$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3ec47ce-2266-35d9-9fd6-2b5be053bd0a.roa File: a3ec47ce-2266-35d9-9fd6-2b5be053bd0a.roa (raw, json) Hash identifier: 2RV5Z97SSNJC4L3udCUQwnLfd9ZYMJ108t2wXJtWUc8= Subject key identifier: 13:7C:EF:52:D8:23:95:A5:8F:F7:5D:9F:5F:D2:34:6F:3D:D7:9B:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BAD195305A20AC4E5BF160110 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3ec47ce-2266-35d9-9fd6-2b5be053bd0a.roa Signing time: Tue 28 Oct 2025 22:33:34 +0000 ROA not before: Tue 28 Oct 2025 22:33:34 +0000 ROA not after: Mon 26 Jan 2026 23:33:34 +0000 asID: 7029 IP address blocks: 75.90.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:19:53:05:a2:0a:c4:e5:bf:16:01:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 28 22:33:34 2025 GMT Not After : Jan 26 23:33:34 2026 GMT Subject: CN=0da6c18c-5138-4495-b8ba-ebe5b9d933d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:69:bf:fb:87:93:9d:b3:70:ee:cd:1b:0c: fc:64:ee:ac:88:e6:71:37:d9:f2:df:31:e6:35:dd: b8:65:ec:06:35:90:0e:4e:65:a3:39:61:d0:82:c3: d3:3d:17:25:d2:15:af:85:11:1c:53:05:00:35:09: 5c:27:67:c5:8e:f9:6d:e0:44:f4:1f:52:b9:30:f2: 4a:a0:70:4b:7b:6c:bb:59:60:3c:47:f5:13:63:26: 29:7b:84:3a:96:f9:eb:41:e3:1e:38:6d:e8:d9:52: 86:fc:90:5e:51:e7:ff:88:41:9f:16:c6:ed:c8:59: 14:bd:c2:27:bf:41:36:0f:a4:08:6f:72:8c:aa:0d: 64:fb:6a:8f:07:72:62:4a:8d:30:38:08:6a:a5:55: 06:62:b0:00:ec:69:b1:66:35:79:a2:12:3d:7e:51: 8d:60:06:ef:49:b1:76:3d:4c:3c:44:26:cd:1a:d9: 6b:63:28:5e:8f:80:ed:9f:3c:0f:c2:2b:89:98:5a: 95:a5:b5:11:8e:bf:ed:e0:f9:7d:f5:4a:e4:a5:56: fe:65:06:d8:be:d1:c9:c1:36:56:6a:c4:8b:49:44: b1:1b:32:97:14:e0:fe:44:45:e5:e3:30:be:07:0e: 1e:fa:c5:8d:d3:3a:72:ce:1d:94:25:35:ed:31:31: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:EF:52:D8:23:95:A5:8F:F7:5D:9F:5F:D2:34:6F:3D:D7:9B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a3ec47ce-2266-35d9-9fd6-2b5be053bd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:34:41:b6:7e:a2:01:a2:d4:5e:a7:a2:c8:a9:fe:a7:63:c5: 81:61:6c:85:b6:93:63:d2:63:4f:a5:e2:d2:46:fb:ef:1c:d6: 13:cf:3a:d7:96:78:69:c8:ac:00:47:4e:09:e4:d7:79:52:34: bd:45:70:ec:ec:0d:a4:24:dd:71:56:bd:b8:5f:2a:23:09:cf: 78:5d:f9:7f:4c:fb:a6:8a:20:0d:60:60:be:c7:50:e9:fb:a0: 9d:6e:d0:a7:86:51:e2:f6:cf:ba:85:92:0f:84:80:a9:42:42: 33:6f:bc:85:66:77:fd:fc:ee:85:21:b3:88:c0:26:65:cf:7a: d5:d3:dc:13:4b:4b:9c:23:26:83:8c:f0:0f:60:33:be:b7:9c: df:6a:4d:4d:c0:75:7f:97:77:dc:a2:cc:47:ba:c0:0d:40:4e: d0:35:08:40:cd:f5:45:f2:c1:a8:bd:d8:3e:75:8c:c5:64:7e: ab:12:6f:7e:75:a1:d5:e9:6f:1d:da:af:12:33:77:21:42:42: 68:88:4e:03:f1:5c:38:7f:b8:ad:8f:02:b7:14:ce:63:e5:d3: ee:e5:96:bb:a2:76:91:36:7d:62:47:a3:69:de:ea:83:16:aa: 96:78:d2:f6:58:89:de:7b:86:68:a5:eb:71:9d:b7:49:ce:23: 23:f1:ff:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutGVMFogrE5b8WARAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAyODIyMzMzNFoXDTI2MDEyNjIzMzMzNFowLzEtMCsGA1UEAxMk MGRhNmMxOGMtNTEzOC00NDk1LWI4YmEtZWJlNWI5ZDkzM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFpv/uHk52zcO7NGwz8ZO6siOZxN9ny3zHm Nd24ZewGNZAOTmWjOWHQgsPTPRcl0hWvhREcUwUANQlcJ2fFjvlt4ET0H1K5MPJK oHBLe2y7WWA8R/UTYyYpe4Q6lvnrQeMeOG3o2VKG/JBeUef/iEGfFsbtyFkUvcIn v0E2D6QIb3KMqg1k+2qPB3JiSo0wOAhqpVUGYrAA7GmxZjV5ohI9flGNYAbvSbF2 PUw8RCbNGtlrYyhej4DtnzwPwiuJmFqVpbURjr/t4Pl99UrkpVb+ZQbYvtHJwTZW asSLSUSxGzKXFOD+REXl4zC+Bw4e+sWN0zpyzh2UJTXtMTE0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN871LYI5Wlj/ddn1/SNG8915uOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTNlYzQ3Y2UtMjI2Ni0z NWQ5LTlmZDYtMmI1YmUwNTNiZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1prMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE0QbZ+ogGi1F6nosip/qdjxYFhbIW2k2PSY0+l4tJG++8c1hPPOteW eGnIrABHTgnk13lSNL1FcOzsDaQk3XFWvbhfKiMJz3hd+X9M+6aKIA1gYL7HUOn7 oJ1u0KeGUeL2z7qFkg+EgKlCQjNvvIVmd/387oUhs4jAJmXPetXT3BNLS5wjJoOM 8A9gM763nN9qTU3AdX+Xd9yizEe6wA1ATtA1CEDN9UXywai92D51jMVkfqsSb351 odXpbx3arxIzdyFCQmiITgPxXDh/uK2PArcUzmPl0+7llruidpE2fWJHo2ne6oMW qpZ40vZYid57hmil63Gdt0nOIyPx/xc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:12 2025 by rpki-client