$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eac61809-4a98-3cf4-98de-f83432a56651.roa File: eac61809-4a98-3cf4-98de-f83432a56651.roa (raw, json) Hash identifier: AtObwAn74FDTTHfO+43kwAby7HV7Bl4hDiHUXuYCtMk= Subject key identifier: 39:4F:AB:8E:6C:AC:AE:11:50:F3:55:67:C9:FA:64:42:94:79:9C:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EE657406862F4BD03BEBF9640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eac61809-4a98-3cf4-98de-f83432a56651.roa Signing time: Thu 20 Aug 2026 13:00:12 +0000 ROA not before: Thu 20 Aug 2026 13:00:12 +0000 ROA not after: Wed 18 Nov 2026 14:00:12 +0000 asID: 7029 IP address blocks: 75.90.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:57:40:68:62:f4:bd:03:be:bf:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 20 13:00:12 2026 GMT Not After : Nov 18 14:00:12 2026 GMT Subject: CN=ee1c96e8-e5b1-4a86-84b9-78301019c5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:11:bd:7e:72:41:41:0c:dd:80:6d:6a:4c:db: 44:3c:e6:b9:ff:25:a8:ac:f6:6c:2e:97:42:98:50: d9:df:76:45:1e:88:c9:4d:91:1d:d6:0e:83:3f:a1: dd:32:ba:bf:b1:8e:94:5c:3d:ad:ac:af:6e:6b:2b: 4b:08:a7:0e:58:9a:21:7e:39:88:57:39:87:32:12: d0:f2:3f:19:b8:b4:0a:59:09:03:e8:49:e1:9e:b7: b2:17:8e:48:38:4a:de:17:06:7a:8a:7d:cf:02:21: c8:df:e7:fe:99:a5:99:c3:b5:88:27:89:3a:a2:22: b3:cd:31:1d:69:a5:af:a1:f5:5c:8e:95:7e:08:3a: 89:42:c5:95:2f:94:18:1e:6a:6e:78:57:b2:7f:e9: 4b:65:ee:0d:b4:6b:d9:67:eb:78:e5:28:39:17:04: 67:de:c4:73:d2:3c:86:0f:67:a3:c2:ad:50:7b:cf: df:c7:02:da:b3:a0:b0:49:02:0b:3f:b2:95:ad:91: b7:d5:ba:94:9d:64:ef:7c:51:b4:12:2f:8c:68:54: 79:08:50:ff:6a:c1:b9:45:26:b5:ae:a6:ec:9a:3b: 19:5e:af:d8:67:ca:c8:60:72:c7:af:ab:33:ed:b8: 13:96:3b:c2:c6:c9:68:57:35:cf:fe:38:7f:eb:cf: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:AB:8E:6C:AC:AE:11:50:F3:55:67:C9:FA:64:42:94:79:9C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eac61809-4a98-3cf4-98de-f83432a56651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b0:c9:b1:00:5b:43:1e:a7:7d:4f:c9:89:07:ab:14:2e:1b: 0e:6b:04:59:40:c0:f8:ad:77:e4:16:12:d5:ad:7f:54:48:97: 29:a0:3d:41:09:74:81:44:2c:b1:56:8b:a9:57:95:cf:7a:68: 93:bb:b6:85:c9:ef:1b:da:4b:22:26:7a:01:c9:dd:b8:f2:a4: 63:d1:5e:19:74:d9:53:81:a6:5a:c2:20:3a:83:b0:9e:37:08: c7:a1:fb:2a:c8:b3:ca:71:3c:7c:14:58:b3:2a:bf:a7:eb:ce: 0e:a7:0e:a9:c7:2b:54:30:80:b9:41:3e:be:8e:45:eb:1b:93: 1d:21:59:a9:62:d9:c0:d4:77:f8:14:19:d5:42:2c:f8:d0:dc: 4a:a0:bc:94:b4:ce:74:c5:c6:8f:84:b8:21:f0:82:d8:98:61: 8f:f5:b0:b3:53:b1:de:dd:2c:fe:a8:b5:cf:a7:d5:9e:1b:a4: 6e:d8:9e:41:2f:c6:47:a9:c7:84:d7:d1:70:82:f4:89:15:3a: e0:0b:02:8c:d3:94:50:f1:6c:00:4e:e0:28:f7:a9:75:8f:4a: af:0a:d5:77:c4:4a:ef:63:bf:a4:58:ea:f4:38:84:71:d0:90: 89:88:8e:13:ef:60:c7:2d:6d:27:2d:5f:6f:7e:fc:db:e1:d7: f3:e5:99:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mV0BoYvS9A76/lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgyMDEzMDAxMloXDTI2MTExODE0MDAxMlowLzEtMCsGA1UEAxMk ZWUxYzk2ZTgtZTViMS00YTg2LTg0YjktNzgzMDEwMTljNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBG9fnJBQQzdgG1qTNtEPOa5/yWorPZsLpdC mFDZ33ZFHojJTZEd1g6DP6HdMrq/sY6UXD2trK9uaytLCKcOWJohfjmIVzmHMhLQ 8j8ZuLQKWQkD6EnhnreyF45IOEreFwZ6in3PAiHI3+f+maWZw7WIJ4k6oiKzzTEd aaWvofVcjpV+CDqJQsWVL5QYHmpueFeyf+lLZe4NtGvZZ+t45Sg5FwRn3sRz0jyG D2ejwq1Qe8/fxwLas6CwSQILP7KVrZG31bqUnWTvfFG0Ei+MaFR5CFD/asG5RSa1 rqbsmjsZXq/YZ8rIYHLHr6sz7bgTljvCxsloVzXP/jh/689hMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlPq45srK4RUPNVZ8n6ZEKUeZxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWFjNjE4MDktNGE5OC0z Y2Y0LTk4ZGUtZjgzNDMyYTU2NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1pqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmwybEAW0Mep31PyYkHqxQuGw5rBFlAwPitd+QWEtWtf1RIlymgPUEJ dIFELLFWi6lXlc96aJO7toXJ7xvaSyImegHJ3bjypGPRXhl02VOBplrCIDqDsJ43 CMeh+yrIs8pxPHwUWLMqv6frzg6nDqnHK1QwgLlBPr6OResbkx0hWali2cDUd/gU GdVCLPjQ3EqgvJS0znTFxo+EuCHwgtiYYY/1sLNTsd7dLP6otc+n1Z4bpG7YnkEv xkepx4TX0XCC9IkVOuALAozTlFDxbABO4Cj3qXWPSq8K1XfESu9jv6RY6vQ4hHHQ kImIjhPvYMctbSctX29+/Nvh1/PlmRM= -----END CERTIFICATE-----Generated at Thu Aug 27 09:50:12 2026 by rpki-client