$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa File: 868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa (raw, json) Hash identifier: JHKnD7qg62ngiYxzrDr8A+vYyDLVJaTemPOU+J3vPak= Subject key identifier: 14:DE:8C:DA:25:E3:C9:86:50:5C:09:B4:D6:82:22:2E:5E:A0:7D:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE40555F3062993B894F8400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.91.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:55:5f:30:62:99:3b:89:4f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5a1259f9-a100-484f-a9d2-ab4b6b2a69ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:7f:41:f8:f8:f1:ed:4a:3f:9c:a2:42:25: d7:1c:86:dd:1e:ac:b4:31:08:68:f7:87:97:ca:19: ed:8c:22:ec:bb:2f:0a:7f:a6:6b:ef:a7:94:9a:90: 8e:85:d0:b7:99:1d:f2:26:d6:20:55:d2:ad:01:cf: 21:92:0c:91:cf:e8:e7:a3:9d:91:c8:72:64:e7:5f: 97:ef:04:0b:c3:5b:9a:20:7f:5f:c6:d6:e5:3f:f6: ed:9f:59:b0:07:a6:ba:14:6d:fd:34:dd:31:73:a9: 35:df:4e:34:5b:0d:26:8b:92:89:e5:b1:3f:46:d1: 77:23:fb:9b:54:42:85:6d:32:ed:ae:44:b8:0c:e9: c8:d3:6f:ee:9e:12:4e:ae:b3:45:64:f0:a9:6c:2d: 99:ff:6a:1e:76:55:a1:ad:4f:44:cb:14:c9:44:4c: 85:bb:6a:e1:fe:9d:9a:76:92:1b:6d:6c:06:67:30: ef:5c:9e:86:47:3a:8e:9a:7b:63:97:fd:36:7e:b6: 1d:f0:88:78:4a:39:59:68:aa:e4:84:7b:b1:f0:31: e1:29:81:d2:fb:a3:cb:ff:52:5d:1a:25:1f:e9:5c: 72:d6:a2:53:59:16:f0:34:d2:0b:9e:63:08:a9:ec: 38:26:b4:e3:2b:79:c4:6e:a3:e9:e9:aa:b4:70:27: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:8C:DA:25:E3:C9:86:50:5C:09:B4:D6:82:22:2E:5E:A0:7D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/868d8fbb-85af-3f47-ad99-39ec8cfb77b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:27:df:c8:09:ec:cf:bb:ec:df:44:a5:bb:19:96:c5:d0:06: c8:a5:9b:62:15:86:38:62:30:ef:85:ff:ea:6f:8c:ee:00:c2: 53:c0:bb:9d:a1:0f:49:6c:42:b1:d5:29:5b:08:9a:43:4f:02: c5:ee:90:20:b8:f6:a5:58:6d:a8:34:77:bc:b5:cf:34:90:32: 12:8c:d4:0b:2d:d5:09:61:e6:fe:03:f5:45:6c:6d:dd:1d:8b: c5:ce:7e:9d:8a:6d:30:c1:e5:f1:be:c0:21:82:d8:6f:25:22: 16:6e:60:96:db:3c:8f:23:0e:e4:31:22:ef:bb:7a:2f:aa:e5: 38:52:05:35:3d:bd:e0:8c:a9:7e:05:41:88:e5:02:ee:8b:cc: 74:03:64:47:bd:6c:fa:f4:38:a0:8b:24:16:b3:15:24:3c:43: 64:42:10:ad:85:1d:e6:ec:46:0d:5c:08:8a:7d:61:2a:ae:88: 3c:bf:c6:e3:56:11:d0:2c:d9:2b:e5:bd:c7:47:08:3c:88:03: 6c:1c:22:3c:da:e6:bf:54:03:ae:35:5a:41:34:1a:26:ff:7a: 06:f3:18:17:52:ed:1e:35:64:d3:14:d6:81:ed:f5:06:26:40: 0b:07:64:8b:de:93:fe:67:31:66:e8:0a:9f:5f:6d:d8:8b:03: 2c:21:a9:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFVfMGKZO4lPhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWExMjU5ZjktYTEwMC00ODRmLWE5ZDItYWI0YjZiMmE2OWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTx/Qfj48e1KP5yiQiXXHIbdHqy0MQho94eX yhntjCLsuy8Kf6Zr76eUmpCOhdC3mR3yJtYgVdKtAc8hkgyRz+jno52RyHJk51+X 7wQLw1uaIH9fxtblP/btn1mwB6a6FG39NN0xc6k13040Ww0mi5KJ5bE/RtF3I/ub VEKFbTLtrkS4DOnI02/unhJOrrNFZPCpbC2Z/2oedlWhrU9EyxTJREyFu2rh/p2a dpIbbWwGZzDvXJ6GRzqOmntjl/02frYd8Ih4SjlZaKrkhHux8DHhKYHS+6PL/1Jd GiUf6Vxy1qJTWRbwNNILnmMIqew4JrTjK3nEbqPp6aq0cCeshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTejNol48mGUFwJtNaCIi5eoH0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODY4ZDhmYmItODVhZi0z ZjQ3LWFkOTktMzllYzhjZmI3N2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsn38gJ7M+77N9EpbsZlsXQBsilm2IVhjhiMO+F/+pvjO4AwlPAu52h D0lsQrHVKVsImkNPAsXukCC49qVYbag0d7y1zzSQMhKM1Ast1Qlh5v4D9UVsbd0d i8XOfp2KbTDB5fG+wCGC2G8lIhZuYJbbPI8jDuQxIu+7ei+q5ThSBTU9veCMqX4F QYjlAu6LzHQDZEe9bPr0OKCLJBazFSQ8Q2RCEK2FHebsRg1cCIp9YSquiDy/xuNW EdAs2SvlvcdHCDyIA2wcIjza5r9UA641WkE0Gib/egbzGBdS7R41ZNMU1oHt9QYm QAsHZIvek/5nMWboCp9fbdiLAywhqZQ= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:01 2025 by rpki-client