$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa File: aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa (raw, json) Hash identifier: /9O4Xg+DvYuMlRn+8IT/BgSUEXuL9StmVMCDqXfiAIg= Subject key identifier: FE:EC:E1:AC:B8:B2:46:3B:B0:D4:6C:05:05:71:D7:69:3C:20:09:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B92DD88C0187AE0E068DF4300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 7029 IP address blocks: 75.91.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:88:c0:18:7a:e0:e0:68:df:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=7d65079f-528f-4cd9-8801-c6122dada237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a1:d1:c1:70:7c:47:90:c1:9c:73:a1:56:f0: 6f:46:49:d9:39:2d:26:23:70:01:31:b1:17:db:2f: f2:1c:46:67:58:f3:7f:69:87:08:de:e1:d3:c6:31: c7:bc:59:bc:69:01:49:f8:a9:2f:a3:36:2e:f8:32: 3d:de:cb:a0:62:92:d5:9a:c8:20:11:34:a1:63:95: 7a:ce:35:23:18:79:d2:1d:5f:96:90:91:28:ea:90: 27:19:85:d2:6a:0e:be:04:15:fc:6e:7f:f2:09:66: e0:e8:04:2d:c5:d4:a4:9a:8b:23:6c:82:28:3b:a6: 28:7b:33:6a:8f:aa:f7:30:dd:ef:42:93:59:7c:d2: 72:78:e0:3d:73:07:6f:72:72:de:c3:7f:8c:ce:ba: 95:a8:95:54:21:5b:a9:7c:a5:ed:f2:83:52:fc:e3: 58:95:5c:07:40:36:a6:38:be:26:4a:ce:b2:38:68: 1d:19:d7:54:96:ec:80:1f:70:6b:91:e3:ad:26:9e: 9d:56:2f:f8:a8:62:29:38:5e:3a:a6:2a:06:21:d0: d0:95:b3:c8:b5:62:fb:c1:e8:dc:d7:c1:78:c7:a2: d3:75:e6:63:39:da:57:2f:a1:3c:16:b5:0f:5a:66: 4c:a4:71:32:d1:b4:72:e1:ef:65:8a:0a:60:ac:db: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EC:E1:AC:B8:B2:46:3B:B0:D4:6C:05:05:71:D7:69:3C:20:09:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a0:57:7d:5b:57:f3:e1:af:33:c8:96:93:57:e0:66:14:8c: 7b:82:61:c6:9c:94:ec:1a:d7:54:d8:81:cc:94:a4:a9:71:11: 00:dc:bd:19:7f:a2:a4:bd:f9:93:4e:45:6a:5f:a8:05:40:cb: 72:14:fb:d4:14:81:c8:e8:b8:9b:e1:aa:bb:eb:7c:87:f2:80: bd:df:93:44:eb:70:e7:2c:e6:2b:2f:ea:8a:44:d6:8e:0f:e8: d5:ad:43:41:b3:9f:c3:c0:39:18:84:30:80:54:6e:21:a7:f4: a1:49:63:95:40:30:4e:18:3c:9f:96:84:8e:cf:e2:1a:f2:d5: 90:97:64:2f:9b:3c:8a:d1:4b:fe:5f:a8:24:11:13:48:bf:76: b0:fd:8e:ce:0e:6d:aa:21:13:fc:90:6e:c1:f9:02:c1:bc:4b: 42:88:0d:09:fd:0d:a7:0b:75:d7:f3:52:85:c1:ce:75:09:10: e9:18:8b:07:d1:4e:e6:8a:bf:ce:b0:27:bb:1e:a0:77:7f:03: dd:a4:8b:47:60:dd:b0:b8:d9:7c:ba:d1:56:3c:ec:64:40:3d: ce:f7:18:88:22:ac:21:76:b7:d1:51:1b:ff:87:03:9d:26:58: 27:67:03:63:af:57:85:46:ab:fe:89:3b:40:36:00:73:97:b6: 30:7e:e8:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YjAGHrg4GjfQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk N2Q2NTA3OWYtNTI4Zi00Y2Q5LTg4MDEtYzYxMjJkYWRhMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76HRwXB8R5DBnHOhVvBvRknZOS0mI3ABMbEX 2y/yHEZnWPN/aYcI3uHTxjHHvFm8aQFJ+KkvozYu+DI93sugYpLVmsggETShY5V6 zjUjGHnSHV+WkJEo6pAnGYXSag6+BBX8bn/yCWbg6AQtxdSkmosjbIIoO6YoezNq j6r3MN3vQpNZfNJyeOA9cwdvcnLew3+MzrqVqJVUIVupfKXt8oNS/ONYlVwHQDam OL4mSs6yOGgdGddUluyAH3BrkeOtJp6dVi/4qGIpOF46pioGIdDQlbPItWL7wejc 18F4x6LTdeZjOdpXL6E8FrUPWmZMpHEy0bRy4e9ligpgrNu1TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7s4ay4skY7sNRsBQVx12k8IAmCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVjN2M4NzgtZmNmNi0z ZjRiLTlhNDAtNmQyMDU4NWQ1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKgV31bV/PhrzPIlpNX4GYUjHuCYcaclOwa11TYgcyUpKlxEQDcvRl/ oqS9+ZNORWpfqAVAy3IU+9QUgcjouJvhqrvrfIfygL3fk0TrcOcs5isv6opE1o4P 6NWtQ0Gzn8PAORiEMIBUbiGn9KFJY5VAME4YPJ+WhI7P4hry1ZCXZC+bPIrRS/5f qCQRE0i/drD9js4ObaohE/yQbsH5AsG8S0KIDQn9DacLddfzUoXBznUJEOkYiwfR TuaKv86wJ7seoHd/A92ki0dg3bC42Xy60VY87GRAPc73GIgirCF2t9FRG/+HA50m WCdnA2OvV4VGq/6JO0A2AHOXtjB+6Pk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:48 2025 by rpki-client