$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e2a13f7-f394-317f-98c1-adc75a5628eb.roa File: 8e2a13f7-f394-317f-98c1-adc75a5628eb.roa (raw, json) Hash identifier: iYK6IbXeVnWI/5oY2UR8H0sXIMm3VOEEqSF6GNU9708= Subject key identifier: 57:D3:E4:27:78:B2:90:2B:63:C3:C1:47:5F:26:99:CF:0C:02:93:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED1672AB51FF0DE4B8B4E4500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e2a13f7-f394-317f-98c1-adc75a5628eb.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 7029 IP address blocks: 75.90.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:2a:b5:1f:f0:de:4b:8b:4e:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=cd3fd286-10d6-4d87-89a9-0bad15718b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:f6:02:f2:1d:c4:0c:3c:cb:56:7f:dc:95: 0c:27:2f:5b:bc:3a:ec:1c:c4:8c:39:ad:49:4b:3f: 4d:5d:18:ea:a4:7c:e4:06:94:80:42:0c:7e:a5:46: b8:2a:7f:48:ec:d0:2b:b9:38:8f:7c:4d:03:48:71: e0:05:b4:f6:01:6a:b3:c9:f7:80:45:dc:bb:75:ae: 19:16:3d:e1:98:c4:30:60:c1:43:be:88:8b:5b:94: c9:3c:fe:e6:b9:b0:6b:7b:27:c1:aa:19:46:31:fe: 0f:7b:af:d1:8f:b7:b3:51:d3:be:af:fd:15:25:2a: 3c:1b:61:60:1b:8f:1e:2d:99:a4:99:c5:87:b5:6c: 03:05:69:df:2a:82:5c:af:a9:35:d9:41:ce:e2:6b: 61:8d:0d:8a:06:7e:33:c4:72:37:14:83:78:fa:82: 1e:5b:68:37:e1:aa:39:71:b5:f9:89:37:98:a5:96: 1b:85:b9:25:32:5e:51:54:64:da:90:25:08:46:cd: 72:7e:4e:ce:3b:5e:0a:33:c0:e2:53:6a:ed:e0:27: 83:c0:43:ce:71:df:1c:91:d7:6e:94:2b:64:b4:23: 48:e9:ec:92:c7:ce:ee:1a:29:ed:ab:a3:0b:82:dc: 0a:66:7e:54:1b:6d:cf:37:d8:61:9d:e6:b5:9d:a0: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D3:E4:27:78:B2:90:2B:63:C3:C1:47:5F:26:99:CF:0C:02:93:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8e2a13f7-f394-317f-98c1-adc75a5628eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:70:b0:f6:67:cb:a5:57:05:fa:a4:85:6c:7b:0b:3a:c5:7c: f2:5e:41:16:6c:29:8b:e5:df:4c:8e:ce:09:a6:8a:d4:6b:b0: 3a:91:e9:fa:d5:ac:af:61:18:d9:22:bd:9c:82:29:9c:13:af: 7b:81:e4:64:21:64:b8:75:b5:2f:04:9a:c9:31:7f:9e:6c:20: 1f:93:96:95:78:fb:97:35:c5:81:d6:05:e3:35:4c:6d:be:1f: 8a:e2:21:3a:fe:73:a7:5f:e5:82:e3:88:12:1e:da:0e:db:1e: 31:c5:44:d2:31:da:fa:af:f8:dc:46:97:c4:19:3f:6b:9e:d3: 6c:ab:b6:ab:1f:66:44:c4:3e:dc:8b:ee:25:e3:f9:d7:49:78: 30:ed:45:c3:42:92:a2:85:b0:5e:5b:35:e8:d1:4a:b2:31:e4: ce:53:80:c3:04:b1:00:4e:61:9c:bd:4d:ef:ae:20:2b:85:12: b6:1f:62:65:14:e3:ac:fb:48:a9:e1:76:a6:0e:d5:76:11:37: 7d:01:6f:1a:20:55:01:f2:35:8d:0c:71:5b:fb:da:0c:8f:75: d3:d2:1a:1b:0f:67:c6:72:e6:75:c6:1c:49:cf:66:e4:3d:d9: bc:9a:4a:80:62:6a:57:65:99:90:9f:8b:de:dc:5c:14:24:95: 35:65:fa:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyq1H/DeS4tORQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk Y2QzZmQyODYtMTBkNi00ZDg3LTg5YTktMGJhZDE1NzE4YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJb2AvIdxAw8y1Z/3JUMJy9bvDrsHMSMOa1J Sz9NXRjqpHzkBpSAQgx+pUa4Kn9I7NAruTiPfE0DSHHgBbT2AWqzyfeARdy7da4Z Fj3hmMQwYMFDvoiLW5TJPP7mubBreyfBqhlGMf4Pe6/Rj7ezUdO+r/0VJSo8G2Fg G48eLZmkmcWHtWwDBWnfKoJcr6k12UHO4mthjQ2KBn4zxHI3FIN4+oIeW2g34ao5 cbX5iTeYpZYbhbklMl5RVGTakCUIRs1yfk7OO14KM8DiU2rt4CeDwEPOcd8ckddu lCtktCNI6eySx87uGintq6MLgtwKZn5UG23PN9hhnea1naBkgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfT5Cd4spArY8PBR18mmc8MApNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGUyYTEzZjctZjM5NC0z MTdmLTk4YzEtYWRjNzVhNTYyOGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1pjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhwsPZny6VXBfqkhWx7CzrFfPJeQRZsKYvl30yOzgmmitRrsDqR6frV rK9hGNkivZyCKZwTr3uB5GQhZLh1tS8Emskxf55sIB+TlpV4+5c1xYHWBeM1TG2+ H4riITr+c6df5YLjiBIe2g7bHjHFRNIx2vqv+NxGl8QZP2ue02yrtqsfZkTEPtyL 7iXj+ddJeDDtRcNCkqKFsF5bNejRSrIx5M5TgMMEsQBOYZy9Te+uICuFErYfYmUU 46z7SKnhdqYO1XYRN30BbxogVQHyNY0McVv72gyPddPSGhsPZ8Zy5nXGHEnPZuQ9 2byaSoBialdlmZCfi97cXBQklTVl+vg= -----END CERTIFICATE-----Generated at Tue Sep 1 04:46:44 2026 by rpki-client