$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa File: a40090c3-6aaf-3441-8a44-3afa48482968.roa (raw, json) Hash identifier: Bu/NDN6MsVQtNyiaFPKc8PUtraCkKG4c1hF2+Wq5HBk= Subject key identifier: 9D:49:94:19:B2:A9:BC:CB:B6:A9:71:8F:00:F4:76:C0:4D:79:B6:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4F0828538C6E0E1F32973D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 75.91.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:28:53:8c:6e:0e:1f:32:97:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=a1d8624a-e02c-4177-8685-1fb41d2b67b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:b3:48:0e:c4:82:e5:c4:fd:87:fb:d1:8c: c7:05:ef:68:07:c2:80:5a:34:1a:f7:55:cd:bf:1e: 41:8c:6f:97:59:69:69:fd:a2:40:8c:1f:41:51:b5: 00:b9:70:21:92:f0:78:e6:7e:0c:a1:08:a2:25:24: f7:12:16:4f:5c:15:81:ce:9c:5a:96:4d:fe:de:f5: 15:8f:54:49:53:ac:e1:c7:5c:77:7d:3a:45:36:e5: b0:6d:4d:df:b5:65:77:ba:62:d3:43:38:5a:6b:97: ba:ac:8f:e4:d1:6e:62:f6:64:18:a2:ff:6a:6f:f8: c1:7e:80:1d:bb:b5:05:24:7d:51:61:57:19:be:10: d1:27:7e:14:95:b0:bc:5f:b3:e2:bc:b9:ba:65:31: 47:a1:2a:79:62:6e:57:df:b5:97:0f:80:05:dd:df: 2d:75:07:8a:82:94:09:54:6a:bc:81:1e:65:9d:30: 4f:38:04:7c:33:27:dd:98:f4:50:ea:77:d9:1d:56: 9d:ef:d6:bf:b1:45:e7:ee:d2:15:5e:6c:55:7b:2c: 08:e4:ba:aa:ee:22:bd:66:a2:87:12:60:74:98:77: 62:43:2f:99:08:49:1b:8f:6a:42:e5:a2:66:af:74: 79:44:d6:97:b0:ac:67:8a:80:b9:d3:38:5d:7e:9e: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:94:19:B2:A9:BC:CB:B6:A9:71:8F:00:F4:76:C0:4D:79:B6:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c7:09:60:50:bc:5a:b2:03:8d:e7:32:08:ae:f5:22:49:f1: a9:d4:08:46:f6:cb:fc:d4:ba:0d:37:7f:dc:1a:f2:2d:27:02: 7a:e4:2f:49:22:bb:2b:2b:32:a0:f8:db:20:4c:d1:82:50:c8: 54:3f:d4:a0:90:1e:7b:54:13:08:30:f4:6c:00:04:4c:18:4e: 3c:70:6b:5d:fb:51:99:38:58:bc:4e:45:54:bd:37:e8:ad:5d: f3:6b:55:6f:cd:cb:e8:f6:99:05:0d:c9:99:ae:e1:69:38:9c: 7e:72:9e:74:fa:ff:16:77:06:38:17:a1:c5:ed:d3:b1:bf:f5: 57:a0:ef:9c:b0:2f:9f:63:b3:61:c8:cb:21:ca:8f:04:3f:41: 60:f1:59:42:6c:4b:0f:8a:8c:b5:4d:81:6c:b4:c4:66:ce:ab: f6:44:81:1b:a8:56:32:73:28:66:0a:fb:c9:05:5f:90:e9:7a: 88:18:53:54:2b:64:dc:89:66:5c:93:01:ee:22:aa:61:60:60: b8:d2:6a:74:20:d9:1e:5e:1d:df:4c:62:1b:9f:38:91:db:29: 4a:fd:25:2d:1d:a5:84:b0:c7:55:9f:a2:95:a4:30:89:49:fd: f0:8c:78:97:08:8a:83:e7:45:55:e3:bd:34:2c:81:7f:0a:30: 39:b2:e6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCChTjG4OHzKXPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YTFkODYyNGEtZTAyYy00MTc3LTg2ODUtMWZiNDFkMmI2N2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiKzSA7EguXE/Yf70YzHBe9oB8KAWjQa91XN vx5BjG+XWWlp/aJAjB9BUbUAuXAhkvB45n4MoQiiJST3EhZPXBWBzpxalk3+3vUV j1RJU6zhx1x3fTpFNuWwbU3ftWV3umLTQzhaa5e6rI/k0W5i9mQYov9qb/jBfoAd u7UFJH1RYVcZvhDRJ34UlbC8X7PivLm6ZTFHoSp5Ym5X37WXD4AF3d8tdQeKgpQJ VGq8gR5lnTBPOAR8MyfdmPRQ6nfZHVad79a/sUXn7tIVXmxVeywI5Lqq7iK9ZqKH EmB0mHdiQy+ZCEkbj2pC5aJmr3R5RNaXsKxnioC50zhdfp67LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1JlBmyqbzLtqlxjwD0dsBNebZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwMDkwYzMtNmFhZi0z NDQxLThhNDQtM2FmYTQ4NDgyOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTHCWBQvFqyA43nMgiu9SJJ8anUCEb2y/zUug03f9wa8i0nAnrkL0ki uysrMqD42yBM0YJQyFQ/1KCQHntUEwgw9GwABEwYTjxwa137UZk4WLxORVS9N+it XfNrVW/Ny+j2mQUNyZmu4Wk4nH5ynnT6/xZ3BjgXocXt07G/9Veg75ywL59js2HI yyHKjwQ/QWDxWUJsSw+KjLVNgWy0xGbOq/ZEgRuoVjJzKGYK+8kFX5DpeogYU1Qr ZNyJZlyTAe4iqmFgYLjSanQg2R5eHd9MYhufOJHbKUr9JS0dpYSwx1WfopWkMIlJ /fCMeJcIioPnRVXjvTQsgX8KMDmy5jg= -----END CERTIFICATE-----Generated at Tue Sep 29 01:25:09 2026 by rpki-client