$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa File: a40090c3-6aaf-3441-8a44-3afa48482968.roa (raw, json) Hash identifier: ckyJYTxE3uvNk6G0TeVp2HC0q/Q9SKv0wJRIB1LDWss= Subject key identifier: 58:B2:16:CC:CB:5A:1C:94:12:25:3E:DF:24:0A:73:B8:A1:68:81:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EAD1C64AA6CE5F9A5B092CBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 75.91.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:64:aa:6c:e5:f9:a5:b0:92:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=4dd644a2-9b40-4117-a337-56fc251ecee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:ba:c7:b8:66:1b:e7:56:5e:dc:3f:81:ed: 53:44:f7:ff:29:f8:f1:e1:76:7f:71:bb:8f:5a:65: 2c:a5:53:c2:90:32:52:06:28:c3:77:c9:dd:2e:60: 32:fe:23:31:56:51:3f:17:0b:c5:d5:3d:68:a2:30: 69:03:f8:ab:b5:1c:d6:32:ca:79:51:f6:d2:51:66: 3f:d2:04:75:88:fe:3e:e0:5a:b1:f0:3a:90:2d:57: 5d:51:cf:b9:c7:e8:79:3b:6d:f7:94:f4:8c:82:44: 27:cb:9a:b3:cc:30:51:94:f9:49:1d:e6:1f:ce:c5: 06:fe:f3:87:7a:f0:17:2b:ff:07:57:17:5d:27:16: 7a:59:49:c2:f6:3a:f2:80:ae:70:be:f8:23:da:12: 5d:ab:fa:f6:aa:9c:f2:5e:9d:ab:80:2b:ff:79:f5: 64:e0:d5:2a:ad:a0:5f:2b:ed:b0:78:b5:9a:0c:d3: d9:6d:19:03:58:47:ff:52:b2:b9:7e:3c:23:06:64: 67:89:ef:f4:8a:21:c2:b6:88:ac:2e:db:36:6b:1a: 01:cd:0d:99:c4:45:b3:e2:23:73:58:52:85:44:54: 41:21:4b:f4:09:18:8e:05:b5:75:54:a0:d6:cb:12: d1:c6:52:72:a4:c6:a4:1d:db:dd:34:d3:fb:c7:cd: f6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:16:CC:CB:5A:1C:94:12:25:3E:DF:24:0A:73:B8:A1:68:81:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c9:11:86:99:a2:5b:cb:68:eb:7c:51:6a:22:61:bf:ae:3d: b5:7f:26:42:b7:0f:28:a3:1b:60:d4:ce:65:b1:f3:57:c6:1c: 7a:5a:64:8f:1e:dc:19:ec:50:d9:e6:1c:a6:eb:5d:f4:58:f1: 7c:72:25:f9:6e:bc:5f:0f:c2:1a:79:a6:22:95:6c:4f:c5:3b: b2:dd:e9:39:6c:53:92:59:50:f4:53:f8:02:7c:93:82:a2:d7: c4:18:33:df:1f:9c:86:fb:0a:09:cc:49:46:05:82:8b:d1:b4: e3:6c:13:07:e4:a2:42:df:b0:94:8d:70:0f:0b:2e:9a:05:42: ee:16:3b:18:89:c7:12:28:da:4a:ba:ea:12:c5:50:80:28:3a: 75:6f:97:2b:6f:da:bf:cc:ae:36:2a:48:70:a0:7a:dd:c1:fd: 5d:58:3f:e8:6a:36:8a:5d:72:0f:dd:5b:6c:7c:c2:58:df:1d: a7:30:8f:eb:58:b4:21:79:a2:d7:48:8f:9c:95:4a:4c:ff:04: 10:46:61:0c:06:9c:31:41:50:ac:e1:39:3c:cd:5e:8b:ad:1c: 9b:8c:66:9f:f0:c9:6b:38:e4:39:04:a2:08:a5:27:9c:91:59: 69:ee:5c:56:a7:c8:c7:e9:2a:39:11:32:76:72:dd:b3:36:54: 7d:e8:f2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHGSqbOX5pbCSy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk NGRkNjQ0YTItOWI0MC00MTE3LWEzMzctNTZmYzI1MWVjZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oa6x7hmG+dWXtw/ge1TRPf/Kfjx4XZ/cbuP WmUspVPCkDJSBijDd8ndLmAy/iMxVlE/FwvF1T1oojBpA/irtRzWMsp5UfbSUWY/ 0gR1iP4+4Fqx8DqQLVddUc+5x+h5O233lPSMgkQny5qzzDBRlPlJHeYfzsUG/vOH evAXK/8HVxddJxZ6WUnC9jrygK5wvvgj2hJdq/r2qpzyXp2rgCv/efVk4NUqraBf K+2weLWaDNPZbRkDWEf/UrK5fjwjBmRnie/0iiHCtoisLts2axoBzQ2ZxEWz4iNz WFKFRFRBIUv0CRiOBbV1VKDWyxLRxlJypMakHdvdNNP7x832xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiyFszLWhyUEiU+3yQKc7ihaIG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwMDkwYzMtNmFhZi0z NDQxLThhNDQtM2FmYTQ4NDgyOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzJEYaZolvLaOt8UWoiYb+uPbV/JkK3DyijG2DUzmWx81fGHHpaZI8e 3BnsUNnmHKbrXfRY8XxyJfluvF8Pwhp5piKVbE/FO7Ld6TlsU5JZUPRT+AJ8k4Ki 18QYM98fnIb7CgnMSUYFgovRtONsEwfkokLfsJSNcA8LLpoFQu4WOxiJxxIo2kq6 6hLFUIAoOnVvlytv2r/MrjYqSHCget3B/V1YP+hqNopdcg/dW2x8wljfHacwj+tY tCF5otdIj5yVSkz/BBBGYQwGnDFBUKzhOTzNXoutHJuMZp/wyWs45DkEogilJ5yR WWnuXFanyMfpKjkRMnZy3bM2VH3o8qE= -----END CERTIFICATE-----Generated at Thu Aug 27 12:30:35 2026 by rpki-client