$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa File: 318d2a9a-0afe-3947-b263-dd16183e227e.roa (raw, json) Hash identifier: 3kEdQLykygmPW/dtLZ8UYyPG68I0oEIFmSQGC5amZCM= Subject key identifier: 40:B0:40:6A:CC:C0:7D:6E:7F:1B:67:82:E2:41:17:7D:D5:B7:7B:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA674576BE0CD88DFD580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 75.91.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a6:74:57:6b:e0:cd:88:df:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=3737dc1a-1d38-470c-8475-2ee4a3392f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:bb:02:d1:7d:8d:22:6d:0b:be:6f:46:5e: 62:9d:7d:34:5b:a3:a4:9d:d8:e8:51:44:e1:64:da: 5e:28:26:ba:5e:51:1a:9b:70:3f:a4:f9:f7:a2:01: 7c:48:4f:dd:3a:89:6e:7e:52:72:e6:7c:84:11:02: 10:6e:b2:b8:8c:77:fa:e1:ce:16:ac:bf:31:a4:58: d0:93:7b:d7:c4:68:71:c6:48:6e:5b:85:26:e4:85: d1:02:dd:e5:32:8a:0a:ba:a3:5d:03:65:b4:7d:7f: 32:ce:b4:28:0a:ca:09:d9:51:8a:ce:f0:d2:6b:78: eb:b0:9c:a9:d1:12:8d:27:4f:52:63:55:fa:ac:2d: 82:36:c3:55:a4:e3:11:30:e1:24:f0:08:71:a3:b5: 2f:1e:18:6a:77:e4:3a:2f:8b:c7:4c:aa:20:7c:3f: 70:0d:b0:6b:ed:11:fb:e6:fb:42:c8:f6:28:25:79: d6:fa:5e:0e:b9:71:89:ea:ea:e6:d3:24:2a:8f:df: 2a:c8:81:22:10:ca:06:8e:ab:78:b5:77:ce:5a:cf: 17:03:16:2b:d0:58:16:4c:bb:ef:c9:93:d4:2e:c1: 58:95:eb:36:cf:8a:22:b4:09:a2:8f:34:08:60:d0: 59:8a:dd:cd:4c:70:66:b9:18:2d:8c:df:6e:38:5b: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:40:6A:CC:C0:7D:6E:7F:1B:67:82:E2:41:17:7D:D5:B7:7B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/318d2a9a-0afe-3947-b263-dd16183e227e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:71:0f:34:0b:8b:1e:28:57:12:13:74:9e:72:83:2a:e9:81: ff:de:8e:fb:33:a6:50:89:c5:0f:84:12:d7:ce:94:45:a9:fe: 96:a7:12:5e:b4:9f:8b:c8:62:5a:7b:ca:b2:ed:5a:f3:68:ec: c9:01:ca:63:a5:ae:f5:f4:d8:95:86:ce:ba:de:09:c0:02:58: 84:1a:5c:b1:a4:ad:02:2c:3b:0b:79:e2:19:a3:c3:18:36:b0: 1a:c9:eb:6a:5c:a1:cc:49:f2:7f:7d:3e:fc:5b:aa:5c:59:5a: 99:1e:7d:f9:09:94:8c:f9:41:8f:5b:b4:ff:5e:23:bf:cd:aa: 0e:2a:29:ac:9f:49:1e:cb:dd:ea:dd:cc:22:d9:ab:25:05:5c: 9e:91:3a:67:52:60:22:f7:15:7b:b4:8a:69:8b:17:79:fe:ba: 83:c0:09:49:a5:e9:0f:d0:b0:31:d4:34:f3:14:04:11:b7:8b: 9c:4b:da:dc:54:ae:21:5e:c7:88:5f:a8:b7:52:4e:81:8c:4e: 39:e3:be:b7:47:37:20:96:83:c0:17:b9:c8:d0:18:d9:b4:61: 40:2c:6c:a7:f0:cc:ab:7e:9d:53:fd:3e:c4:90:3c:56:59:b0: af:a0:37:ec:38:bd:ea:19:22:91:93:36:2b:0a:3c:4d:18:da: 05:79:35:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKZ0V2vgzYjf1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzczN2RjMWEtMWQzOC00NzBjLTg0NzUtMmVlNGEzMzkyZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCG7AtF9jSJtC75vRl5inX00W6OkndjoUUTh ZNpeKCa6XlEam3A/pPn3ogF8SE/dOoluflJy5nyEEQIQbrK4jHf64c4WrL8xpFjQ k3vXxGhxxkhuW4Um5IXRAt3lMooKuqNdA2W0fX8yzrQoCsoJ2VGKzvDSa3jrsJyp 0RKNJ09SY1X6rC2CNsNVpOMRMOEk8Ahxo7UvHhhqd+Q6L4vHTKogfD9wDbBr7RH7 5vtCyPYoJXnW+l4OuXGJ6urm0yQqj98qyIEiEMoGjqt4tXfOWs8XAxYr0FgWTLvv yZPULsFYles2z4oitAmijzQIYNBZit3NTHBmuRgtjN9uOFsQQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECwQGrMwH1ufxtnguJBF33Vt3tKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE4ZDJhOWEtMGFmZS0z OTQ3LWIyNjMtZGQxNjE4M2UyMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRxDzQLix4oVxITdJ5ygyrpgf/ejvszplCJxQ+EEtfOlEWp/panEl60 n4vIYlp7yrLtWvNo7MkBymOlrvX02JWGzrreCcACWIQaXLGkrQIsOwt54hmjwxg2 sBrJ62pcocxJ8n99PvxbqlxZWpkeffkJlIz5QY9btP9eI7/Nqg4qKayfSR7L3erd zCLZqyUFXJ6ROmdSYCL3FXu0immLF3n+uoPACUml6Q/QsDHUNPMUBBG3i5xL2txU riFex4hfqLdSToGMTjnjvrdHNyCWg8AXucjQGNm0YUAsbKfwzKt+nVP9PsSQPFZZ sK+gN+w4veoZIpGTNisKPE0Y2gV5NSI= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:25 2025 by rpki-client