$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa File: f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa (raw, json) Hash identifier: TiqgSO1CK36+y+LlBPfHMRVC+Mi7PxZlEd+jiXYFBrA= Subject key identifier: F7:14:62:C9:D7:AF:49:6F:BD:54:7F:B8:F3:A1:8D:59:17:16:3D:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584BBE404C4B294EEC6EEB889C18 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 75.91.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4c:4b:29:4e:ec:6e:eb:88:9c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=fd9c80c9-c607-40e8-8424-2af32c370d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:03:d9:76:d8:f3:da:43:a2:ab:85:30:45: f4:65:33:57:50:37:06:08:8f:37:0e:48:47:6a:ea: bc:97:46:32:d9:bb:67:79:4d:89:94:a5:9c:c0:37: 8a:a1:02:9f:f2:2a:26:d1:8a:64:05:44:cb:19:17: 6f:5f:68:e4:76:57:55:71:36:71:a9:31:e1:29:75: 68:82:3f:ab:99:81:6f:8c:86:9b:26:16:7f:04:68: bb:17:4b:35:02:9f:c1:0d:f0:ea:a4:aa:67:49:0f: 88:97:20:52:f9:2a:e2:fa:33:5b:40:fc:8b:9d:49: b2:95:12:37:6c:d9:4a:61:a4:c8:f9:9f:29:09:9d: 7c:c8:d0:eb:1c:f2:ca:b4:34:22:cf:44:27:57:c0: 06:a3:28:68:87:b6:34:4c:49:21:02:8a:c7:c8:57: 6d:47:bb:a3:89:df:25:19:f6:80:1e:bd:1b:b0:58: 66:60:32:bd:87:94:90:d2:d9:19:1e:1f:41:af:44: 39:0d:d6:f9:df:05:04:2d:4e:1d:9c:d8:11:60:55: e5:86:da:25:83:a3:fd:17:a5:b1:82:9a:38:a2:b7: 1c:65:81:be:2b:83:02:a2:26:23:f9:e9:98:4b:4f: 2c:17:31:d9:da:e3:4d:a3:a8:fc:ff:81:09:25:6d: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:62:C9:D7:AF:49:6F:BD:54:7F:B8:F3:A1:8D:59:17:16:3D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cb:1e:a0:47:88:de:d7:d5:b3:eb:e1:3e:72:0b:c0:dd:19: 47:d8:b9:cc:36:80:23:35:80:67:8c:3a:d0:0f:f1:af:c7:c1: ed:fd:38:6f:56:51:00:86:e9:e3:66:4d:1e:27:5b:ee:1c:29: f5:eb:4a:7f:0d:d1:62:f3:91:5e:cd:08:4e:7e:bf:9c:52:f1: 90:41:dc:5b:cb:93:8a:29:41:22:0a:e6:3a:8a:06:14:26:17: aa:9b:32:2f:94:6c:c0:8e:c6:cb:78:f3:6d:d7:92:82:fb:2f: 6c:3e:e1:3c:ab:10:cc:98:f3:09:26:8a:bd:5f:3e:01:35:fe: ef:31:e5:f0:e7:54:02:27:78:e3:e4:36:a1:58:00:b9:1c:bd: 20:48:7c:7e:65:38:14:0f:bf:57:5d:64:d4:43:90:c4:f1:48: e8:44:04:39:14:80:09:25:c3:18:33:05:07:83:d3:c6:d7:9c: 9d:01:d2:31:fe:0c:16:b1:83:53:71:7d:b8:07:ec:7d:34:79: 65:15:ce:43:39:ca:4f:9d:36:08:b1:81:db:ac:4d:96:4c:f8: 7f:08:cc:da:92:40:4e:d2:22:9b:b0:a8:41:94:c0:35:0a:a3: ed:f8:9c:ba:4d:b5:46:04:41:ba:f1:52:aa:65:f2:0a:0d:ef: 57:08:24:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QExLKU7sbuuInBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ5YzgwYzktYzYwNy00MGU4LTg0MjQtMmFmMzJjMzcwZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHQD2XbY89pDoquFMEX0ZTNXUDcGCI83DkhH auq8l0Yy2btneU2JlKWcwDeKoQKf8iom0YpkBUTLGRdvX2jkdldVcTZxqTHhKXVo gj+rmYFvjIabJhZ/BGi7F0s1Ap/BDfDqpKpnSQ+IlyBS+Sri+jNbQPyLnUmylRI3 bNlKYaTI+Z8pCZ18yNDrHPLKtDQiz0QnV8AGoyhoh7Y0TEkhAorHyFdtR7ujid8l GfaAHr0bsFhmYDK9h5SQ0tkZHh9Br0Q5Ddb53wUELU4dnNgRYFXlhtolg6P9F6Wx gpo4orccZYG+K4MCoiYj+emYS08sFzHZ2uNNo6j8/4EJJW07eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcUYsnXr0lvvVR/uPOhjVkXFj2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmOTMwMWItZGE4ZC0z OTg1LThkYWQtNmEyZDdjMWViNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrLHqBHiN7X1bPr4T5yC8DdGUfYucw2gCM1gGeMOtAP8a/Hwe39OG9W UQCG6eNmTR4nW+4cKfXrSn8N0WLzkV7NCE5+v5xS8ZBB3FvLk4opQSIK5jqKBhQm F6qbMi+UbMCOxst4823XkoL7L2w+4TyrEMyY8wkmir1fPgE1/u8x5fDnVAIneOPk NqFYALkcvSBIfH5lOBQPv1ddZNRDkMTxSOhEBDkUgAklwxgzBQeD08bXnJ0B0jH+ DBaxg1NxfbgH7H00eWUVzkM5yk+dNgixgdusTZZM+H8IzNqSQE7SIpuwqEGUwDUK o+34nLpNtUYEQbrxUqpl8goN71cIJKM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:15:56 2025 by rpki-client