$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e6f128-eaff-3228-8238-a5715183132e.roa File: 43e6f128-eaff-3228-8238-a5715183132e.roa (raw, json) Hash identifier: XAVFNpqRN60DSqnYO7jzCp/llxW1+yLj7KSAVLb7oT4= Subject key identifier: 15:A1:BE:5D:91:7C:2B:AD:9D:15:68:36:19:A0:9F:22:B1:20:5F:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F103787CACDC80E775BA44BA8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e6f128-eaff-3228-8238-a5715183132e.roa Signing time: Fri 04 Sep 2026 13:00:16 +0000 ROA not before: Fri 04 Sep 2026 13:00:16 +0000 ROA not after: Thu 03 Dec 2026 14:00:16 +0000 asID: 7029 IP address blocks: 75.90.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:87:ca:cd:c8:0e:77:5b:a4:4b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 13:00:16 2026 GMT Not After : Dec 3 14:00:16 2026 GMT Subject: CN=f67bf01c-2d19-423b-ab0d-df8d2d39a54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:a7:56:1c:0a:95:35:00:70:06:96:34:1c: be:4f:b0:93:99:16:79:c6:93:4a:cf:d2:df:5a:3b: 0a:72:d8:f7:64:88:b4:69:8c:a4:eb:c5:b3:01:c9: e8:9d:2d:01:53:38:bf:1b:bd:33:6c:53:41:82:f9: 16:19:9e:15:da:06:7b:0a:2e:ff:da:ac:d7:d7:ae: 80:e9:7f:44:44:a3:e4:84:da:9f:96:50:77:3b:6e: 5f:a1:9b:48:f3:82:6c:84:e4:6a:82:ce:fa:1d:6e: 28:b5:f4:94:4a:1a:28:82:ad:4a:c6:d5:94:fd:de: 39:c7:3d:de:20:6b:39:77:c9:5c:e7:36:92:25:99: 11:40:80:1b:44:db:80:52:77:f1:c1:f4:ab:4a:08: 84:da:89:c1:57:c2:06:97:51:a7:06:9f:c1:dc:4a: 88:7e:ff:1b:fc:9a:49:09:b3:58:ca:42:d3:03:bf: 1c:15:99:02:7b:eb:e2:2d:6a:d9:1b:ce:b8:14:7c: 52:d9:21:d6:0e:3a:db:cd:62:1e:3d:30:f0:8f:9c: fc:95:5c:10:3c:56:30:d2:d9:d1:71:cd:5e:42:21: 29:16:58:2c:cc:d6:44:c8:20:81:cf:1a:1d:90:18: c2:9f:80:0d:7d:0b:69:32:f4:93:3a:56:ad:73:45: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A1:BE:5D:91:7C:2B:AD:9D:15:68:36:19:A0:9F:22:B1:20:5F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/43e6f128-eaff-3228-8238-a5715183132e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6f:f1:38:d6:8b:a7:08:f3:25:f2:a2:8f:59:7e:4e:01:c6: 81:8d:88:27:17:24:f8:8d:dd:1c:fb:a9:30:89:2b:08:a5:e8: 1f:e8:c7:eb:3a:43:83:f2:73:2f:16:e2:db:c2:03:a3:95:68: 5b:33:fa:7f:32:98:a6:41:06:58:3d:21:25:89:fc:db:19:1c: f2:20:58:c5:55:8d:e3:8b:bf:59:44:bb:28:6d:73:02:5b:2c: ce:07:9c:45:a4:62:15:b0:8f:92:d3:77:76:12:db:f7:48:98: 40:7d:70:c0:ee:dd:2a:51:1d:80:8d:24:7a:7c:1c:96:df:4b: 2b:63:b7:b4:02:ee:19:00:7c:02:17:74:e4:cc:d5:39:7a:28: 55:bb:66:ac:6e:fb:5a:4e:3b:e8:51:92:2c:00:c3:dd:03:6a: e2:83:a2:cb:5a:7b:33:4c:1f:3b:8f:ca:6f:0a:13:04:df:28: 36:80:5b:97:04:36:99:4c:71:ee:e7:51:2d:5e:ad:20:48:23: 8a:7a:38:3c:03:b2:f5:d5:11:0d:5e:04:a1:5f:c0:b7:06:46: 58:76:b1:1a:b0:53:93:30:65:1a:4e:98:8b:f2:40:04:bb:4f: e5:a2:89:19:10:5a:66:45:73:a3:4d:df:83:3b:a1:b7:96:58: 9b:0e:8d:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4fKzcgOd1ukS6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDEzMDAxNloXDTI2MTIwMzE0MDAxNlowLzEtMCsGA1UEAxMk ZjY3YmYwMWMtMmQxOS00MjNiLWFiMGQtZGY4ZDJkMzlhNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2WnVhwKlTUAcAaWNBy+T7CTmRZ5xpNKz9Lf WjsKctj3ZIi0aYyk68WzAcnonS0BUzi/G70zbFNBgvkWGZ4V2gZ7Ci7/2qzX166A 6X9ERKPkhNqfllB3O25foZtI84JshORqgs76HW4otfSUShoogq1KxtWU/d45xz3e IGs5d8lc5zaSJZkRQIAbRNuAUnfxwfSrSgiE2onBV8IGl1GnBp/B3EqIfv8b/JpJ CbNYykLTA78cFZkCe+viLWrZG864FHxS2SHWDjrbzWIePTDwj5z8lVwQPFYw0tnR cc1eQiEpFlgszNZEyCCBzxodkBjCn4ANfQtpMvSTOlatc0VeuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWhvl2RfCutnRVoNhmgnyKxIF80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDNlNmYxMjgtZWFmZi0z MjI4LTgyMzgtYTU3MTUxODMxMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1pfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdv8TjWi6cI8yXyoo9Zfk4BxoGNiCcXJPiN3Rz7qTCJKwil6B/ox+s6 Q4Pycy8W4tvCA6OVaFsz+n8ymKZBBlg9ISWJ/NsZHPIgWMVVjeOLv1lEuyhtcwJb LM4HnEWkYhWwj5LTd3YS2/dImEB9cMDu3SpRHYCNJHp8HJbfSytjt7QC7hkAfAIX dOTM1Tl6KFW7Zqxu+1pOO+hRkiwAw90DauKDostaezNMHzuPym8KEwTfKDaAW5cE NplMce7nUS1erSBII4p6ODwDsvXVEQ1eBKFfwLcGRlh2sRqwU5MwZRpOmIvyQAS7 T+WiiRkQWmZFc6NN34M7obeWWJsOjUw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:15:06 2026 by rpki-client