$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa File: f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa (raw, json) Hash identifier: 5O88BFqiOFShRbwX69MF8efWY3x/fD1WMk5YV4yQU6k= Subject key identifier: D8:99:3F:9B:96:3F:39:53:49:38:19:F7:09:90:A1:25:CF:04:FC:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242328272F56410EF147880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 75.91.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:32:82:72:f5:64:10:ef:14:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=66d43203-c981-42ce-9ff8-bfab80dd5ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:64:7f:f3:45:6c:28:cf:81:fd:a5:7e:72:40: 98:c3:0a:df:25:0e:fb:49:16:95:02:6e:dd:21:b2: 5b:9b:24:1f:1f:88:14:5e:82:e6:f3:e5:0c:8e:9e: 38:f5:7e:79:bc:27:d2:b5:fb:bd:98:e6:f0:df:0d: 24:ea:8a:af:31:37:1e:cd:4e:40:1a:9f:58:5b:bd: d4:cb:26:5d:30:41:c3:ae:88:3e:da:47:e5:74:96: d0:2f:f2:99:e1:54:da:f6:03:b4:aa:cb:3c:f3:f2: 54:51:4e:ba:7f:29:86:6f:4a:c6:7f:13:98:bf:02: 4e:1e:4d:c4:91:d0:72:2e:4f:f4:98:76:5e:2a:c4: 35:08:be:92:cb:70:5e:de:d6:11:89:27:9c:7c:86: 65:3c:83:72:ec:a1:60:8a:53:f4:50:46:29:d3:27: 9f:96:89:fa:2a:6f:c2:60:68:94:9a:7c:10:ba:9d: 09:aa:ec:cb:9a:6a:6d:8a:af:34:a0:ca:4b:a9:88: c3:b4:fa:83:92:12:95:a2:2e:7f:bb:46:c1:d9:44: 56:16:1f:bb:a0:72:f0:37:c7:b5:0f:04:6a:9d:1b: c4:47:78:26:b5:9b:fe:e6:25:b3:a4:9e:f5:9c:d5: 3f:d2:39:38:f1:ef:4a:e7:8d:a4:48:65:f8:2a:d1: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:99:3F:9B:96:3F:39:53:49:38:19:F7:09:90:A1:25:CF:04:FC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5f9301b-da8d-3985-8dad-6a2d7c1eb42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:80:39:90:a3:ce:09:3e:70:33:cf:bc:9e:3d:b9:f7:8a: 39:f1:17:48:0c:33:31:50:d9:ac:54:65:c3:b8:1e:df:13:af: 7b:2b:7d:b5:0d:ad:59:78:a1:c1:c9:75:88:e1:79:e9:59:a3: 36:9d:cb:59:04:c1:3b:ef:73:81:19:d2:e5:d3:67:aa:9e:1d: ff:c0:56:06:3e:5c:13:41:38:d5:03:ac:ca:f3:19:60:5c:c6: 13:97:4d:17:02:82:07:79:25:ff:15:4c:d3:1b:07:9d:3c:57: fd:8d:63:34:fd:8b:c7:9f:26:5e:1e:d7:10:e9:8d:c8:68:99: 84:3f:9e:86:cf:60:dc:30:77:85:22:f7:56:28:c2:ee:ea:51: be:65:5e:3d:fa:9c:08:e8:57:ce:da:16:d6:fc:e5:a5:28:25: 94:99:a6:c5:9c:d8:ea:7b:42:ee:3b:03:29:04:9e:6c:20:b2: d1:87:27:ae:e5:ab:ce:a3:3d:19:a4:4d:81:f9:d8:54:d8:3f: c9:1a:e9:21:c1:c3:18:ec:08:40:3a:9d:db:82:84:22:77:de: 38:ff:c4:66:5e:69:80:22:db:f7:51:30:de:6a:68:f8:b4:82: 27:b0:4f:8e:5d:d7:6c:d8:86:d2:79:8f:77:0f:56:22:be:2c: 5e:52:83:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjKCcvVkEO8UeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NjZkNDMyMDMtYzk4MS00MmNlLTlmZjgtYmZhYjgwZGQ1ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2R/80VsKM+B/aV+ckCYwwrfJQ77SRaVAm7d IbJbmyQfH4gUXoLm8+UMjp449X55vCfStfu9mObw3w0k6oqvMTcezU5AGp9YW73U yyZdMEHDrog+2kfldJbQL/KZ4VTa9gO0qss88/JUUU66fymGb0rGfxOYvwJOHk3E kdByLk/0mHZeKsQ1CL6Sy3Be3tYRiSecfIZlPINy7KFgilP0UEYp0yeflon6Km/C YGiUmnwQup0JquzLmmptiq80oMpLqYjDtPqDkhKVoi5/u0bB2URWFh+7oHLwN8e1 DwRqnRvER3gmtZv+5iWzpJ71nNU/0jk48e9K542kSGX4KtHcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiZP5uWPzlTSTgZ9wmQoSXPBPzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjVmOTMwMWItZGE4ZC0z OTg1LThkYWQtNmEyZDdjMWViNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw0gDmQo84JPnAzz7yePbn3ijnxF0gMMzFQ2axUZcO4Ht8Tr3srfbUN rVl4ocHJdYjheelZozady1kEwTvvc4EZ0uXTZ6qeHf/AVgY+XBNBONUDrMrzGWBc xhOXTRcCggd5Jf8VTNMbB508V/2NYzT9i8efJl4e1xDpjchomYQ/nobPYNwwd4Ui 91Yowu7qUb5lXj36nAjoV87aFtb85aUoJZSZpsWc2Op7Qu47AykEnmwgstGHJ67l q86jPRmkTYH52FTYP8ka6SHBwxjsCEA6nduChCJ33jj/xGZeaYAi2/dRMN5qaPi0 giewT45d12zYhtJ5j3cPViK+LF5Sg/4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:13:49 2026 by rpki-client