$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b442326-d44e-33e3-99c0-7f143973e748.roa File: 4b442326-d44e-33e3-99c0-7f143973e748.roa (raw, json) Hash identifier: oVbeNVVVY/YxfuWWm4+DVOCosCfqmuyxgmhPwOsujvo= Subject key identifier: 50:65:CD:81:8B:3C:70:2F:E7:3A:56:76:9D:EE:16:4F:7C:B2:91:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BAD73CFC5B4A5C7B8E76AF500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b442326-d44e-33e3-99c0-7f143973e748.roa Signing time: Wed 29 Oct 2025 01:35:53 +0000 ROA not before: Wed 29 Oct 2025 01:35:53 +0000 ROA not after: Tue 27 Jan 2026 02:35:53 +0000 asID: 7029 IP address blocks: 75.90.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:73:cf:c5:b4:a5:c7:b8:e7:6a:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 29 01:35:53 2025 GMT Not After : Jan 27 02:35:53 2026 GMT Subject: CN=fb7d7289-8436-4734-9e82-a74aedf4ab99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:4b:f4:fc:cc:f8:d6:12:c2:59:62:30:93: 19:91:2f:0d:be:86:11:26:ac:34:53:b9:02:b9:30: 84:4f:de:e8:35:7d:c7:c2:a0:43:a4:d6:b7:70:94: 77:ed:ee:a0:dc:a2:4e:db:d7:7c:21:25:5c:f6:0f: 1a:14:b1:cd:24:5f:1e:61:8f:4b:99:5d:94:90:a7: 3b:91:d0:4e:c1:2d:8d:b5:83:03:71:df:bf:e7:63: 8b:77:3e:67:84:45:6f:92:86:29:b3:1a:dd:22:26: 95:32:cb:b1:6a:ec:ee:22:81:93:b3:b1:50:e9:5e: a1:6e:75:57:22:8f:f6:18:55:8f:a1:ca:34:46:d2: e8:f3:56:6b:74:73:a9:09:79:af:b2:88:38:a4:38: 4f:88:a5:61:ec:9d:26:96:e0:db:b9:de:1a:5e:5d: 19:7b:f3:6f:fb:c9:43:fb:35:6d:84:0d:1a:c8:dc: 3e:bf:7f:48:ee:c3:de:66:1a:1e:7d:4f:60:59:62: 29:9c:bb:70:12:89:7a:75:c0:5c:e4:ed:22:eb:34: 31:b2:fa:be:98:f9:e6:f3:c4:b4:5f:1a:b8:ed:49: 7a:11:a3:ae:ea:26:48:bb:65:47:ab:83:bc:20:a8: 69:75:78:21:c7:09:72:2f:55:a0:66:88:9c:b9:aa: 03:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:65:CD:81:8B:3C:70:2F:E7:3A:56:76:9D:EE:16:4F:7C:B2:91:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b442326-d44e-33e3-99c0-7f143973e748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:76:10:49:e5:d9:e5:12:07:90:07:4d:66:80:0b:7b:a4:3c: be:9d:d6:da:40:5a:b5:93:9f:21:e9:07:da:62:94:29:ef:54: e7:1c:5b:80:4e:88:f9:86:c5:d3:c9:f5:0b:41:5d:90:9c:6e: 75:01:15:15:31:4f:22:9f:35:94:5c:d9:ba:04:86:c3:29:de: 2b:c8:72:db:f5:b2:74:04:4d:1c:98:9d:c2:a8:49:f7:48:ff: f0:36:e1:de:22:7b:95:b3:25:83:f7:3a:ed:71:d2:16:9e:2d: 3a:22:7a:75:b8:2c:20:75:0f:43:65:1d:f9:72:06:88:29:34: 71:65:d6:bc:a7:7e:49:f3:52:cc:39:2e:62:67:26:8f:68:e9: 8d:f2:a7:3f:04:b0:09:b2:5d:4b:fe:eb:c1:d7:e2:69:29:5d: 67:ab:71:16:41:68:bb:ae:f8:fb:a7:ad:14:58:a3:41:6b:9f: 50:4c:53:a7:b3:09:1c:87:7e:c5:b0:e4:dd:ea:1d:43:c3:5b: f7:d0:ba:f8:85:91:5a:09:53:eb:1c:2c:29:d5:35:05:54:db: a9:50:2a:f5:7a:d7:27:1b:4c:d8:86:09:f8:28:c2:9c:15:cf: 44:e1:5e:54:77:43:46:42:56:44:ad:43:0a:c7:0f:9c:98:fa: 2f:3f:53:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutc8/FtKXHuOdq9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyOTAxMzU1M1oXDTI2MDEyNzAyMzU1M1owLzEtMCsGA1UEAxMk ZmI3ZDcyODktODQzNi00NzM0LTllODItYTc0YWVkZjRhYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmelL9PzM+NYSwlliMJMZkS8NvoYRJqw0U7kC uTCET97oNX3HwqBDpNa3cJR37e6g3KJO29d8ISVc9g8aFLHNJF8eYY9LmV2UkKc7 kdBOwS2NtYMDcd+/52OLdz5nhEVvkoYpsxrdIiaVMsuxauzuIoGTs7FQ6V6hbnVX Io/2GFWPoco0RtLo81ZrdHOpCXmvsog4pDhPiKVh7J0mluDbud4aXl0Ze/Nv+8lD +zVthA0ayNw+v39I7sPeZhoefU9gWWIpnLtwEol6dcBc5O0i6zQxsvq+mPnm88S0 Xxq47Ul6EaOu6iZIu2VHq4O8IKhpdXghxwlyL1WgZoicuaoDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBlzYGLPHAv5zpWdp3uFk98spFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI0NDIzMjYtZDQ0ZS0z M2UzLTk5YzAtN2YxNDM5NzNlNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ2EEnl2eUSB5AHTWaAC3ukPL6d1tpAWrWTnyHpB9pilCnvVOccW4BO iPmGxdPJ9QtBXZCcbnUBFRUxTyKfNZRc2boEhsMp3ivIctv1snQETRyYncKoSfdI //A24d4ie5WzJYP3Ou1x0haeLToienW4LCB1D0NlHflyBogpNHFl1rynfknzUsw5 LmJnJo9o6Y3ypz8EsAmyXUv+68HX4mkpXWercRZBaLuu+PunrRRYo0Frn1BMU6ez CRyHfsWw5N3qHUPDW/fQuviFkVoJU+scLCnVNQVU26lQKvV61ycbTNiGCfgowpwV z0ThXlR3Q0ZCVkStQwrHD5yY+i8/U/Y= -----END CERTIFICATE-----Generated at Tue Nov 4 19:20:51 2025 by rpki-client