$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa File: 1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa (raw, json) Hash identifier: oIYrCRaLGzjskV4jOvko85hxvj2L2O/zeCLijMcAFyc= Subject key identifier: B6:37:86:EA:BF:C0:7D:A8:BF:EB:B7:F9:C4:47:42:04:A7:49:F9:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F5E62CA5E286759656874D180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 7029 IP address blocks: 75.91.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ca:5e:28:67:59:65:68:74:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=375eb7de-11f5-4290-b36e-51294e89737f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:c4:95:3d:9f:bc:27:46:61:b8:09:e4:bd: 79:a5:00:3f:68:ad:63:4b:c7:79:18:ab:ba:77:87: d1:ab:f8:5c:16:a2:da:1d:c6:1f:a8:52:0a:45:73: b5:f4:3c:d2:02:8e:57:84:59:0b:3d:c2:ac:e4:e9: f3:85:87:9b:33:dd:06:c4:8e:a3:58:53:35:6c:e8: fb:31:34:ca:08:bd:39:83:70:2f:31:a2:b6:f4:da: 42:e3:f9:eb:3f:be:b9:61:ab:df:f7:e9:8e:fa:33: fd:5f:4b:af:c2:5b:d6:91:36:11:a8:b6:2f:26:95: 66:a8:e7:bb:b6:e0:41:7b:af:55:04:66:49:90:e4: ab:54:e0:c5:b0:5b:d0:1c:1d:dd:65:7b:6e:1b:78: 69:dd:d3:11:e1:d2:89:48:b9:47:34:fc:9d:86:77: 0e:b0:79:83:c5:e0:c9:85:2f:12:e8:2c:52:49:d8: 16:e5:81:c6:e9:fa:5e:57:04:90:bf:6c:57:df:c9: 93:94:cd:01:b2:d7:ff:30:a0:29:5c:40:94:61:82: 9d:3d:44:f1:a0:6f:1c:19:88:c3:25:71:3f:05:3c: 82:4f:51:3c:66:49:13:0c:47:a8:9c:a6:fa:d9:f4: fe:e0:8d:8c:09:ff:12:6d:cb:2a:ee:b0:a1:b8:68: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:37:86:EA:BF:C0:7D:A8:BF:EB:B7:F9:C4:47:42:04:A7:49:F9:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1088f935-e5ec-3c0f-ac2a-5f16bcfcb0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:53:69:ce:92:84:53:82:e0:71:c2:82:8f:f0:1e:8b:e5:d1: 96:ee:4f:7f:f7:17:51:0f:00:40:2e:48:c5:f2:be:67:66:0b: c3:3c:28:b2:4d:c7:60:68:7b:93:2b:ca:6a:54:46:88:f7:30: 32:11:c7:f9:1b:a5:07:4a:70:97:2b:9f:fa:9e:5c:3c:c0:e9: 62:42:4e:a5:db:35:78:32:ae:de:c9:05:c2:ca:32:35:9f:c0: 34:33:35:21:01:6f:82:9b:23:4c:e7:28:39:b3:20:15:8a:aa: de:a9:eb:d2:fc:31:9c:f7:76:5f:14:5a:ac:3b:16:39:1b:a6: 09:73:73:ca:e6:b0:f1:df:6f:e1:ab:92:da:e5:8a:3a:b2:8e: b0:5c:25:7b:9b:4e:7e:7e:43:3c:ee:22:19:c7:28:fb:4d:29: cb:fb:45:c5:6b:b0:68:db:7b:ab:2a:ca:06:b3:af:4d:35:90: d2:02:4c:61:79:46:30:bb:fe:1e:d4:b3:52:3f:f2:93:d5:ce: 5c:b0:a2:79:11:b3:53:13:1b:54:8e:0e:3f:ad:2f:39:b8:44: ab:eb:e2:1e:72:0f:82:87:a4:16:fb:6b:4f:54:db:e7:1c:28: 91:36:2e:8e:a2:04:b0:8c:87:7d:1d:4f:40:8a:b5:39:01:05: 33:5d:1e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYspeKGdZZWh00YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk Mzc1ZWI3ZGUtMTFmNS00MjkwLWIzNmUtNTEyOTRlODk3MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3ElT2fvCdGYbgJ5L15pQA/aK1jS8d5GKu6 d4fRq/hcFqLaHcYfqFIKRXO19DzSAo5XhFkLPcKs5OnzhYebM90GxI6jWFM1bOj7 MTTKCL05g3AvMaK29NpC4/nrP765Yavf9+mO+jP9X0uvwlvWkTYRqLYvJpVmqOe7 tuBBe69VBGZJkOSrVODFsFvQHB3dZXtuG3hp3dMR4dKJSLlHNPydhncOsHmDxeDJ hS8S6CxSSdgW5YHG6fpeVwSQv2xX38mTlM0Bstf/MKApXECUYYKdPUTxoG8cGYjD JXE/BTyCT1E8ZkkTDEeonKb62fT+4I2MCf8Sbcsq7rChuGh4RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY3huq/wH2ov+u3+cRHQgSnSfkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA4OGY5MzUtZTVlYy0z YzBmLWFjMmEtNWYxNmJjZmNiMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBTac6ShFOC4HHCgo/wHovl0ZbuT3/3F1EPAEAuSMXyvmdmC8M8KLJN x2Boe5MrympURoj3MDIRx/kbpQdKcJcrn/qeXDzA6WJCTqXbNXgyrt7JBcLKMjWf wDQzNSEBb4KbI0znKDmzIBWKqt6p69L8MZz3dl8UWqw7Fjkbpglzc8rmsPHfb+Gr ktrlijqyjrBcJXubTn5+QzzuIhnHKPtNKcv7RcVrsGjbe6sqygazr001kNICTGF5 RjC7/h7Us1I/8pPVzlywonkRs1MTG1SODj+tLzm4RKvr4h5yD4KHpBb7a09U2+cc KJE2Lo6iBLCMh30dT0CKtTkBBTNdHoE= -----END CERTIFICATE-----Generated at Tue Oct 13 04:13:44 2026 by rpki-client