$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa File: ac9f27f1-2429-3af7-8938-906af785972e.roa (raw, json) Hash identifier: lDrgLXC2ZnpkNq+tuBDABd/+2zVuOWEV54sviru5MUw= Subject key identifier: A8:DA:4D:F7:B7:A4:18:7E:A9:E9:F5:A9:2C:77:D2:76:FE:09:39:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A8B0B7652719FEDB040E45700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa Signing time: Thu 17 Jul 2025 01:00:51 +0000 ROA not before: Thu 17 Jul 2025 01:00:51 +0000 ROA not after: Wed 15 Oct 2025 01:00:51 +0000 asID: 7029 IP address blocks: 75.90.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8b:0b:76:52:71:9f:ed:b0:40:e4:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 17 01:00:51 2025 GMT Not After : Oct 15 01:00:51 2025 GMT Subject: CN=b55d886f-5e55-4627-b01b-6ece7ac44ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:1d:e1:62:b5:17:59:7a:a3:86:f3:ee:13: 52:60:a8:d2:63:16:15:2d:77:35:71:8c:5c:cc:2f: 7f:69:60:db:a7:90:20:9f:6c:50:6a:26:ba:53:31: 8f:b9:ee:34:fc:4f:b6:cb:2e:54:36:ef:30:94:88: 8e:84:8a:ae:44:76:98:28:59:6a:e0:39:30:af:f9: 07:09:d1:16:e0:78:63:18:20:3a:04:a8:ff:65:d7: ae:38:00:04:93:49:a1:df:92:9a:28:29:c6:36:cb: 45:be:28:46:fa:25:74:5d:cd:23:e7:27:5e:e0:d2: 04:fb:a5:83:16:28:f7:2d:79:27:b9:7b:30:04:a3: db:0d:39:f4:a5:a8:09:1d:f1:2d:11:a9:4b:5f:a2: 37:dc:f7:82:6b:60:dc:52:8c:1f:2e:cf:64:59:22: c2:67:46:2a:58:b3:e0:dc:7b:39:eb:ae:07:ef:0e: 8c:4e:45:86:e9:5d:11:71:aa:ba:d1:b6:91:3a:65: 96:b2:a7:48:9d:f9:c5:fd:67:12:a1:32:4d:74:d6: 61:45:b4:b8:20:01:70:14:4e:93:dc:60:84:60:7d: 63:f3:30:17:da:e7:74:1e:46:69:c3:f0:5f:ae:57: 97:9f:e3:3b:4a:76:26:26:a6:ab:cb:2f:c3:10:e0: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DA:4D:F7:B7:A4:18:7E:A9:E9:F5:A9:2C:77:D2:76:FE:09:39:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac9f27f1-2429-3af7-8938-906af785972e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:44:6c:c1:96:18:04:bc:8a:bf:d4:8b:3b:34:13:3d:6f:d9: 29:7b:be:fb:3c:27:89:1b:ec:27:f5:cd:0d:a9:ac:0b:81:5a: 9c:55:97:13:4d:7c:32:94:83:f6:0c:53:fd:b0:c8:24:f2:a5: 27:16:8e:d4:bc:a3:16:58:28:0d:48:f2:cb:8b:c8:c3:1b:23: 6d:06:da:5c:cb:88:e8:6f:66:e5:81:71:49:76:b6:e1:9c:34: 5e:2f:6b:4d:91:fd:16:d4:cd:ba:1e:1b:41:7f:b1:e6:68:4b: b5:ce:ed:7f:65:6d:23:c4:5a:c1:f5:dd:e2:91:56:6e:09:09: 45:bd:71:d8:df:61:d9:84:db:92:ae:64:e9:54:98:e7:f7:51: ab:eb:c2:70:56:8c:2a:c1:7b:b5:b4:6a:b9:cf:7a:c6:99:88: 6e:96:ae:ef:40:1a:59:3e:8d:6c:73:14:b1:a8:5f:78:46:bc: e0:48:0c:88:5c:80:77:bc:c6:19:6d:b6:61:b9:af:4a:52:cf: 2f:45:a0:30:26:d4:10:e3:0f:28:3c:4d:5e:ca:1f:a4:e9:cf: a1:1b:5c:2a:7c:af:28:66:b5:09:81:73:89:b7:29:57:4d:9e: 87:68:15:2c:d9:7d:ef:3a:0e:cd:33:70:74:25:84:86:02:17: 9d:df:76:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqLC3ZScZ/tsEDkVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxNzAxMDA1MVoXDTI1MTAxNTAxMDA1MVowLzEtMCsGA1UEAxMk YjU1ZDg4NmYtNWU1NS00NjI3LWIwMWItNmVjZTdhYzQ0Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijod4WK1F1l6o4bz7hNSYKjSYxYVLXc1cYxc zC9/aWDbp5Agn2xQaia6UzGPue40/E+2yy5UNu8wlIiOhIquRHaYKFlq4Dkwr/kH CdEW4HhjGCA6BKj/ZdeuOAAEk0mh35KaKCnGNstFvihG+iV0Xc0j5yde4NIE+6WD Fij3LXknuXswBKPbDTn0pagJHfEtEalLX6I33PeCa2DcUowfLs9kWSLCZ0YqWLPg 3Hs5664H7w6MTkWG6V0Rcaq60baROmWWsqdInfnF/WcSoTJNdNZhRbS4IAFwFE6T 3GCEYH1j8zAX2ud0HkZpw/BfrleXn+M7SnYmJqaryy/DEODVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjaTfe3pBh+qen1qSx30nb+CTl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWM5ZjI3ZjEtMjQyOS0z YWY3LTg5MzgtOTA2YWY3ODU5NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1qfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9EbMGWGAS8ir/Uizs0Ez1v2Sl7vvs8J4kb7Cf1zQ2prAuBWpxVlxNN fDKUg/YMU/2wyCTypScWjtS8oxZYKA1I8suLyMMbI20G2lzLiOhvZuWBcUl2tuGc NF4va02R/RbUzboeG0F/seZoS7XO7X9lbSPEWsH13eKRVm4JCUW9cdjfYdmE25Ku ZOlUmOf3UavrwnBWjCrBe7W0arnPesaZiG6Wru9AGlk+jWxzFLGoX3hGvOBIDIhc gHe8xhlttmG5r0pSzy9FoDAm1BDjDyg8TV7KH6Tpz6EbXCp8ryhmtQmBc4m3KVdN nodoFSzZfe86Ds0zcHQlhIYCF53fdmM= -----END CERTIFICATE-----Generated at Wed Aug 6 05:58:10 2025 by rpki-client