$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa File: 8d5239f0-54e0-3aba-9274-5937c077877c.roa (raw, json) Hash identifier: UrdIDHDgkcmdJ+Jj5Y0XgYp3dFJNZz3p7m86U5qOZ64= Subject key identifier: D6:D1:76:3D:E7:35:3B:B2:80:29:AA:08:C0:B2:27:60:D6:27:8A:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B79BCC11D0B69B758C0B2A3E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 75.90.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c1:1d:0b:69:b7:58:c0:b2:a3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=319b9625-9fe7-4bf1-b9ed-ab7352a23ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a0:dc:12:09:79:95:31:82:aa:28:83:03:9d: 03:ba:b8:79:30:71:3f:32:3d:3d:c0:2d:11:53:c9: 90:9b:45:d5:c9:25:10:a8:c7:9f:81:86:ad:87:e7: 7d:80:af:da:fe:b2:72:45:9f:66:de:ec:85:ab:bc: 90:89:6e:e5:48:26:23:1b:28:3c:b4:a5:de:37:17: e9:90:45:bc:c7:2f:c5:4e:a1:84:23:83:cc:a1:fd: fc:ab:ab:20:ca:3a:89:9b:82:be:22:c5:47:07:b5: 29:32:2a:1a:2d:df:46:07:36:4f:2f:8b:2e:42:f6: 9b:38:21:f7:e4:00:25:dd:71:3f:11:d1:27:dd:ef: 66:3c:94:c3:a1:62:1c:e0:54:0c:27:57:ba:10:18: 0c:23:1f:47:6c:f7:39:e6:f8:2c:47:dc:b9:b6:59: c1:f1:11:07:76:f8:ad:cc:1a:d7:c3:b3:8d:cd:4e: 4f:2e:69:30:f2:cc:a8:cc:66:f0:2c:36:51:b6:5f: 92:34:86:43:33:8a:af:64:9d:23:c4:13:01:50:8a: 86:f9:69:e3:ca:9c:6a:a9:b2:b2:79:dc:7f:e8:ad: e7:38:ae:0d:bb:5e:0d:1b:dc:ac:3b:7f:66:6f:90: bb:1b:ce:fc:05:b6:8a:3d:14:ba:5e:6c:3a:16:84: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:76:3D:E7:35:3B:B2:80:29:AA:08:C0:B2:27:60:D6:27:8A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5239f0-54e0-3aba-9274-5937c077877c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:32:8f:23:8c:6d:5e:43:26:53:af:cf:95:f1:92:00:b1:d6: 1e:81:64:59:68:42:e2:1e:33:b5:cf:9c:02:5a:18:a2:06:f9: cd:4e:b7:77:09:e7:bc:8b:fc:f1:eb:de:9a:4c:5b:4c:69:cc: 1a:4a:a9:f5:d2:19:1e:56:5b:de:e4:bd:fc:ad:70:4e:a7:3e: 49:73:8d:d1:87:5d:43:cd:bd:a7:59:56:a1:d2:8c:e3:9c:0b: 77:83:8d:7e:e6:d6:f7:57:16:6f:69:b8:f7:44:c4:8c:89:cf: 3b:49:4a:72:e7:dc:5e:e1:e2:d6:2b:56:8a:ac:82:11:f7:3f: 36:8c:ae:e6:f5:f7:b1:2b:91:bc:18:18:38:91:f0:2f:b4:59: ba:a6:b6:d5:c8:35:77:51:0c:c6:d4:ea:93:95:ac:2a:c8:1c: e0:8f:e9:b4:e2:72:56:1d:b8:f4:68:f9:f4:aa:b3:62:a0:23: 8c:57:de:32:48:19:9f:0d:90:c4:60:cd:19:f7:10:44:30:6f: 90:ce:79:a6:1e:23:c8:18:82:de:9e:42:a2:a3:07:79:f8:cc: 7e:30:ac:47:34:93:be:05:da:a9:0c:ea:42:83:b2:b9:31:6e: 97:b7:df:2f:68:4d:cf:ca:e6:38:e1:12:9d:72:4e:cc:e8:3f: 67:2a:2a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMEdC2m3WMCyo+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MzE5Yjk2MjUtOWZlNy00YmYxLWI5ZWQtYWI3MzUyYTIzY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKDcEgl5lTGCqiiDA50Durh5MHE/Mj09wC0R U8mQm0XVySUQqMefgYath+d9gK/a/rJyRZ9m3uyFq7yQiW7lSCYjGyg8tKXeNxfp kEW8xy/FTqGEI4PMof38q6sgyjqJm4K+IsVHB7UpMioaLd9GBzZPL4suQvabOCH3 5AAl3XE/EdEn3e9mPJTDoWIc4FQMJ1e6EBgMIx9HbPc55vgsR9y5tlnB8REHdvit zBrXw7ONzU5PLmkw8syozGbwLDZRtl+SNIZDM4qvZJ0jxBMBUIqG+WnjypxqqbKy edx/6K3nOK4Nu14NG9ysO39mb5C7G878BbaKPRS6Xmw6FoRFEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbRdj3nNTuygCmqCMCyJ2DWJ4qFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGQ1MjM5ZjAtNTRlMC0z YWJhLTkyNzQtNTkzN2MwNzc4NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4yjyOMbV5DJlOvz5XxkgCx1h6BZFloQuIeM7XPnAJaGKIG+c1Ot3cJ 57yL/PHr3ppMW0xpzBpKqfXSGR5WW97kvfytcE6nPklzjdGHXUPNvadZVqHSjOOc C3eDjX7m1vdXFm9puPdExIyJzztJSnLn3F7h4tYrVoqsghH3PzaMrub197ErkbwY GDiR8C+0WbqmttXINXdRDMbU6pOVrCrIHOCP6bTiclYduPRo+fSqs2KgI4xX3jJI GZ8NkMRgzRn3EEQwb5DOeaYeI8gYgt6eQqKjB3n4zH4wrEc0k74F2qkM6kKDsrkx bpe33y9oTc/K5jjhEp1yTszoP2cqKlc= -----END CERTIFICATE-----Generated at Sat Oct 11 00:16:09 2025 by rpki-client