$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa File: 5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa (raw, json) Hash identifier: OTLbRZBSEDjKlX2yh0+QAcGa8ZkkIAJI+GbogXR+Zg4= Subject key identifier: F7:CD:BC:FB:61:6E:AA:55:EA:64:8F:82:12:F2:E8:10:58:EE:F6:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA3FEABAE22888BE5A5460 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 75.90.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3f:ea:ba:e2:28:88:be:5a:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=e2d6bb22-11d2-475f-a3c4-c444b2dc7c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:15:9a:05:95:39:25:20:e9:39:2f:e6:f8: 1e:6e:d9:3d:84:9f:ff:d3:14:b3:b5:05:69:53:d9: f8:19:76:d5:60:0b:10:51:48:f7:61:37:1d:94:1d: fe:bf:05:0e:d6:33:95:bd:d4:bf:ab:4f:75:c9:d6: b9:48:9c:40:57:0a:4d:5f:fd:42:76:d3:b9:72:58: 1a:83:16:16:1b:f0:7f:d3:aa:49:7b:e7:3e:c9:ac: ee:45:f7:97:a4:14:65:c8:7d:38:37:9b:fb:24:e6: 1c:fc:f5:6e:a1:12:3e:75:6a:91:9b:2d:9a:8f:9b: 86:2e:04:e9:ea:1a:9a:04:bf:53:b0:20:80:8c:14: 46:19:50:b6:a3:f6:7e:05:f3:92:8f:0c:e6:79:d7: db:65:0e:35:fa:71:ce:53:30:fc:f9:6f:d8:c1:e8: 5b:73:e1:02:c7:0b:f4:cc:77:61:4c:e8:2d:ab:47: ca:29:e1:2e:1b:c0:c3:89:df:ba:a6:e1:ad:15:6f: 8c:85:89:b3:ab:8e:86:bc:a5:d7:f3:0c:a6:c1:a1: f6:63:b9:bd:85:89:81:4c:fc:dd:55:23:87:a1:26: 7f:3b:b9:57:dd:9d:02:c5:b7:87:d6:18:58:03:27: 17:6b:08:e5:c8:17:90:f6:7e:18:fd:05:bd:9c:e2: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CD:BC:FB:61:6E:AA:55:EA:64:8F:82:12:F2:E8:10:58:EE:F6:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5f6f0fd5-3470-38ed-8466-89ca12ca1737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:dc:97:b9:f9:d2:b0:3b:26:4f:89:b6:c2:1d:b0:26:36:98: 56:4d:60:08:59:ff:6f:a0:16:7f:49:90:d4:71:59:bd:3b:eb: 49:e9:9e:43:46:b6:ca:77:07:ab:1e:3d:69:bd:81:a5:0e:3b: 20:42:56:4a:29:f8:45:ef:d9:1d:56:1f:c6:04:99:67:48:6f: 31:27:c9:1f:71:88:76:c6:e3:03:67:d7:0e:ef:1f:3f:62:7d: 84:8b:72:e7:90:cf:6a:d7:69:0e:aa:7d:b0:43:25:18:cd:e5: 60:1b:05:51:66:17:ff:03:a3:75:ae:29:0c:e1:8d:ca:ac:05: 9a:6f:51:d3:cc:9d:6d:36:7e:8c:dc:03:a4:db:aa:a7:7b:94: 05:d0:98:22:08:45:0d:89:99:4b:9b:71:0f:bc:06:14:18:65: 97:44:d1:84:c5:53:c1:3e:48:b7:21:d0:bb:89:9d:d3:d2:b6: 75:73:85:f4:67:37:bb:72:12:15:c8:d2:2c:ae:f9:95:c0:bf: 79:0a:1d:8d:46:6d:24:a6:44:87:d7:6c:d5:ff:63:28:7d:a0: 52:cb:d7:3b:e8:42:5e:c1:fc:d3:cb:9d:4d:80:04:92:d8:3f: 81:7a:c0:9e:03:2c:86:e2:84:95:18:25:07:fe:27:7c:b1:28: db:02:dc:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj/quuIoiL5aVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZTJkNmJiMjItMTFkMi00NzVmLWEzYzQtYzQ0NGIyZGM3YzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt58VmgWVOSUg6Tkv5vgebtk9hJ//0xSztQVp U9n4GXbVYAsQUUj3YTcdlB3+vwUO1jOVvdS/q091yda5SJxAVwpNX/1CdtO5clga gxYWG/B/06pJe+c+yazuRfeXpBRlyH04N5v7JOYc/PVuoRI+dWqRmy2aj5uGLgTp 6hqaBL9TsCCAjBRGGVC2o/Z+BfOSjwzmedfbZQ41+nHOUzD8+W/Ywehbc+ECxwv0 zHdhTOgtq0fKKeEuG8DDid+6puGtFW+MhYmzq46GvKXX8wymwaH2Y7m9hYmBTPzd VSOHoSZ/O7lX3Z0CxbeH1hhYAycXawjlyBeQ9n4Y/QW9nOLEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfNvPthbqpV6mSPghLy6BBY7vYqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWY2ZjBmZDUtMzQ3MC0z OGVkLTg0NjYtODljYTEyY2ExNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1oQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABncl7n50rA7Jk+JtsIdsCY2mFZNYAhZ/2+gFn9JkNRxWb0760npnkNG tsp3B6sePWm9gaUOOyBCVkop+EXv2R1WH8YEmWdIbzEnyR9xiHbG4wNn1w7vHz9i fYSLcueQz2rXaQ6qfbBDJRjN5WAbBVFmF/8Do3WuKQzhjcqsBZpvUdPMnW02fozc A6Tbqqd7lAXQmCIIRQ2JmUubcQ+8BhQYZZdE0YTFU8E+SLch0LuJndPStnVzhfRn N7tyEhXI0iyu+ZXAv3kKHY1GbSSmRIfXbNX/Yyh9oFLL1zvoQl7B/NPLnU2ABJLY P4F6wJ4DLIbihJUYJQf+J3yxKNsC3AU= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:29 2026 by rpki-client