$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aaab85ce-2bee-3ff5-942a-e31e70c32f73.roa File: aaab85ce-2bee-3ff5-942a-e31e70c32f73.roa (raw, json) Hash identifier: uJ5TABTvkzXFk9vBn4WAkv9njBnEGQTTq1bxRHO3zeo= Subject key identifier: 6E:CE:15:1F:0E:0B:4F:98:88:D3:1F:8D:46:B8:EB:22:BD:78:D9:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F94D3380744513A9075929580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aaab85ce-2bee-3ff5-942a-e31e70c32f73.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 7029 IP address blocks: 75.90.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:38:07:44:51:3a:90:75:92:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=b9e3be70-6ee2-4184-bb46-281bc9193d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:ad:1a:6f:1d:ea:4b:1c:82:c8:f2:11:b0: 6d:16:ab:93:0b:77:77:29:1a:77:ae:cf:4f:9f:7f: d6:0e:f2:d2:05:ac:ac:be:fb:b6:4b:ae:2e:fd:ec: 76:bd:6a:10:f3:2f:bf:9a:a0:0d:c9:f2:af:68:79: 89:79:ec:e6:98:99:db:8c:7e:e4:cb:76:26:46:36: 06:c8:a5:4b:a0:03:c6:a6:7d:27:aa:d3:5d:36:17: 88:f0:b5:8f:39:50:44:cb:19:e1:cd:e2:60:03:75: 43:fc:79:2a:cd:02:23:09:c1:c2:f8:60:50:df:74: 81:d3:84:7e:49:70:55:01:f6:74:31:fc:95:e1:69: cc:04:24:8b:fe:40:28:df:a7:c5:d7:70:f0:2e:61: 49:9b:3b:1d:fc:39:f6:ce:6c:f4:8d:65:a2:95:bf: ab:f8:92:67:06:bb:04:9f:6e:8c:88:79:51:ad:95: 72:5c:a6:60:63:92:83:5c:d9:4e:63:2d:68:29:5c: 39:73:3b:ed:b8:e3:c4:cd:4d:a5:70:7b:86:3b:74: 34:fc:5e:14:9d:fe:dc:fe:a4:e8:79:e1:3d:f5:ee: 31:94:68:fb:07:6d:35:75:be:56:f0:46:59:1f:2a: 9d:f8:5c:cc:11:d1:97:f0:e6:86:ae:df:aa:20:57: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CE:15:1F:0E:0B:4F:98:88:D3:1F:8D:46:B8:EB:22:BD:78:D9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aaab85ce-2bee-3ff5-942a-e31e70c32f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.90.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b1:70:22:96:49:45:5f:48:fd:2c:55:71:07:88:ed:1b:dc: b8:c6:49:11:ee:96:d4:8b:ea:db:e0:11:be:1e:0c:8c:f3:88: 6b:24:6d:52:37:2f:76:d4:76:e1:78:eb:97:61:b1:37:d9:4e: 94:f8:70:e6:4c:de:eb:ad:e2:72:7f:b0:08:88:db:82:dd:b9: aa:b1:dc:bf:c2:70:c7:d2:da:ff:82:21:52:32:1d:66:33:18: a4:8d:b9:90:8b:f7:39:66:db:df:20:ed:b5:94:7b:23:47:79: 38:38:bc:a3:5b:64:a1:6b:57:10:b5:82:81:b1:2b:91:53:48: 3e:7a:7a:36:33:d2:48:53:2b:16:64:87:3e:a5:ab:17:fb:32: fe:ce:b4:1e:6c:6f:d5:da:d4:bf:74:dc:ef:10:4d:2a:7e:6b: a4:c9:63:fe:d0:62:9f:11:df:d8:29:f3:9b:b7:13:85:b8:71: fb:1c:9e:e9:68:80:bf:7e:b8:3d:26:9d:e0:68:f3:5d:e8:19: 66:3c:1d:07:6a:e3:bd:03:c6:ed:c0:40:df:7d:38:01:cf:37: b9:a7:3e:59:1f:e3:1f:f0:13:c7:54:a6:6e:03:35:da:c5:6a: d7:4f:69:98:89:90:71:ae:e6:e7:f9:c7:2a:00:0c:ee:75:fc: 26:1b:e6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0zgHRFE6kHWSlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjllM2JlNzAtNmVlMi00MTg0LWJiNDYtMjgxYmM5MTkzZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoitGm8d6kscgsjyEbBtFquTC3d3KRp3rs9P n3/WDvLSBaysvvu2S64u/ex2vWoQ8y+/mqANyfKvaHmJeezmmJnbjH7ky3YmRjYG yKVLoAPGpn0nqtNdNheI8LWPOVBEyxnhzeJgA3VD/HkqzQIjCcHC+GBQ33SB04R+ SXBVAfZ0MfyV4WnMBCSL/kAo36fF13DwLmFJmzsd/Dn2zmz0jWWilb+r+JJnBrsE n26MiHlRrZVyXKZgY5KDXNlOYy1oKVw5czvtuOPEzU2lcHuGO3Q0/F4Unf7c/qTo eeE99e4xlGj7B201db5W8EZZHyqd+FzMEdGX8OaGrt+qIFeN3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7OFR8OC0+YiNMfjUa46yK9eNlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWFhYjg1Y2UtMmJlZS0z ZmY1LTk0MmEtZTMxZTcwYzMyZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1ptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaxcCKWSUVfSP0sVXEHiO0b3LjGSRHultSL6tvgEb4eDIzziGskbVI3 L3bUduF465dhsTfZTpT4cOZM3uut4nJ/sAiI24Lduaqx3L/CcMfS2v+CIVIyHWYz GKSNuZCL9zlm298g7bWUeyNHeTg4vKNbZKFrVxC1goGxK5FTSD56ejYz0khTKxZk hz6lqxf7Mv7OtB5sb9Xa1L903O8QTSp+a6TJY/7QYp8R39gp85u3E4W4cfscnulo gL9+uD0mneBo813oGWY8HQdq470Dxu3AQN99OAHPN7mnPlkf4x/wE8dUpm4DNdrF atdPaZiJkHGu5uf5xyoADO51/CYb5k4= -----END CERTIFICATE-----Generated at Sun Nov 15 21:15:48 2026 by rpki-client