$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22333dd-49f3-39f7-816b-4cf02d4f8899.roa File: a22333dd-49f3-39f7-816b-4cf02d4f8899.roa (raw, json) Hash identifier: QO6PKXHVhgsWR5hiuF0dINthTpZB7BSZ+g9JrqygisU= Subject key identifier: 36:55:29:CA:89:8D:CA:6E:09:D8:31:E5:C5:F2:2C:52:69:7E:D6:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCBAD7A0B9CD24233C2A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22333dd-49f3-39f7-816b-4cf02d4f8899.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 75.90.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ba:d7:a0:b9:cd:24:23:3c:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3ff5bc6f-5f34-45e9-a233-bd859a8a1242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:01:15:2c:f8:a1:5c:7a:be:66:a2:40:a5: bc:f8:ab:8d:41:1d:59:a7:93:43:4d:ba:34:23:2b: cd:28:51:14:2a:d3:20:ce:22:88:f1:70:85:15:82: 44:a9:31:cf:6b:24:d7:66:dd:e1:05:22:06:22:73: 37:f8:d8:24:db:3b:2c:72:c2:d5:6d:e1:d5:ee:12: 3e:b9:6c:ad:c9:40:65:63:e5:6b:9d:67:3c:ae:d7: d0:7a:c9:61:60:84:3e:41:3e:0f:9d:74:4c:4f:b1: a9:7b:64:eb:40:93:26:26:75:db:06:b0:4e:ec:63: 29:0b:90:ef:28:76:72:1a:2d:cc:bd:9d:0f:e9:0d: db:2a:83:1f:d7:22:ef:ea:43:61:57:47:e1:0e:1f: 38:98:12:e9:96:43:a1:b1:d3:79:5f:47:48:3c:73: f0:b2:5c:8d:1c:ce:6e:e4:d1:16:11:50:1a:f0:24: 37:a5:14:00:55:6f:af:d5:ce:34:c4:53:75:45:7b: f8:0b:77:f8:a8:fa:0f:ab:05:c7:3f:ec:30:54:54: b4:b8:01:18:a7:8f:35:36:03:ca:3d:d1:03:92:da: cb:48:4c:6e:de:5a:a0:f5:ec:b0:c2:d9:1d:3a:10: b2:ff:86:12:1f:ed:4e:88:9a:1f:e6:12:62:66:1d: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:55:29:CA:89:8D:CA:6E:09:D8:31:E5:C5:F2:2C:52:69:7E:D6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22333dd-49f3-39f7-816b-4cf02d4f8899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7d:e5:2e:5f:5f:18:06:b5:5e:52:d1:5b:d5:e2:27:3b:63: df:e0:d2:dc:7d:0a:00:75:9e:52:ff:d1:40:55:8e:64:2c:b1: b0:36:2e:db:06:0f:39:41:10:2a:ab:78:38:4e:59:47:1a:7c: e8:e4:2b:ad:61:80:e2:47:6d:c8:81:cb:1f:f7:9d:52:d1:26: 36:33:03:2d:cd:b9:5a:20:60:aa:2b:ec:f9:84:76:6c:28:4f: 62:99:b5:b5:ef:5d:0b:3c:5b:d5:f4:9e:d9:41:c9:6c:61:73: a7:c7:76:48:72:32:8b:29:c1:fb:ce:41:b4:95:ca:b0:18:6b: c3:93:f5:e4:55:ed:28:e0:bf:3f:4f:3f:73:69:74:20:ec:8c: 9a:c6:d0:62:15:e0:49:ce:11:c6:a3:a1:cf:81:b3:f9:2b:e4: 54:88:af:1a:a5:4e:ed:b5:ee:e8:cf:bb:f7:a0:f3:97:a4:a5: 0d:cc:7f:84:55:2d:4f:79:49:eb:b8:92:e5:55:8c:6c:58:58: 62:69:12:cd:71:7f:6a:94:de:7c:2d:4b:c8:d6:db:da:74:68: e4:0b:f4:19:1a:ff:82:f2:b6:30:f2:a6:c3:7c:9e:71:7d:2a: 0f:1f:40:ab:d4:61:ca:b8:72:b4:1e:78:4a:1e:7b:b3:db:74: ca:83:52:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLrXoLnNJCM8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2ZmNWJjNmYtNWYzNC00NWU5LWEyMzMtYmQ4NTlhOGExMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilABFSz4oVx6vmaiQKW8+KuNQR1Zp5NDTbo0 IyvNKFEUKtMgziKI8XCFFYJEqTHPayTXZt3hBSIGInM3+Ngk2zsscsLVbeHV7hI+ uWytyUBlY+VrnWc8rtfQeslhYIQ+QT4PnXRMT7Gpe2TrQJMmJnXbBrBO7GMpC5Dv KHZyGi3MvZ0P6Q3bKoMf1yLv6kNhV0fhDh84mBLplkOhsdN5X0dIPHPwslyNHM5u 5NEWEVAa8CQ3pRQAVW+v1c40xFN1RXv4C3f4qPoPqwXHP+wwVFS0uAEYp481NgPK PdEDktrLSExu3lqg9eywwtkdOhCy/4YSH+1OiJof5hJiZh0p/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZVKcqJjcpuCdgx5cXyLFJpftb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTIyMzMzZGQtNDlmMy0z OWY3LTgxNmItNGNmMDJkNGY4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1rgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB95S5fXxgGtV5S0VvV4ic7Y9/g0tx9CgB1nlL/0UBVjmQssbA2LtsG DzlBECqreDhOWUcafOjkK61hgOJHbciByx/3nVLRJjYzAy3NuVogYKor7PmEdmwo T2KZtbXvXQs8W9X0ntlByWxhc6fHdkhyMospwfvOQbSVyrAYa8OT9eRV7Sjgvz9P P3NpdCDsjJrG0GIV4EnOEcajoc+Bs/kr5FSIrxqlTu217ujPu/eg85ekpQ3Mf4RV LU95Seu4kuVVjGxYWGJpEs1xf2qU3nwtS8jW29p0aOQL9Bka/4LytjDypsN8nnF9 Kg8fQKvUYcq4crQeeEoee7PbdMqDUqM= -----END CERTIFICATE-----Generated at Mon Apr 13 11:43:16 2026 by rpki-client