$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e141d08-037f-3880-bc1b-0e7b1c0b8d81.roa File: 6e141d08-037f-3880-bc1b-0e7b1c0b8d81.roa (raw, json) Hash identifier: x9XVJzpwtR7GE6yP5cbGTwzL19Bl0Dfp6d4NnEeBv7U= Subject key identifier: B5:53:BD:AF:C1:9C:ED:46:AC:93:4B:58:EE:E0:2A:3A:C8:FE:EE:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584AB386219655BFEA7BC0FA7870 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e141d08-037f-3880-bc1b-0e7b1c0b8d81.roa Signing time: Thu 31 Jul 2025 13:00:39 +0000 ROA not before: Thu 31 Jul 2025 13:00:39 +0000 ROA not after: Wed 29 Oct 2025 13:00:39 +0000 asID: 7029 IP address blocks: 75.90.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:86:21:96:55:bf:ea:7b:c0:fa:78:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 13:00:39 2025 GMT Not After : Oct 29 13:00:39 2025 GMT Subject: CN=19a45f57-7612-4cc6-bb05-e8c7675bb8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:11:7b:78:8f:06:9e:35:c0:c1:83:f3:b1: fc:fb:27:e4:a2:21:3c:af:d6:1a:b1:6f:4b:96:ea: c2:8b:6f:67:8d:a4:19:29:69:d2:c6:41:a3:c6:6e: c6:07:86:29:39:a0:85:73:3e:af:93:ad:0e:d2:1e: dd:30:56:e0:1b:24:d7:99:56:d8:20:3a:fb:0b:42: 29:9d:37:88:c5:d0:e8:d4:44:3d:2b:66:fc:1d:b9: 77:57:f0:60:b1:f5:68:69:e7:68:28:27:8c:ad:f3: 77:bd:b0:60:f9:38:3b:af:38:58:a7:14:d0:0a:8e: 42:24:68:aa:67:6c:4a:e3:fa:70:18:6b:78:82:4b: 6d:26:0c:5a:61:cd:6b:b9:f3:3c:c8:11:66:fa:04: 32:b9:7c:01:25:f1:f1:a5:f5:28:4c:21:95:8a:71: 93:c7:33:09:ae:5e:95:ab:fd:df:7f:d4:29:f7:cb: fb:8f:53:30:35:cd:ac:9c:5f:4e:f4:21:f0:0d:95: 78:6e:1d:12:97:3a:6e:59:e0:2b:77:21:bd:b6:84: 38:87:ac:44:f2:36:e8:e8:08:78:9b:fe:de:37:3b: 84:fa:b8:74:80:ea:ad:46:bd:d4:8d:62:00:1e:a5: de:c9:3d:22:d2:7d:e9:4c:0d:a4:8c:da:00:a0:f5: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:53:BD:AF:C1:9C:ED:46:AC:93:4B:58:EE:E0:2A:3A:C8:FE:EE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6e141d08-037f-3880-bc1b-0e7b1c0b8d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:80:db:21:20:46:6e:92:bb:ca:26:b8:d4:82:f3:ba:af:11: 7d:c9:78:88:b2:f5:a1:51:8a:83:00:ee:d2:4b:80:9d:34:f7: 8d:a2:33:e1:81:a5:94:94:2f:4c:9a:ba:84:63:35:95:15:99: c8:c2:62:77:6e:fb:8b:e2:66:01:eb:67:d2:4d:e9:b4:43:62: 5c:2e:9a:3e:61:b7:14:e7:1c:e6:17:f9:68:23:a8:e9:57:65: 73:ea:b2:06:32:70:cb:9e:56:e4:54:24:64:14:3a:f9:f1:bb: 51:96:d4:8a:d5:f2:ce:e5:64:71:f9:59:a3:32:64:18:af:38: 05:f7:4e:5b:d4:a2:42:3c:db:8c:8d:4b:05:43:c7:43:49:a1: 0c:c7:3b:2b:ba:a4:65:f8:88:36:f4:ca:5e:b4:46:a2:8f:75: dd:14:e9:38:95:6c:59:94:55:5f:c8:6d:69:41:31:da:0b:eb: 74:e7:be:d1:33:ba:1c:09:d8:f7:83:e7:45:6c:99:fa:28:a2: 3a:f2:f5:ce:ae:8c:e4:0a:dd:34:02:e6:7f:05:c4:1a:0a:6e: 0f:33:4a:56:9a:a3:4e:f4:8a:84:b9:23:ea:3e:6b:48:5d:b1: 21:17:00:99:87:e2:b8:e5:2a:29:f1:78:c4:a8:e9:a0:b4:69: 21:36:b3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiGWVb/qe8D6eHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk MTlhNDVmNTctNzYxMi00Y2M2LWJiMDUtZThjNzY3NWJiOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKcRe3iPBp41wMGD87H8+yfkoiE8r9YasW9L lurCi29njaQZKWnSxkGjxm7GB4YpOaCFcz6vk60O0h7dMFbgGyTXmVbYIDr7C0Ip nTeIxdDo1EQ9K2b8Hbl3V/BgsfVoaedoKCeMrfN3vbBg+Tg7rzhYpxTQCo5CJGiq Z2xK4/pwGGt4gkttJgxaYc1rufM8yBFm+gQyuXwBJfHxpfUoTCGVinGTxzMJrl6V q/3ff9Qp98v7j1MwNc2snF9O9CHwDZV4bh0SlzpuWeArdyG9toQ4h6xE8jbo6Ah4 m/7eNzuE+rh0gOqtRr3UjWIAHqXeyT0i0n3pTA2kjNoAoPUBrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVTva/BnO1GrJNLWO7gKjrI/u7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNmUxNDFkMDgtMDM3Zi0z ODgwLWJjMWItMGU3YjFjMGI4ZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1obMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaA2yEgRm6Su8omuNSC87qvEX3JeIiy9aFRioMA7tJLgJ00942iM+GB pZSUL0yauoRjNZUVmcjCYndu+4viZgHrZ9JN6bRDYlwumj5htxTnHOYX+WgjqOlX ZXPqsgYycMueVuRUJGQUOvnxu1GW1IrV8s7lZHH5WaMyZBivOAX3TlvUokI824yN SwVDx0NJoQzHOyu6pGX4iDb0yl60RqKPdd0U6TiVbFmUVV/IbWlBMdoL63TnvtEz uhwJ2PeD50Vsmfooojry9c6ujOQK3TQC5n8FxBoKbg8zSlaao070ioS5I+o+a0hd sSEXAJmH4rjlKinxeMSo6aC0aSE2s7w= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:14 2025 by rpki-client