$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa File: a40090c3-6aaf-3441-8a44-3afa48482968.roa (raw, json) Hash identifier: cTHhAwc/hmSVt9sRht8ivOHU+ZXOSBPTlQlJW8x1q6U= Subject key identifier: 8D:2E:77:49:43:77:EF:83:82:7D:A5:EF:9A:C5:5A:D0:F7:D0:DC:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2A74D6AFC3F4D0917C6C90B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 75.91.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:d6:af:c3:f4:d0:91:7c:6c:90:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=1a1b9405-abeb-4c59-9e23-0cab87707ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1e:73:f0:4b:ca:de:27:24:72:4c:f7:f2:7a: a0:3f:12:15:86:be:34:09:28:10:58:b0:b4:b2:62: 50:24:b6:d7:c7:a9:4e:1b:f2:ee:0a:7a:c5:1d:83: 18:5c:c7:de:13:ce:19:c4:e0:8c:83:49:d3:e4:1d: fd:f1:59:47:1f:37:bd:43:22:27:11:3b:8f:b5:2d: 1e:a9:74:84:d0:63:fa:72:6d:43:ff:f9:c2:53:48: 38:e3:78:37:6a:02:8b:86:a1:da:bf:29:e5:7a:7a: cb:48:9f:30:2e:4c:be:49:9f:53:e4:68:9c:d2:f1: 3d:e5:fb:36:63:fd:f6:be:a2:07:7b:88:80:6f:af: f3:bc:fa:0b:ea:c2:a9:a8:b3:63:34:b5:5e:e1:9d: 1b:fd:2c:a9:ba:df:22:b9:17:b8:28:16:a3:09:87: d6:b8:d0:09:ad:f5:11:ad:9b:36:1a:f1:75:d3:c8: fb:00:e7:23:d6:4b:72:7f:39:ab:1f:7d:3d:ae:71: 71:2f:bc:28:2e:0d:81:39:1e:da:9e:c2:1e:5e:53: 09:5d:dd:de:46:8e:1d:ea:0a:0e:3d:28:d6:66:ad: 20:f6:62:46:41:a1:4d:2c:5b:39:42:4d:40:48:ea: 48:5c:14:fb:62:d0:4b:41:07:95:d5:46:31:36:6b: 41:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2E:77:49:43:77:EF:83:82:7D:A5:EF:9A:C5:5A:D0:F7:D0:DC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a40090c3-6aaf-3441-8a44-3afa48482968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6b:4b:33:72:5c:b2:b0:3f:62:ea:eb:35:fa:e5:7b:40:5a: af:df:56:ea:50:34:46:d1:91:ce:0b:5c:77:cf:dc:ee:64:6d: 63:38:60:09:e3:4e:d5:39:49:ea:39:52:26:83:e7:d6:b9:38: 3e:22:06:09:1c:60:22:21:9a:d5:65:4a:d7:1a:cc:19:2e:4b: f0:0d:ee:03:7a:9f:f5:ae:fc:bf:d7:db:7b:08:ca:1f:a0:6d: a2:9d:50:f8:12:0e:bc:67:32:4e:6d:a6:17:46:af:26:57:a2: df:e9:da:0f:5c:59:af:06:4c:1c:29:55:d1:28:ab:96:7e:9b: 9a:9f:ed:92:fa:24:de:fa:5e:4a:c2:d3:c5:21:dc:e3:ea:b5: f9:b2:26:ff:d9:a3:bb:68:6f:a2:3f:80:71:f6:e2:c5:bb:65: ed:45:60:da:a4:ac:7b:f2:1b:0d:b0:12:34:6a:21:e3:dc:0d: af:db:80:73:91:57:80:5a:04:95:23:0e:88:9f:88:51:fc:72: b0:c5:92:51:9c:23:1b:20:31:39:00:a1:73:3c:e3:ed:b4:0b: cb:20:71:ee:ee:ad:4e:9d:5d:d3:fb:87:2e:18:2a:30:9c:74: f9:04:ba:1b:6e:76:c4:c2:5f:ad:fb:76:59:11:e6:25:38:a1: a4:c9:f1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdNavw/TQkXxskLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MWExYjk0MDUtYWJlYi00YzU5LTllMjMtMGNhYjg3NzA3ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx5z8EvK3ickckz38nqgPxIVhr40CSgQWLC0 smJQJLbXx6lOG/LuCnrFHYMYXMfeE84ZxOCMg0nT5B398VlHHze9QyInETuPtS0e qXSE0GP6cm1D//nCU0g443g3agKLhqHavynlenrLSJ8wLky+SZ9T5Gic0vE95fs2 Y/32vqIHe4iAb6/zvPoL6sKpqLNjNLVe4Z0b/Syput8iuRe4KBajCYfWuNAJrfUR rZs2GvF108j7AOcj1ktyfzmrH309rnFxL7woLg2BOR7ansIeXlMJXd3eRo4d6goO PSjWZq0g9mJGQaFNLFs5Qk1ASOpIXBT7YtBLQQeV1UYxNmtBjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0ud0lDd++Dgn2l75rFWtD30NyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQwMDkwYzMtNmFhZi0z NDQxLThhNDQtM2FmYTQ4NDgyOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhrSzNyXLKwP2Lq6zX65XtAWq/fVupQNEbRkc4LXHfP3O5kbWM4YAnj TtU5Seo5UiaD59a5OD4iBgkcYCIhmtVlStcazBkuS/AN7gN6n/Wu/L/X23sIyh+g baKdUPgSDrxnMk5tphdGryZXot/p2g9cWa8GTBwpVdEoq5Z+m5qf7ZL6JN76XkrC 08Uh3OPqtfmyJv/Zo7tob6I/gHH24sW7Ze1FYNqkrHvyGw2wEjRqIePcDa/bgHOR V4BaBJUjDoifiFH8crDFklGcIxsgMTkAoXM84+20C8sgce7urU6dXdP7hy4YKjCc dPkEuhtudsTCX637dlkR5iU4oaTJ8bk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:35 2026 by rpki-client