$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa File: 803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa (raw, json) Hash identifier: IHpeLD8Gbfx9nj7nhlfzxb0yspKjV3iyvn+Shc7vqZQ= Subject key identifier: AE:8B:91:FF:A2:E8:DD:7C:9B:3D:AD:FD:C8:4F:D1:FB:2C:60:8E:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6BC772C0CB29D21AF39C1900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 7029 IP address blocks: 75.91.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:72:c0:cb:29:d2:1a:f3:9c:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=e399c8de-5a79-45ce-95ae-c127b4b45099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:b3:bb:45:0e:e4:7f:33:1b:d0:38:26:01: c5:f0:ba:26:be:b7:70:5a:f0:59:85:27:f3:f1:12: f9:09:1a:83:9b:65:2e:02:9b:83:df:60:5b:78:49: d7:f9:be:50:78:9f:ce:95:11:ac:35:4e:b1:ef:8c: 3b:90:42:40:f0:98:4f:72:ec:9b:24:56:cb:ce:f0: 73:78:89:8b:da:e8:fc:b3:6b:f1:60:b3:f0:4a:a5: 66:f4:1f:34:d9:67:ee:ab:ee:8b:12:9f:2b:28:bb: d9:5e:d9:2d:b8:54:cf:7f:5b:48:0f:58:3d:6f:2f: 3b:6f:05:48:ea:9b:55:c4:06:e7:6c:b0:20:b0:06: 99:e4:d3:85:ad:9e:7c:ff:12:31:02:00:70:d7:37: ce:44:ee:b0:9d:f5:1a:d3:fc:72:36:32:31:07:a1: 53:92:b5:56:10:52:4b:62:60:28:65:53:42:6d:f2: e4:fc:59:5a:77:f8:3b:ba:f9:d5:57:89:e1:44:1d: ac:ff:cb:6b:c2:c1:b4:dd:e7:bc:ef:6f:98:0b:cd: b3:9a:98:12:b4:1b:38:6c:1d:96:4c:b8:0f:84:61: 3b:dd:e7:67:5a:74:d7:aa:ba:83:1f:06:bc:53:de: e0:0b:9f:7f:98:0a:b9:ba:3f:2b:b6:a5:1c:3e:1d: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8B:91:FF:A2:E8:DD:7C:9B:3D:AD:FD:C8:4F:D1:FB:2C:60:8E:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ff:48:31:f3:d7:1a:6c:0c:de:1b:2a:96:90:96:a5:c8:6f: 75:51:0b:aa:a7:12:14:78:1a:58:bd:40:72:f6:68:5c:93:02: e7:51:a7:11:43:13:8c:2a:35:2f:ea:1e:e3:c4:48:b7:90:c8: 12:de:01:02:9d:5e:9e:52:2b:e2:96:5d:4a:12:70:90:41:09: 1a:c2:98:73:ec:52:58:d3:57:04:71:ff:1c:70:b0:06:4f:b8: ce:a2:3e:6d:11:7d:95:aa:b5:4c:e1:a8:89:a6:bf:85:20:d8: 68:5f:cd:d4:2b:67:af:d2:e8:86:e6:34:e6:7d:63:59:11:af: 60:c9:12:a9:87:2b:60:53:9d:16:86:01:19:4d:eb:34:df:37: e1:36:e2:2a:3f:ec:da:44:1a:09:fb:12:4c:29:5c:88:ac:8c: f3:ad:e2:7a:de:96:45:55:56:15:ba:7b:35:8b:34:df:8a:b2: 5b:98:0d:a6:16:b2:46:0c:17:26:46:8b:da:fc:be:8b:e1:ba: 92:2b:48:6d:57:72:5b:47:13:66:93:cd:9c:af:08:1f:0e:1f: 6e:9d:d0:a4:67:41:40:e2:e9:b3:83:95:7b:3f:e0:b2:e6:41: 3c:cb:17:9f:31:de:40:4c:5c:7a:aa:92:37:7b:d1:26:21:f3: 2e:57:81:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx3LAyynSGvOcGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZTM5OWM4ZGUtNWE3OS00NWNlLTk1YWUtYzEyN2I0YjQ1MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAyzu0UO5H8zG9A4JgHF8LomvrdwWvBZhSfz 8RL5CRqDm2UuApuD32BbeEnX+b5QeJ/OlRGsNU6x74w7kEJA8JhPcuybJFbLzvBz eImL2uj8s2vxYLPwSqVm9B802Wfuq+6LEp8rKLvZXtktuFTPf1tID1g9by87bwVI 6ptVxAbnbLAgsAaZ5NOFrZ58/xIxAgBw1zfORO6wnfUa0/xyNjIxB6FTkrVWEFJL YmAoZVNCbfLk/Flad/g7uvnVV4nhRB2s/8trwsG03ee872+YC82zmpgStBs4bB2W TLgPhGE73ednWnTXqrqDHwa8U97gC59/mAq5uj8rtqUcPh3txQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6Lkf+i6N18mz2t/chP0fssYI5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODAzZGM4ZjEtNWEyOS0z YjdmLWE5ZTQtNmQyZDVmOTU5NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv/SDHz1xpsDN4bKpaQlqXIb3VRC6qnEhR4Gli9QHL2aFyTAudRpxFD E4wqNS/qHuPESLeQyBLeAQKdXp5SK+KWXUoScJBBCRrCmHPsUljTVwRx/xxwsAZP uM6iPm0RfZWqtUzhqImmv4Ug2GhfzdQrZ6/S6IbmNOZ9Y1kRr2DJEqmHK2BTnRaG ARlN6zTfN+E24io/7NpEGgn7EkwpXIisjPOt4nrelkVVVhW6ezWLNN+KsluYDaYW skYMFyZGi9r8vovhupIrSG1XcltHE2aTzZyvCB8OH26d0KRnQUDi6bODlXs/4LLm QTzLF58x3kBMXHqqkjd70SYh8y5XgQc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:57:23 2025 by rpki-client