$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa File: 549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa (raw, json) Hash identifier: K1PYCBPyP6xWqJX8cCWKnMayNdgqtO9jTxE3RDxaJkw= Subject key identifier: BC:B9:C5:6B:EA:34:96:2D:DF:53:6A:4D:C2:84:7F:60:52:71:78:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA69E14F6810EB6A1F880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 75.91.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a6:9e:14:f6:81:0e:b6:a1:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=653a0d99-33aa-4f6f-91d2-dadf2f7f2429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:8f:b7:9f:73:ab:fa:77:a8:55:5c:b8:bf: 78:13:50:da:12:26:9b:f6:dd:35:d5:fb:53:15:bf: 9f:67:a1:01:02:95:8a:e6:71:bd:cb:cd:6d:24:58: 72:00:18:ed:e8:5f:d9:46:96:e5:f6:be:69:c0:d5: 00:98:92:04:e2:7d:89:03:dd:85:9f:34:b9:cb:67: ba:b9:87:cf:b2:d0:c6:e6:49:fa:e8:af:f2:00:9b: e4:d2:01:5d:3c:10:fc:a3:fe:da:35:e6:a8:60:10: 11:39:de:28:03:ca:9e:1b:88:7d:15:6c:60:5c:25: a2:57:4f:8c:93:db:9e:9b:c1:a9:36:2d:a4:29:03: 43:85:26:a9:cc:1d:c3:2a:55:30:fc:d9:8b:aa:d5: 35:66:ab:14:bc:88:d9:d2:ab:2d:7d:6c:17:cc:9c: 23:bf:dd:aa:41:3e:22:e5:04:81:23:fd:f4:5d:4e: 52:6d:f3:b1:cb:b9:d1:6a:4e:ea:9c:56:72:07:b5: 43:cd:be:60:4f:2b:56:74:b2:5c:8f:5e:1b:8d:8c: 99:e0:eb:6f:84:d8:05:d7:c4:77:6f:b8:43:f4:f7: 19:0f:11:77:2f:2d:77:02:ef:d5:0b:e0:99:19:78: 48:b4:fc:80:fe:12:e4:86:75:3d:e2:09:71:0f:86: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B9:C5:6B:EA:34:96:2D:DF:53:6A:4D:C2:84:7F:60:52:71:78:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/549d74e3-f625-3ef3-96be-5a6bff7bb1e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ef:b7:b8:c1:25:90:16:11:cc:9a:5d:be:bc:03:bd:c8:a9: ee:86:b8:76:02:7a:28:54:bb:5a:34:9d:3c:54:30:ae:72:05: 00:b8:8f:fb:71:80:1b:82:5c:6c:fd:55:70:16:95:c2:f7:0a: 96:e4:18:43:f4:c4:63:40:4c:91:f7:e9:5a:ca:aa:a9:2f:fd: 03:19:cf:0c:40:b1:02:f4:db:16:68:73:5d:a1:96:c6:50:ad: e2:df:b1:b2:9f:d6:d0:a0:43:2d:61:bf:66:f1:91:89:67:39: dd:df:55:25:09:54:ec:26:f2:13:0a:99:f7:4d:0f:e1:99:3d: 4e:bc:48:c7:d4:a0:49:19:59:47:b9:c4:35:e8:15:9e:f6:95: 9a:02:72:34:56:23:78:61:65:ea:ed:72:74:2a:ee:c1:e8:c0: dc:fd:14:bb:ee:bf:96:94:41:2e:3b:e6:6d:9e:89:09:c6:b0: 59:33:c4:56:44:a9:2c:3c:5b:49:a3:97:24:ba:93:e3:4b:9d: 3a:ef:99:5e:da:fb:99:ae:9f:bb:ab:2f:9f:1d:de:9f:6a:c2: 86:82:82:1d:7e:db:25:86:4f:b1:90:27:c5:e5:d2:a8:b4:ca: 7c:3b:09:0c:48:59:d5:64:a0:a9:88:bd:43:b0:5c:cb:96:51: ed:3c:4e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKaeFPaBDrah+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjUzYTBkOTktMzNhYS00ZjZmLTkxZDItZGFkZjJmN2YyNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2KPt59zq/p3qFVcuL94E1DaEiab9t011ftT Fb+fZ6EBApWK5nG9y81tJFhyABjt6F/ZRpbl9r5pwNUAmJIE4n2JA92FnzS5y2e6 uYfPstDG5kn66K/yAJvk0gFdPBD8o/7aNeaoYBAROd4oA8qeG4h9FWxgXCWiV0+M k9uem8GpNi2kKQNDhSapzB3DKlUw/NmLqtU1ZqsUvIjZ0qstfWwXzJwjv92qQT4i 5QSBI/30XU5SbfOxy7nRak7qnFZyB7VDzb5gTytWdLJcj14bjYyZ4OtvhNgF18R3 b7hD9PcZDxF3Ly13Au/VC+CZGXhItPyA/hLkhnU94glxD4aW0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy5xWvqNJYt31NqTcKEf2BScXjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTQ5ZDc0ZTMtZjYyNS0z ZWYzLTk2YmUtNWE2YmZmN2JiMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjvt7jBJZAWEcyaXb68A73Iqe6GuHYCeihUu1o0nTxUMK5yBQC4j/tx gBuCXGz9VXAWlcL3CpbkGEP0xGNATJH36VrKqqkv/QMZzwxAsQL02xZoc12hlsZQ reLfsbKf1tCgQy1hv2bxkYlnOd3fVSUJVOwm8hMKmfdND+GZPU68SMfUoEkZWUe5 xDXoFZ72lZoCcjRWI3hhZertcnQq7sHowNz9FLvuv5aUQS475m2eiQnGsFkzxFZE qSw8W0mjlyS6k+NLnTrvmV7a+5mun7urL58d3p9qwoaCgh1+2yWGT7GQJ8Xl0qi0 ynw7CQxIWdVkoKmIvUOwXMuWUe08Tl4= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:41 2025 by rpki-client