$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8fbdbfb-ae68-3415-a429-36250907ac93.roa File: a8fbdbfb-ae68-3415-a429-36250907ac93.roa (raw, json) Hash identifier: rc+YiiSf9cqLAyhrb2XeT4Og838T/7hcNPhI0zxZMI8= Subject key identifier: 88:DF:5D:83:49:1D:6C:43:52:FB:C8:81:C6:92:51:BB:E6:93:D3:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B96E2B86093559EB8C835EB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8fbdbfb-ae68-3415-a429-36250907ac93.roa Signing time: Mon 20 Oct 2025 23:35:46 +0000 ROA not before: Mon 20 Oct 2025 23:35:46 +0000 ROA not after: Mon 19 Jan 2026 00:35:46 +0000 asID: 7029 IP address blocks: 75.90.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:e2:b8:60:93:55:9e:b8:c8:35:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 23:35:46 2025 GMT Not After : Jan 19 00:35:46 2026 GMT Subject: CN=b09fb234-853f-42f1-a22f-d2b25aec5019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ef:4c:4d:10:bd:1a:23:fb:dc:ad:f2:05:76: 2d:1d:3c:af:1f:f9:c5:39:c6:42:70:72:a7:ac:12: da:63:56:3f:bb:81:bb:52:83:93:12:64:65:cd:41: f6:d8:e1:75:bc:cd:48:ad:f1:a8:f3:ea:6f:ee:e8: e0:ff:78:01:9f:d2:66:31:89:55:05:7b:85:bf:2c: 08:62:57:f4:22:e3:f2:8d:c0:9d:2f:6b:e1:dc:3e: 11:8b:10:58:32:dd:f4:ec:e5:f5:1b:e8:d2:7c:b7: c7:be:45:c5:9a:7c:50:ba:f3:70:a8:37:47:e3:e6: ca:45:00:52:94:f7:b5:b6:9f:89:6d:e0:e2:6b:5c: 9b:ae:5c:22:52:4c:9c:e9:df:02:83:85:36:6a:9d: 8d:e9:12:5e:42:3e:db:e6:c6:4d:38:56:c2:32:32: 70:3d:03:95:65:a8:a4:ed:99:4c:6f:27:80:6d:bd: 75:df:33:c8:30:5f:a8:69:a3:c3:49:a0:40:61:79: 31:d6:3b:60:34:3a:9c:12:84:32:e3:e5:79:b6:2d: 1f:71:0e:02:d9:d3:e6:5d:40:65:c7:40:0a:17:fa: 16:88:0f:ce:b6:7a:13:19:12:31:e2:65:1c:00:58: 58:3c:17:7e:6a:48:64:c9:1c:b1:89:08:76:d8:22: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:5D:83:49:1D:6C:43:52:FB:C8:81:C6:92:51:BB:E6:93:D3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8fbdbfb-ae68-3415-a429-36250907ac93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ef:90:3a:98:8b:fb:56:d8:05:c9:ac:a7:f1:e3:c7:2a:ed: f1:d2:1c:48:ca:e8:25:f4:42:76:20:1d:a9:ec:30:45:37:d5: d4:a7:39:87:ee:5a:66:3d:ac:e1:0f:36:2c:74:7a:86:3d:ef: 52:15:f7:ca:68:93:b9:da:ea:50:20:af:fc:cc:ce:31:75:24: f3:66:c9:c3:10:6c:89:c2:f1:8e:d9:ad:c5:04:36:6e:03:77: eb:26:68:23:99:dc:f6:7c:6d:08:67:30:c7:93:f6:d7:ab:3c: 88:73:a8:09:b8:28:f7:c3:07:9b:07:1e:bb:be:53:9f:4a:b1: fc:5c:73:5c:14:0d:c2:9d:a6:41:7a:0d:96:8d:23:2d:f5:a3: 31:7a:de:53:81:31:dd:45:71:7f:f3:c8:d9:7f:19:b8:eb:ce: d9:88:db:7c:ea:03:d8:af:f1:03:9e:02:5d:95:da:55:94:7a: 46:50:0b:f6:f7:74:4d:9e:de:95:a7:c3:59:dc:78:95:76:e3: 12:e3:11:58:8f:02:f5:ea:dc:34:be:a3:e2:16:8e:4d:86:a9: 66:34:97:60:6f:b5:a8:3b:5c:7e:5c:0a:01:0a:e7:d0:61:dd: f0:fb:9c:1e:a8:6e:46:f9:04:a5:a7:e7:30:34:72:92:c4:ba: 25:2c:96:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuW4rhgk1WeuMg16wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDIzMzU0NloXDTI2MDExOTAwMzU0NlowLzEtMCsGA1UEAxMk YjA5ZmIyMzQtODUzZi00MmYxLWEyMmYtZDJiMjVhZWM1MDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue9MTRC9GiP73K3yBXYtHTyvH/nFOcZCcHKn rBLaY1Y/u4G7UoOTEmRlzUH22OF1vM1IrfGo8+pv7ujg/3gBn9JmMYlVBXuFvywI Ylf0IuPyjcCdL2vh3D4RixBYMt307OX1G+jSfLfHvkXFmnxQuvNwqDdH4+bKRQBS lPe1tp+JbeDia1ybrlwiUkyc6d8Cg4U2ap2N6RJeQj7b5sZNOFbCMjJwPQOVZaik 7ZlMbyeAbb113zPIMF+oaaPDSaBAYXkx1jtgNDqcEoQy4+V5ti0fcQ4C2dPmXUBl x0AKF/oWiA/OtnoTGRIx4mUcAFhYPBd+akhkyRyxiQh22CJzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjfXYNJHWxDUvvIgcaSUbvmk9NgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYThmYmRiZmItYWU2OC0z NDE1LWE0MjktMzYyNTA5MDdhYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1pmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7vkDqYi/tW2AXJrKfx48cq7fHSHEjK6CX0QnYgHansMEU31dSnOYfu WmY9rOEPNix0eoY971IV98pok7na6lAgr/zMzjF1JPNmycMQbInC8Y7ZrcUENm4D d+smaCOZ3PZ8bQhnMMeT9terPIhzqAm4KPfDB5sHHru+U59Ksfxcc1wUDcKdpkF6 DZaNIy31ozF63lOBMd1FcX/zyNl/GbjrztmI23zqA9iv8QOeAl2V2lWUekZQC/b3 dE2e3pWnw1nceJV24xLjEViPAvXq3DS+o+IWjk2GqWY0l2Bvtag7XH5cCgEK59Bh 3fD7nB6obkb5BKWn5zA0cpLEuiUslvY= -----END CERTIFICATE-----Generated at Tue Oct 21 13:58:18 2025 by rpki-client