$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb9e0b87-4ad3-3bac-a67a-22826f5d4b85.roa File: fb9e0b87-4ad3-3bac-a67a-22826f5d4b85.roa (raw, json) Hash identifier: xnYft50kdAVyEaWxzEHbI5F4p2Tok/d1B+gr0JjGMgQ= Subject key identifier: 8D:7D:0A:86:0C:4B:DE:34:5F:8F:BF:D4:0F:7A:7C:F6:43:B5:8A:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B3821AA0B74F393F9E1170C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb9e0b87-4ad3-3bac-a67a-22826f5d4b85.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 75.90.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:aa:0b:74:f3:93:f9:e1:17:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=b6827de0-5946-4f50-b593-c81f6e0b82bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:ce:33:af:a2:03:89:1b:58:ac:9f:b4:1e: 7f:4f:34:d3:20:68:3f:2d:ba:f8:aa:63:c5:f8:9a: 05:0c:4a:be:e5:98:95:24:1d:dd:97:a4:ae:6a:41: a2:51:60:3f:d9:6f:09:f1:28:4e:ce:08:c7:04:ea: 44:4e:cd:58:26:fa:63:8a:9d:a0:90:84:8f:53:0d: a6:42:2e:8c:b9:87:bf:1a:07:a5:e7:7b:74:f2:9c: 12:10:0a:21:28:3e:91:4e:07:4d:9a:01:e2:3e:14: f0:06:8e:f2:e6:3e:33:a4:8a:4f:9a:4d:06:e0:47: d7:85:1b:db:41:e2:01:74:0e:19:e4:c9:10:e5:56: a2:9e:05:fd:e4:94:74:1a:7a:9e:21:aa:0a:69:2b: 26:41:1b:a8:be:d3:f9:60:38:bd:3c:de:ec:7d:d1: 00:e2:c5:61:9e:c0:c3:93:88:77:e2:ce:60:ca:85: 0e:24:9d:97:06:32:ce:9e:c1:b6:e3:0e:93:6d:83: 64:42:89:a6:47:f3:3c:5c:bf:62:e6:7b:65:12:20: 30:df:d5:36:c9:50:ab:29:69:91:43:4c:cd:a6:3a: 78:88:8e:15:0d:c8:a3:b1:1f:66:dc:fd:e9:e2:e7: 0d:9c:29:a8:4d:85:1c:81:24:b7:fc:8b:e4:f7:df: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:0A:86:0C:4B:DE:34:5F:8F:BF:D4:0F:7A:7C:F6:43:B5:8A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb9e0b87-4ad3-3bac-a67a-22826f5d4b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:94:91:82:ce:6a:4a:ba:f4:3c:3a:7a:d9:66:6e:9e:6d:b2: a9:e1:23:0b:de:3b:10:fd:a3:48:7d:65:f9:94:81:cc:68:45: 1c:76:0d:24:3d:0f:5a:44:cc:b2:6b:82:b7:7a:bc:fb:56:86: 6f:ac:f1:4f:a4:86:06:8d:1c:11:28:f4:71:52:8b:e3:5e:c8: 67:81:7b:2f:49:1c:a6:6c:3e:03:99:87:d7:bf:37:c6:71:88: a0:f9:6d:da:cf:f9:0d:ec:40:01:ab:b0:a0:7e:93:6e:85:4e: be:8b:e0:4d:f1:41:b2:85:18:7e:1a:d3:be:5b:ef:1a:54:b8: 40:71:3a:77:85:3b:72:12:78:91:92:46:fb:8c:ac:80:f9:06: 82:c6:1f:4f:ec:22:65:c1:cf:d5:45:bc:d5:bd:d2:45:d2:06: c3:9d:cb:cb:03:e1:13:b3:07:9f:5c:10:20:56:d7:49:31:a0: 18:e2:7d:f3:54:e9:01:74:d0:d1:14:86:11:73:d3:3a:9b:6f: d9:cf:29:72:e6:7b:6a:49:1d:97:1d:bb:50:5f:c3:17:92:e2: 32:dc:be:f3:85:f4:6b:63:91:3c:d3:20:ea:9e:f1:d9:4d:04: 49:c6:2b:ec:f0:f4:7f:e0:f6:6b:32:c5:2d:11:9d:bd:a0:50: 2a:f1:8b:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IaoLdPOT+eEXDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YjY4MjdkZTAtNTk0Ni00ZjUwLWI1OTMtYzgxZjZlMGI4MmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2/OM6+iA4kbWKyftB5/TzTTIGg/Lbr4qmPF +JoFDEq+5ZiVJB3dl6SuakGiUWA/2W8J8ShOzgjHBOpETs1YJvpjip2gkISPUw2m Qi6MuYe/Ggel53t08pwSEAohKD6RTgdNmgHiPhTwBo7y5j4zpIpPmk0G4EfXhRvb QeIBdA4Z5MkQ5VaingX95JR0GnqeIaoKaSsmQRuovtP5YDi9PN7sfdEA4sVhnsDD k4h34s5gyoUOJJ2XBjLOnsG24w6TbYNkQommR/M8XL9i5ntlEiAw39U2yVCrKWmR Q0zNpjp4iI4VDcijsR9m3P3p4ucNnCmoTYUcgSS3/Ivk999nHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI19CoYMS940X4+/1A96fPZDtYoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI5ZTBiODctNGFkMy0z YmFjLWE2N2EtMjI4MjZmNWQ0Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGUkYLOakq69Dw6etlmbp5tsqnhIwveOxD9o0h9ZfmUgcxoRRx2DSQ9 D1pEzLJrgrd6vPtWhm+s8U+khgaNHBEo9HFSi+NeyGeBey9JHKZsPgOZh9e/N8Zx iKD5bdrP+Q3sQAGrsKB+k26FTr6L4E3xQbKFGH4a075b7xpUuEBxOneFO3ISeJGS RvuMrID5BoLGH0/sImXBz9VFvNW90kXSBsOdy8sD4ROzB59cECBW10kxoBjiffNU 6QF00NEUhhFz0zqbb9nPKXLme2pJHZcdu1BfwxeS4jLcvvOF9GtjkTzTIOqe8dlN BEnGK+zw9H/g9msyxS0Rnb2gUCrxi8Q= -----END CERTIFICATE-----Generated at Tue Nov 4 16:59:22 2025 by rpki-client