$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa File: 810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa (raw, json) Hash identifier: DEv16+wlfGAADCQednslOj+iQRCzOswew22EsH+Ett4= Subject key identifier: 35:01:59:EA:1A:73:F3:AC:5A:4E:8F:5A:8A:A3:32:E9:A7:1D:0E:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B6D2CA689FE59FF962E31CAA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 7029 IP address blocks: 75.91.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:a6:89:fe:59:ff:96:2e:31:ca:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=604bf35f-6472-4e81-9706-ce22c011ee0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c8:50:ac:42:20:40:48:c9:38:a6:05:d9:dc: ee:b2:ea:06:66:ff:f9:15:4a:f0:d2:b2:90:1f:21: 1e:49:bb:e0:23:2c:73:05:bc:8c:d3:54:ef:c7:b1: ee:13:78:2c:d8:8f:82:cf:95:03:07:b2:20:50:95: fd:a1:d2:2f:83:fc:5f:61:5f:80:82:85:89:73:56: d0:5a:4d:8f:9b:49:7c:78:f6:5e:9c:0b:c8:e4:cc: 23:6b:c9:4a:65:75:10:89:74:29:01:8a:0f:f6:2d: db:89:78:35:d0:cf:91:86:8d:6f:9a:1b:ce:88:6b: db:33:21:5e:de:de:b2:52:ee:ee:b2:cc:f0:55:fc: 84:87:d6:95:d2:e6:49:d4:31:cf:24:0f:ac:76:9f: 82:1d:b6:aa:8b:0d:93:25:d6:fd:99:ed:1a:47:49: 40:71:6a:31:59:4f:d4:80:8c:cc:c5:2e:5c:29:dd: c8:9c:a3:15:23:48:fe:c0:89:ac:e7:c2:70:dd:69: 6a:24:d5:f7:f6:f2:ec:44:7b:39:70:b4:94:61:01: 02:d3:a4:da:7d:25:87:32:9c:81:92:b2:e3:a0:8c: 6a:70:a2:31:c9:d5:b0:8e:1f:7d:27:1c:d8:cd:c8: 88:dd:d9:94:0a:23:29:b4:c2:14:79:24:ba:bd:c8: 13:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:01:59:EA:1A:73:F3:AC:5A:4E:8F:5A:8A:A3:32:E9:A7:1D:0E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/810b053f-56a8-3ccd-9af8-a5c6e9731b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b0:e0:dc:0f:e6:81:c2:87:76:e8:6a:ce:d7:e4:50:ce:e9: d1:dc:88:02:fc:30:fd:7a:5e:35:b8:85:58:09:bd:46:e7:f8: e5:6d:87:cd:30:74:0f:b7:b9:33:89:c9:f4:c6:9e:4e:30:74: 5f:29:3a:53:d2:d5:a7:2a:78:47:8f:bc:4a:e3:2b:cf:d0:27: 8f:d3:84:d0:df:75:06:0f:87:16:a8:32:88:44:3f:67:f2:20: 24:b0:26:4f:9b:ab:4a:e6:13:4a:05:ba:f4:38:39:e3:9a:a5: 71:19:c2:a0:de:bd:1b:71:ff:1c:e0:08:45:70:27:25:dd:ba: 7d:6c:fc:56:32:2c:44:99:94:ce:59:ce:2c:d4:2a:dc:48:41: 4b:9b:29:47:33:d9:ac:85:7a:6b:68:10:c1:b8:9b:6c:b7:53: e7:ad:66:b8:fd:a7:90:71:84:f2:53:cb:09:ea:19:ae:af:41: 7e:e7:5f:21:5b:a4:9b:fb:b2:51:c8:af:49:3c:db:d3:44:7e: 73:eb:80:21:73:65:1e:fb:46:0f:7c:dc:40:4b:3a:68:ea:a1: d7:64:17:93:07:92:f3:94:28:90:aa:6c:96:8d:23:b9:83:e8: 7d:46:15:91:6e:48:54:78:64:7c:09:b2:fe:e4:e0:cb:8f:14: 56:21:0c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLKaJ/ln/li4xyqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjA0YmYzNWYtNjQ3Mi00ZTgxLTk3MDYtY2UyMmMwMTFlZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMhQrEIgQEjJOKYF2dzusuoGZv/5FUrw0rKQ HyEeSbvgIyxzBbyM01Tvx7HuE3gs2I+Cz5UDB7IgUJX9odIvg/xfYV+AgoWJc1bQ Wk2Pm0l8ePZenAvI5Mwja8lKZXUQiXQpAYoP9i3biXg10M+Rho1vmhvOiGvbMyFe 3t6yUu7usszwVfyEh9aV0uZJ1DHPJA+sdp+CHbaqiw2TJdb9me0aR0lAcWoxWU/U gIzMxS5cKd3InKMVI0j+wIms58Jw3WlqJNX39vLsRHs5cLSUYQEC06TafSWHMpyB krLjoIxqcKIxydWwjh99JxzYzciI3dmUCiMptMIUeSS6vcgT+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUBWeoac/OsWk6PWoqjMumnHQ7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODEwYjA1M2YtNTZhOC0z Y2NkLTlhZjgtYTVjNmU5NzMxYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1uOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADew4NwP5oHCh3boas7X5FDO6dHciAL8MP16XjW4hVgJvUbn+OVth80w dA+3uTOJyfTGnk4wdF8pOlPS1acqeEePvErjK8/QJ4/ThNDfdQYPhxaoMohEP2fy ICSwJk+bq0rmE0oFuvQ4OeOapXEZwqDevRtx/xzgCEVwJyXdun1s/FYyLESZlM5Z zizUKtxIQUubKUcz2ayFemtoEMG4m2y3U+etZrj9p5BxhPJTywnqGa6vQX7nXyFb pJv7slHIr0k829NEfnPrgCFzZR77Rg983EBLOmjqoddkF5MHkvOUKJCqbJaNI7mD 6H1GFZFuSFR4ZHwJsv7k4MuPFFYhDNk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:49 2025 by rpki-client