$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e89e167-cc64-39f8-9f48-ac69479dc757.roa File: 4e89e167-cc64-39f8-9f48-ac69479dc757.roa (raw, json) Hash identifier: +L9EZpXDlabNccS1lrp5R1bW71ehNsB0D3leZDk+yfI= Subject key identifier: AA:F0:6B:DA:A3:34:7E:C5:57:DF:DE:33:2A:3F:E4:3D:A5:67:27:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D59EA5DA700DFB6CDC15139C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e89e167-cc64-39f8-9f48-ac69479dc757.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 7029 IP address blocks: 75.90.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5d:a7:00:df:b6:cd:c1:51:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b38ba7bc-bc29-496d-9eb7-ea94e1e47f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:d6:d5:cb:92:02:48:1e:3f:ab:2b:4d:6b: f3:1b:cf:4f:d9:38:cc:d1:3b:2a:b1:3f:28:3c:b7: af:0f:6b:b8:5a:61:cd:e1:f3:13:47:e5:26:ee:92: b3:ed:c7:df:99:a7:23:e1:6b:cb:3e:7d:a4:c3:91: 91:f8:7c:1d:e7:ba:b2:29:5b:8c:fa:a7:2e:82:0b: d3:00:a3:20:01:84:b4:6c:0c:00:b4:fb:52:f0:08: 81:fa:11:27:09:c3:05:ac:d0:63:12:80:41:5c:c0: e1:a0:90:7c:fc:11:8a:f6:b7:07:04:9e:e8:d9:0b: c0:49:e1:db:c5:e8:88:68:5b:a8:9e:d1:61:4c:6e: ba:33:32:a8:84:37:28:aa:d1:dc:0e:68:b5:59:b1: b6:0c:01:97:e6:50:89:26:6b:93:37:0e:80:24:af: 1e:0f:7f:ae:ac:8a:d6:63:b4:b7:c9:1e:a7:c9:6c: 80:7a:b5:04:3a:29:f7:fd:49:23:3c:22:8d:1a:55: 7e:7e:6c:1f:c2:fb:7b:93:eb:8d:6a:3e:25:47:a4: f7:ce:78:7b:07:d0:de:a5:92:a1:86:30:a9:57:15: 50:60:d7:cc:78:56:c9:69:31:6a:0e:48:37:7f:05: 00:ff:07:05:dd:46:a1:af:b7:8f:55:93:f9:43:f6: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:6B:DA:A3:34:7E:C5:57:DF:DE:33:2A:3F:E4:3D:A5:67:27:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4e89e167-cc64-39f8-9f48-ac69479dc757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ea:a7:84:f9:83:4d:d9:02:27:35:64:ff:31:5a:ed:61:37: ed:67:ec:3c:fe:26:76:db:d7:99:24:58:1c:a9:d5:fe:64:55: f0:e6:81:17:2e:ab:74:b8:01:0f:de:86:7b:78:de:a9:1a:36: c4:2e:3c:32:fb:69:8a:4b:91:d6:a8:13:4d:14:7d:f1:fb:5c: dc:eb:4f:4e:42:76:fe:66:dd:11:10:2f:e6:52:58:a0:4a:42: a2:35:66:74:9f:8d:58:20:34:f5:85:27:78:f1:0e:44:51:a5: 73:97:27:40:4a:a5:4e:01:4b:6c:29:28:cc:eb:95:d9:e4:83: b9:cf:16:c7:e8:3e:f4:61:14:8f:ce:6f:99:5c:50:a3:5a:03: ae:97:a8:08:e5:2b:40:b5:0a:3d:f4:20:60:5e:1e:10:30:ac: 1e:df:9a:2d:e2:c5:82:c0:a3:6a:9a:e2:1f:0d:d8:3b:13:7d: 68:34:8e:c3:20:7b:56:f3:a1:c3:1a:63:eb:42:bd:7d:37:9e: 17:e9:b0:2e:cc:b9:c0:6c:4f:98:d8:67:80:e5:41:ef:53:6a: 70:ef:81:de:8a:bd:6c:63:17:af:59:41:ad:2a:43:71:23:b6: 21:a5:97:01:82:03:d3:0b:c3:0b:b8:b1:b5:dd:47:d3:6d:8e: fa:88:47:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6l2nAN+2zcFROcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjM4YmE3YmMtYmMyOS00OTZkLTllYjctZWE5NGUxZTQ3ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaLW1cuSAkgeP6srTWvzG89P2TjM0TsqsT8o PLevD2u4WmHN4fMTR+Um7pKz7cffmacj4WvLPn2kw5GR+Hwd57qyKVuM+qcuggvT AKMgAYS0bAwAtPtS8AiB+hEnCcMFrNBjEoBBXMDhoJB8/BGK9rcHBJ7o2QvASeHb xeiIaFuontFhTG66MzKohDcoqtHcDmi1WbG2DAGX5lCJJmuTNw6AJK8eD3+urIrW Y7S3yR6nyWyAerUEOin3/UkjPCKNGlV+fmwfwvt7k+uNaj4lR6T3znh7B9DepZKh hjCpVxVQYNfMeFbJaTFqDkg3fwUA/wcF3Uahr7ePVZP5Q/YkXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrwa9qjNH7FV9/eMyo/5D2lZydUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGU4OWUxNjctY2M2NC0z OWY4LTlmNDgtYWM2OTQ3OWRjNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfqp4T5g03ZAic1ZP8xWu1hN+1n7Dz+Jnbb15kkWByp1f5kVfDmgRcu q3S4AQ/ehnt43qkaNsQuPDL7aYpLkdaoE00UffH7XNzrT05Cdv5m3REQL+ZSWKBK QqI1ZnSfjVggNPWFJ3jxDkRRpXOXJ0BKpU4BS2wpKMzrldnkg7nPFsfoPvRhFI/O b5lcUKNaA66XqAjlK0C1Cj30IGBeHhAwrB7fmi3ixYLAo2qa4h8N2DsTfWg0jsMg e1bzocMaY+tCvX03nhfpsC7MucBsT5jYZ4DlQe9TanDvgd6KvWxjF69ZQa0qQ3Ej tiGllwGCA9MLwwu4sbXdR9NtjvqIR0U= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:18 2026 by rpki-client