$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4d30c84-efef-3730-92a0-02781784140e.roa File: f4d30c84-efef-3730-92a0-02781784140e.roa (raw, json) Hash identifier: ORwYI+Cuqh3LiZwaV9mGL6hxUJsB3daTr7H4u/T/oFQ= Subject key identifier: 52:70:D0:82:5F:C3:B0:A0:D4:6C:CF:E5:DA:B3:F2:49:3C:01:99:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B94422734DC7E70B550946C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4d30c84-efef-3730-92a0-02781784140e.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.91.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:27:34:dc:7e:70:b5:50:94:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=f3094fa5-5252-4400-8854-f271cbbcde78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:af:b5:a8:b8:b1:b4:d7:1a:f4:3d:8a:2f: 89:37:e9:b6:7a:ce:b1:1b:52:83:b2:93:ef:c7:7e: 7a:28:45:dc:17:2f:da:49:51:78:f5:e9:f1:cd:81: 69:1a:3a:86:4e:dd:e0:23:c6:0f:f0:73:7d:b0:43: 8d:10:48:26:58:dd:e8:ae:47:88:a0:6f:2d:f0:77: ec:72:58:a4:b1:3e:af:f8:cc:77:5a:67:b9:c9:4b: 18:c2:b5:9e:98:1f:dd:26:8f:1f:fd:77:82:9a:d8: 2d:95:38:f9:28:b3:9a:9d:d4:be:42:1d:02:49:9f: 14:5c:85:70:b6:28:97:bb:13:e3:72:45:91:28:78: f9:04:5f:1b:39:41:65:9d:aa:3b:49:cb:2e:a7:50: bd:0f:1e:6c:53:a0:74:99:e8:36:ca:82:ca:7c:0a: a6:3f:9b:06:53:5b:2b:dc:d9:d9:32:0a:7d:a9:1e: 45:42:04:2d:e5:08:01:1e:4d:32:07:87:44:04:3f: 54:2d:dd:bc:ac:b6:26:6a:15:56:06:3f:d3:a4:a9: 66:1e:95:63:20:2a:ae:9e:a9:5a:38:ab:47:ff:14: 91:5a:3c:f6:9d:2f:0f:19:1c:f5:87:f6:c3:db:96: 09:46:fd:36:4f:7d:22:58:f6:cd:68:62:8e:4c:39: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:70:D0:82:5F:C3:B0:A0:D4:6C:CF:E5:DA:B3:F2:49:3C:01:99:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f4d30c84-efef-3730-92a0-02781784140e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:de:6a:97:a3:fd:d0:d0:ea:85:31:1e:02:c4:0f:5b:72:4d: 27:5b:0c:17:93:ce:05:6a:2c:b4:13:52:4f:7e:04:db:17:26: 39:7e:b1:46:1e:35:e2:38:4c:6d:66:79:35:b5:0a:c5:da:e8: ab:4f:8d:56:1f:9c:74:1e:52:3f:21:69:20:49:11:9c:78:ae: 73:18:4e:8e:f4:4a:b2:aa:e6:75:04:45:3d:88:ae:01:6d:db: a8:0f:0c:99:df:36:11:b9:46:17:fa:0c:63:83:5b:1d:9c:d1: 82:43:cd:ea:b5:8f:01:ce:ec:4d:2b:bb:fb:de:91:34:49:4a: 62:23:7f:da:a5:37:54:71:58:b0:7c:61:b4:00:fa:d0:08:00: 6b:be:73:5f:61:39:35:a0:e7:ba:15:b8:75:12:d7:c4:f5:b2: f3:04:57:25:b8:bf:e6:8c:90:82:cd:d7:4f:83:9e:99:4f:0a: c1:e3:37:99:64:f5:4a:a0:a1:53:38:a9:3b:3b:f1:f8:92:99: 75:96:5b:0d:06:3a:62:68:60:7a:44:32:1e:b8:7f:d6:c9:21: 72:5a:bb:42:5a:cb:a3:f8:7e:2a:a3:fb:e9:c3:1c:e8:ef:3c: 14:c8:41:49:52:fd:95:1b:bc:b1:c6:d9:55:ea:d9:ed:f2:8d: be:08:71:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQic03H5wtVCUbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZjMwOTRmYTUtNTI1Mi00NDAwLTg4NTQtZjI3MWNiYmNkZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzyvtai4sbTXGvQ9ii+JN+m2es6xG1KDspPv x356KEXcFy/aSVF49enxzYFpGjqGTt3gI8YP8HN9sEONEEgmWN3orkeIoG8t8Hfs cliksT6v+Mx3Wme5yUsYwrWemB/dJo8f/XeCmtgtlTj5KLOandS+Qh0CSZ8UXIVw tiiXuxPjckWRKHj5BF8bOUFlnao7Scsup1C9Dx5sU6B0meg2yoLKfAqmP5sGU1sr 3NnZMgp9qR5FQgQt5QgBHk0yB4dEBD9ULd28rLYmahVWBj/TpKlmHpVjICqunqla OKtH/xSRWjz2nS8PGRz1h/bD25YJRv02T30iWPbNaGKOTDnubQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJw0IJfw7Cg1GzP5dqz8kk8AZkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjRkMzBjODQtZWZlZi0z NzMwLTkyYTAtMDI3ODE3ODQxNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbeapej/dDQ6oUxHgLED1tyTSdbDBeTzgVqLLQTUk9+BNsXJjl+sUYe NeI4TG1meTW1CsXa6KtPjVYfnHQeUj8haSBJEZx4rnMYTo70SrKq5nUERT2IrgFt 26gPDJnfNhG5Rhf6DGODWx2c0YJDzeq1jwHO7E0ru/vekTRJSmIjf9qlN1RxWLB8 YbQA+tAIAGu+c19hOTWg57oVuHUS18T1svMEVyW4v+aMkILN10+DnplPCsHjN5lk 9UqgoVM4qTs78fiSmXWWWw0GOmJoYHpEMh64f9bJIXJau0Jay6P4fiqj++nDHOjv PBTIQUlS/ZUbvLHG2VXq2e3yjb4IcWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:32 2025 by rpki-client