$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8b821af-6aac-3fb1-a02e-e45ae54bd138.roa File: d8b821af-6aac-3fb1-a02e-e45ae54bd138.roa (raw, json) Hash identifier: JbL+6N062txvTI/a+25Zx/qwszDyh+OhNDW02V0J4is= Subject key identifier: 68:00:C3:73:19:B8:57:9A:84:22:C6:43:C8:A4:5A:B9:20:F5:41:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F7A4D92DB5C69E1840B3A1880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8b821af-6aac-3fb1-a02e-e45ae54bd138.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 75.90.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:92:db:5c:69:e1:84:0b:3a:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=b7eadd02-bb67-41bf-9bd0-8ec0e06eef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:76:9e:9e:80:84:e9:69:b0:dc:e0:6e:c2: bd:87:5f:b3:4b:92:bb:65:53:00:dc:c7:22:3e:a2: 66:02:6a:c2:19:fa:0c:fa:e4:56:8c:40:26:52:9b: 7c:5c:53:11:64:46:44:9e:da:c0:fa:7d:ce:79:5e: ce:59:91:33:e8:43:42:78:6a:dd:36:36:5a:e5:00: 1d:22:66:2c:b0:09:f1:dc:0d:7f:84:0d:9f:25:5e: 47:b2:9a:46:db:5a:47:c8:93:0b:d6:e5:61:84:5d: 24:60:a9:e6:c2:3d:c0:f4:94:a3:e0:f8:74:da:2b: 6d:33:12:53:52:fa:93:79:55:19:50:89:96:e8:b0: 19:95:2b:c5:9a:eb:fd:fc:bf:90:00:9f:28:2f:5e: 74:5d:7b:cc:1d:64:15:14:78:56:42:1c:d3:23:8d: fb:3c:a4:0c:2f:66:9d:10:04:a9:bb:78:28:18:a3: 5d:19:27:f5:d0:5c:64:96:2d:72:4a:dd:dc:9d:f0: 53:c6:e0:6d:1b:99:f2:06:cd:41:9a:71:64:5b:58: a1:1d:94:b6:99:a2:b8:ab:63:97:39:5c:40:f4:43: 7c:25:5e:93:fe:ab:b1:5f:81:23:ca:ae:72:8f:00: 67:95:7a:01:6b:73:9b:be:7d:54:8d:70:f5:19:ce: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:00:C3:73:19:B8:57:9A:84:22:C6:43:C8:A4:5A:B9:20:F5:41:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8b821af-6aac-3fb1-a02e-e45ae54bd138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:60:d0:bd:40:cc:84:a7:28:c9:3b:e6:65:67:2c:18:ce:c8: b6:86:0b:b0:e8:75:6f:86:95:f4:4d:da:4e:ba:cf:f3:24:df: bb:a3:78:09:b4:e8:01:18:e5:48:82:dd:d4:cf:87:3c:ed:a3: ad:f8:d7:01:be:50:1b:f6:39:7e:24:9a:55:d9:56:74:71:18: d2:0e:0f:16:3b:f6:f2:2e:bb:5c:2d:90:f3:35:b5:da:74:a0: c4:2d:b5:fb:f3:d8:6c:36:7b:f5:9c:06:5c:ce:bf:83:6f:d0: 0e:8c:61:28:0d:c6:3e:8e:64:03:b7:c8:55:b8:57:a7:1a:2a: e5:38:93:b9:c2:e3:2e:43:02:a0:b4:0c:6b:89:5b:0b:ab:7c: e8:0b:ae:a0:9e:34:ff:47:44:18:c0:64:7c:f5:d3:ca:de:60: f9:6b:49:83:b0:b6:87:c5:df:ab:19:b5:ad:ac:b7:d5:a6:87: 39:bf:c4:b4:d7:6b:ae:ec:25:af:8e:8f:4c:6d:e0:93:76:5d: 32:a3:cd:42:df:b2:a2:57:49:56:14:ca:3a:e5:3f:93:61:ae: 5e:a8:94:ea:30:2e:d7:8e:b4:9a:82:13:16:0b:16:82:c0:d5: 76:db:43:2f:04:b3:d0:20:e7:26:8a:c1:01:f4:e2:2f:c7:34: 93:32:94:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TZLbXGnhhAs6GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjdlYWRkMDItYmI2Ny00MWJmLTliZDAtOGVjMGUwNmVlZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiip2np6AhOlpsNzgbsK9h1+zS5K7ZVMA3Mci PqJmAmrCGfoM+uRWjEAmUpt8XFMRZEZEntrA+n3OeV7OWZEz6ENCeGrdNjZa5QAd ImYssAnx3A1/hA2fJV5HsppG21pHyJML1uVhhF0kYKnmwj3A9JSj4Ph02ittMxJT UvqTeVUZUImW6LAZlSvFmuv9/L+QAJ8oL150XXvMHWQVFHhWQhzTI437PKQML2ad EASpu3goGKNdGSf10Fxkli1ySt3cnfBTxuBtG5nyBs1BmnFkW1ihHZS2maK4q2OX OVxA9EN8JV6T/quxX4Ejyq5yjwBnlXoBa3Obvn1UjXD1Gc4mJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgAw3MZuFeahCLGQ8ikWrkg9UEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhiODIxYWYtNmFhYy0z ZmIxLWEwMmUtZTQ1YWU1NGJkMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1rxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARg0L1AzISnKMk75mVnLBjOyLaGC7DodW+GlfRN2k66z/Mk37ujeAm0 6AEY5UiC3dTPhzzto6341wG+UBv2OX4kmlXZVnRxGNIODxY79vIuu1wtkPM1tdp0 oMQttfvz2Gw2e/WcBlzOv4Nv0A6MYSgNxj6OZAO3yFW4V6caKuU4k7nC4y5DAqC0 DGuJWwurfOgLrqCeNP9HRBjAZHz108reYPlrSYOwtofF36sZta2st9Wmhzm/xLTX a67sJa+Oj0xt4JN2XTKjzULfsqJXSVYUyjrlP5Nhrl6olOowLteOtJqCExYLFoLA 1XbbQy8Es9Ag5yaKwQH04i/HNJMylAk= -----END CERTIFICATE-----Generated at Tue Oct 13 08:14:19 2026 by rpki-client