$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa File: 5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa (raw, json) Hash identifier: HQ5OeoM886IgyLyuvXz6x4gQDh5hEijEVtlifwpVUbo= Subject key identifier: 41:15:40:9C:39:56:64:6A:70:26:03:16:9D:20:5F:07:40:DF:D2:58 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94421FDE7BF01158F6780E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.90.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:1f:de:7b:f0:11:58:f6:78:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=50c05318-9162-4a61-8b80-e942e09ff0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:27:cd:52:98:f6:8f:5e:d1:7c:63:a6:c0: 71:ac:5f:51:a4:2e:e5:ec:c7:11:84:9a:27:c1:19: 5e:f0:51:a0:df:da:7a:7a:a7:da:fe:db:fe:22:71: 69:c0:50:89:8e:ca:bd:4e:6c:bc:dc:08:86:5c:32: 59:8c:d6:8e:11:9f:86:12:48:fa:f1:19:33:94:55: 07:4d:ea:eb:01:7b:2a:60:26:1e:e6:58:89:65:86: c4:5c:b5:d3:25:31:4c:71:3c:05:4d:0a:68:b4:62: 4f:37:0f:a7:fc:35:82:fe:36:80:4f:73:8d:68:9c: 12:78:3c:0a:15:b0:02:fa:95:e8:64:46:4b:86:d3: 62:2c:91:f9:5f:48:ea:b2:29:5f:37:14:29:a3:85: 19:d4:9c:b1:78:bb:6b:c9:04:31:6b:7d:25:b6:81: 36:d1:2c:d5:db:ac:da:2e:51:ef:10:0b:28:d2:e1: 0f:3b:54:88:0b:5b:e4:01:1a:23:b1:4d:e3:68:08: 28:9f:86:2a:7b:0e:b1:06:a9:c6:4f:a8:27:6f:e1: 22:a1:07:02:67:88:81:df:3e:f0:16:3c:82:8d:e0: c4:fa:6c:b2:35:ea:31:a0:bd:06:20:7c:00:03:2f: f7:28:ee:c7:40:97:69:4a:5d:11:3c:aa:25:43:ae: ff:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:15:40:9C:39:56:64:6A:70:26:03:16:9D:20:5F:07:40:DF:D2:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:ff:a6:79:6f:52:da:e0:18:3e:fe:53:1a:15:d5:a8:bd: 1c:93:98:99:14:e7:1e:d0:be:02:80:8e:23:6c:d3:96:55:f9: ce:f3:3a:0e:36:60:a6:29:d7:52:f0:80:6f:77:9c:93:44:55: e3:62:4f:c8:19:10:04:55:d0:81:02:ad:c5:df:95:99:dc:2d: e3:b5:27:72:fb:55:40:80:75:f4:4c:19:b8:b3:fd:60:20:ce: c6:d7:66:5b:55:17:4e:7a:68:a5:f1:ac:6d:73:b1:05:25:aa: 47:b6:2d:cf:be:69:f6:4a:a5:de:a6:2f:b5:b3:40:0f:a6:ee: 65:63:3f:17:f2:17:23:04:5e:3e:5e:38:e4:72:16:b2:9c:61: 78:2f:21:28:32:5f:74:52:af:99:82:b4:68:9e:57:6b:39:ae: 26:a2:e2:44:09:a6:94:8d:5f:8c:bf:fc:69:97:0a:0e:d8:eb: f7:8c:63:be:0d:27:d9:f1:94:b5:e6:d1:d6:fc:29:c1:81:58: da:81:c6:01:9c:41:d7:d6:92:3e:19:b4:5e:1a:db:42:7e:48: 7b:e9:8a:80:46:b3:e7:f8:5b:cd:0c:53:2f:e7:df:63:5f:aa: 50:ab:d2:20:ce:a6:57:7c:8e:91:e3:e6:48:53:81:1e:47:e5: 1c:22:0e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQh/ee/ARWPZ4DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NTBjMDUzMTgtOTE2Mi00YTYxLThiODAtZTk0MmUwOWZmMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBYnzVKY9o9e0XxjpsBxrF9RpC7l7McRhJon wRle8FGg39p6eqfa/tv+InFpwFCJjsq9Tmy83AiGXDJZjNaOEZ+GEkj68RkzlFUH TerrAXsqYCYe5liJZYbEXLXTJTFMcTwFTQpotGJPNw+n/DWC/jaAT3ONaJwSeDwK FbAC+pXoZEZLhtNiLJH5X0jqsilfNxQpo4UZ1JyxeLtryQQxa30ltoE20SzV26za LlHvEAso0uEPO1SIC1vkARojsU3jaAgon4Yqew6xBqnGT6gnb+EioQcCZ4iB3z7w FjyCjeDE+myyNeoxoL0GIHwAAy/3KO7HQJdpSl0RPKolQ67/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEVQJw5VmRqcCYDFp0gXwdA39JYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY2ZjBmZDUtMzQ3MC0z OGVkLTg0NjYtODljYTEyY2ExNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATn/6Z5b1La4Bg+/lMaFdWovRyTmJkU5x7QvgKAjiNs05ZV+c7zOg42 YKYp11LwgG93nJNEVeNiT8gZEARV0IECrcXflZncLeO1J3L7VUCAdfRMGbiz/WAg zsbXZltVF056aKXxrG1zsQUlqke2Lc++afZKpd6mL7WzQA+m7mVjPxfyFyMEXj5e OORyFrKcYXgvISgyX3RSr5mCtGieV2s5riai4kQJppSNX4y//GmXCg7Y6/eMY74N J9nxlLXm0db8KcGBWNqBxgGcQdfWkj4ZtF4a20J+SHvpioBGs+f4W80MUy/n32Nf qlCr0iDOpld8jpHj5khTgR5H5RwiDlQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:58 2025 by rpki-client