$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e6e631e-4c5e-3c74-97b0-5e30e8d1363a.roa File: 7e6e631e-4c5e-3c74-97b0-5e30e8d1363a.roa (raw, json) Hash identifier: JHir1uJCbd54Z2eMi0J4rNeOQyIlgGlo8jRYMmrpIaI= Subject key identifier: BC:16:1A:9B:A1:34:6D:77:03:3C:1D:CF:A4:CF:F5:A1:79:23:6C:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1019C0B8EE62636C6A1F3000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e6e631e-4c5e-3c74-97b0-5e30e8d1363a.roa Signing time: Fri 04 Sep 2026 12:00:16 +0000 ROA not before: Fri 04 Sep 2026 12:00:16 +0000 ROA not after: Thu 03 Dec 2026 13:00:16 +0000 asID: 7029 IP address blocks: 75.90.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:19:c0:b8:ee:62:63:6c:6a:1f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 4 12:00:16 2026 GMT Not After : Dec 3 13:00:16 2026 GMT Subject: CN=669d2624-f594-46ef-ab14-49bed836e31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ef:f8:f9:f9:49:2b:58:05:c2:5a:67:5d:8c: c1:ae:21:9f:6d:cf:1b:4d:20:86:50:f1:ab:01:93: b1:44:29:22:e8:63:b8:95:46:a1:8b:f4:9d:5c:a5: 60:41:bb:12:15:ef:d9:94:15:e2:b7:e3:c9:12:d2: 9e:d3:f9:e8:a6:64:03:9f:ba:f1:d4:48:6f:99:2e: 46:7a:68:66:e8:f8:d3:1c:4a:81:3e:4c:ca:c0:04: ac:0e:6c:bf:49:08:09:fc:ef:ab:b9:50:ab:9e:4c: 43:99:76:45:f9:d4:90:68:9b:db:61:76:fd:cc:80: 9f:a8:20:3e:f9:09:4b:24:0a:cb:3c:93:b5:7c:2d: f6:05:69:18:26:98:d2:b4:26:1b:6c:3b:9a:17:8c: d6:b7:a4:d9:22:eb:f5:9c:7d:fe:52:f1:e6:90:b8: 5b:58:a1:4c:41:be:c5:ed:e8:0b:20:66:63:01:4a: 60:69:5f:1b:6e:7c:ad:03:60:9b:79:08:2f:53:15: b0:23:66:ec:d6:19:b7:d0:7b:a9:f9:37:12:90:0c: 54:8a:75:99:89:b6:d2:e4:5b:42:45:93:b1:ac:a4: c0:68:e5:17:1f:2b:b6:39:13:d1:83:43:ac:db:c4: b0:e5:67:03:40:c8:02:8f:64:c0:39:19:76:93:42: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:16:1A:9B:A1:34:6D:77:03:3C:1D:CF:A4:CF:F5:A1:79:23:6C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e6e631e-4c5e-3c74-97b0-5e30e8d1363a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c4:d6:79:bf:86:3e:ad:db:f8:4c:a0:e3:e3:a8:ab:1b:ed: 1c:64:b1:97:00:8e:80:d3:ec:cb:8b:a0:78:5c:3f:55:13:76: 91:d6:75:d1:d5:32:7a:8c:47:cb:95:87:84:e6:9e:ef:6c:87: 74:ee:dd:d4:ce:21:fa:1c:72:08:2f:8a:c5:f1:a0:fb:b0:b2: d7:9e:28:76:16:6e:cf:b3:78:1d:f5:58:c5:75:34:22:9b:ce: 54:18:32:ab:fe:29:7c:d8:5a:f1:f5:a5:c7:92:a6:01:ba:67: 83:17:68:26:69:c5:69:a6:cc:33:5a:eb:e2:89:b4:ca:20:37: a1:ef:70:8a:32:61:64:ce:47:a8:1a:49:6e:ed:fc:d7:03:50: d6:e0:68:1c:e9:54:5b:6d:57:19:c1:4b:21:ad:17:7a:02:e8: 03:1f:33:59:2b:69:fb:43:f5:39:91:90:de:3f:9c:43:a5:9c: 8b:ae:67:56:4f:df:a3:ea:12:56:27:a9:da:68:a5:09:89:df: 28:c5:35:8d:31:ce:0b:f8:2a:1e:45:75:75:a9:47:82:82:8d: 22:45:da:13:7d:23:27:45:16:11:37:87:27:3e:19:35:5e:c4: db:b3:33:ac:a1:b8:18:98:10:ad:3c:26:d5:d3:28:28:2f:7d: c9:3f:cf:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QGcC47mJjbGofMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNDEyMDAxNloXDTI2MTIwMzEzMDAxNlowLzEtMCsGA1UEAxMk NjY5ZDI2MjQtZjU5NC00NmVmLWFiMTQtNDliZWQ4MzZlMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu/4+flJK1gFwlpnXYzBriGfbc8bTSCGUPGr AZOxRCki6GO4lUahi/SdXKVgQbsSFe/ZlBXit+PJEtKe0/nopmQDn7rx1EhvmS5G emhm6PjTHEqBPkzKwASsDmy/SQgJ/O+ruVCrnkxDmXZF+dSQaJvbYXb9zICfqCA+ +QlLJArLPJO1fC32BWkYJpjStCYbbDuaF4zWt6TZIuv1nH3+UvHmkLhbWKFMQb7F 7egLIGZjAUpgaV8bbnytA2CbeQgvUxWwI2bs1hm30Hup+TcSkAxUinWZibbS5FtC RZOxrKTAaOUXHyu2ORPRg0Os28Sw5WcDQMgCj2TAORl2k0KyxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwWGpuhNG13Azwdz6TP9aF5I2wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2U2ZTYzMWUtNGM1ZS0z Yzc0LTk3YjAtNWUzMGU4ZDEzNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1paMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjE1nm/hj6t2/hMoOPjqKsb7RxksZcAjoDT7MuLoHhcP1UTdpHWddHV MnqMR8uVh4Tmnu9sh3Tu3dTOIfoccggvisXxoPuwsteeKHYWbs+zeB31WMV1NCKb zlQYMqv+KXzYWvH1pceSpgG6Z4MXaCZpxWmmzDNa6+KJtMogN6HvcIoyYWTOR6ga SW7t/NcDUNbgaBzpVFttVxnBSyGtF3oC6AMfM1kraftD9TmRkN4/nEOlnIuuZ1ZP 36PqElYnqdpopQmJ3yjFNY0xzgv4Kh5FdXWpR4KCjSJF2hN9IydFFhE3hyc+GTVe xNuzM6yhuBiYEK08JtXTKCgvfck/z1c= -----END CERTIFICATE-----Generated at Sun Sep 20 19:06:26 2026 by rpki-client