPDDpHA2enYGM7JuVLruNvfkknqRpgyx2 O6H+TJ4FLardANWau8+ZKPZ5MKiCPw+a/mPG9vi7N2/3Ynl2ZG4uNkrT9MR/dEFK axZn7vnU5IsTWAJYYU9N2uD5xvnfsCmNbw5Y5Klc0h0nJgKj+nEIRnf9ZvRmGdV2 oDWQBd6/Lw3kRGiSJIMAGEEU3BfKFGaxd/7MAg14KDN3tY91lPi+iWqSCmr3tWyU GK2oXZsVgJ6UT5Yg717P9ti3WbDKkgY= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:35 2025 by rpki-client