$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa File: 12f6ec73-a984-3a93-9e1b-848fb948dd73.roa (raw, json) Hash identifier: RfQ8TEloBxII8llWLyt5ZkfRSJOqyKWtMcTHgBLDeak= Subject key identifier: B3:53:8C:8E:23:A9:29:20:4A:97:2E:BA:6B:76:94:C1:1D:6D:88:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B944223E7BD9B80162DB45A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.90.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:23:e7:bd:9b:80:16:2d:b4:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=2b159b7d-8502-4143-bdcc-ad8476f05826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:2e:0f:d6:fb:c3:4a:2e:7f:e2:47:a4:46: e2:71:fe:3a:ee:17:65:1b:80:fa:49:5d:d7:9f:93: c5:54:38:08:11:f1:b9:b7:5a:50:38:3b:5b:c8:d2: f3:16:ba:b2:26:0b:4b:5f:cf:63:17:df:38:3e:e8: ab:dd:af:6b:ef:79:5d:00:df:67:e4:ab:02:14:3a: e7:f1:63:cd:2d:5a:42:09:42:98:db:6d:78:7d:2a: 02:fa:5c:2e:5f:cd:b1:cd:0c:06:a3:c3:e1:aa:53: ab:d4:e2:51:0e:3a:1d:5c:2f:00:22:2a:77:8e:58: 0a:94:97:6f:cc:dd:e0:d8:68:ed:58:e8:ed:5a:49: cb:c4:16:69:3c:09:7f:4f:06:15:cb:59:5d:96:94: 2e:f6:38:c9:07:63:28:84:f1:c2:43:30:85:8a:95: 74:7e:28:fa:ed:8f:65:42:a0:6a:62:1a:6d:ad:5c: 01:44:4e:f7:9b:8c:78:c8:05:78:d7:3f:2e:52:71: 9d:f6:eb:f2:c3:44:c3:0d:4d:72:c9:1c:43:dd:e0: d7:5f:d8:87:af:7e:78:7a:12:0b:4b:65:f6:9e:e4: 60:d3:13:d8:78:91:4a:55:5a:b9:ba:b6:f7:40:63: 1b:91:d1:f9:ec:28:eb:e9:d9:34:4d:18:36:36:4f: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:53:8C:8E:23:A9:29:20:4A:97:2E:BA:6B:76:94:C1:1D:6D:88:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12f6ec73-a984-3a93-9e1b-848fb948dd73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:18:a9:4a:0f:e7:d2:af:be:6e:e8:94:1a:e5:4b:4c:5b:c5: 25:e2:56:eb:0b:2b:91:77:d6:66:e8:28:e3:78:3c:4d:b1:57: 6b:1f:16:57:d0:5c:ae:59:19:4f:04:99:88:8e:0e:7d:1e:bf: e4:29:8a:56:6e:b9:c3:55:e0:b7:97:7f:79:9e:b8:48:f1:d7: 01:c1:7d:d3:89:bc:30:7e:21:e8:92:1b:3c:4b:aa:25:05:5d: b6:37:48:19:21:20:e2:c2:0b:96:9f:d8:81:86:61:ab:0f:b2: 41:42:40:c1:b3:6a:f5:ac:d5:e6:8e:c2:e9:a0:91:f1:54:e6: 75:d7:85:35:b8:a1:c5:53:0f:68:24:ac:31:3f:dc:5c:06:fd: 5f:1b:21:df:c5:d2:7b:76:0e:b2:6e:a7:63:ae:57:b9:49:69: d6:bd:d3:1c:72:8f:67:a6:19:1d:09:04:e2:50:e5:45:49:1c: 79:30:6d:1c:1e:45:6f:d1:3b:5d:03:e3:2a:a0:7d:c8:a7:8f: 53:19:1a:6b:c9:b4:da:44:5d:b2:bf:8b:13:5b:ef:4e:1e:35: 2d:31:96:6b:5c:d2:5b:32:07:70:4a:06:07:40:f7:a0:3f:77: e4:76:70:3a:fa:34:59:f4:da:33:75:26:1e:4f:6e:ed:ac:66: 43:eb:c6:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiPnvZuAFi20WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MmIxNTliN2QtODUwMi00MTQzLWJkY2MtYWQ4NDc2ZjA1ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAwuD9b7w0ouf+JHpEbicf467hdlG4D6SV3X n5PFVDgIEfG5t1pQODtbyNLzFrqyJgtLX89jF984Puir3a9r73ldAN9n5KsCFDrn 8WPNLVpCCUKY2214fSoC+lwuX82xzQwGo8PhqlOr1OJRDjodXC8AIip3jlgKlJdv zN3g2GjtWOjtWknLxBZpPAl/TwYVy1ldlpQu9jjJB2MohPHCQzCFipV0fij67Y9l QqBqYhptrVwBRE73m4x4yAV41z8uUnGd9uvyw0TDDU1yyRxD3eDXX9iHr354ehIL S2X2nuRg0xPYeJFKVVq5urb3QGMbkdH57Cjr6dk0TRg2Nk8leQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNTjI4jqSkgSpcuumt2lMEdbYjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJmNmVjNzMtYTk4NC0z YTkzLTllMWItODQ4ZmI5NDhkZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1r0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgYqUoP59Kvvm7olBrlS0xbxSXiVusLK5F31mboKON4PE2xV2sfFlfQ XK5ZGU8EmYiODn0ev+QpilZuucNV4LeXf3meuEjx1wHBfdOJvDB+IeiSGzxLqiUF XbY3SBkhIOLCC5af2IGGYasPskFCQMGzavWs1eaOwumgkfFU5nXXhTW4ocVTD2gk rDE/3FwG/V8bId/F0nt2DrJup2OuV7lJada90xxyj2emGR0JBOJQ5UVJHHkwbRwe RW/RO10D4yqgfcinj1MZGmvJtNpEXbK/ixNb704eNS0xlmtc0lsyB3BKBgdA96A/ d+R2cDr6NFn02jN1Jh5Pbu2sZkPrxr0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:21 2025 by rpki-client