$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa File: 17e2838b-017a-3e21-8f71-e3de49aaf056.roa (raw, json) Hash identifier: X9IF/no98SE7uzGdhEbIc+RqhkAthz30WE4jtN/Vx5Q= Subject key identifier: AB:6D:97:11:60:7A:4E:3C:44:D5:61:29:BA:38:7E:62:BC:E1:B4:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C84F384BAA50D2C82F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 75.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c8:4f:38:4b:aa:50:d2:c8:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=6ab5ed7c-d211-479c-9167-3e571fc52bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:ad:7f:ee:46:70:b6:59:02:13:88:c0:90: 1d:49:ea:eb:7b:92:60:d9:88:54:eb:db:2f:d2:af: 2a:e0:d7:86:85:9a:79:15:6e:07:87:87:35:14:84: 95:94:e0:d1:a2:f2:4c:0c:eb:85:70:4c:e7:c4:2d: b2:67:cf:62:45:af:9b:f9:73:ce:5e:7c:f1:35:d6: 89:c0:a1:f6:4b:70:d8:d2:85:a3:ce:16:50:1c:0d: 8c:85:28:5e:ce:9e:ad:3a:08:9e:2d:f1:2e:bb:6c: ce:c8:c2:30:90:cd:a6:82:58:68:46:c6:fe:8a:c5: fb:e1:9c:cf:9c:5f:97:37:57:be:b1:ed:e3:9e:49: ad:7c:58:94:80:99:78:7e:fd:cb:97:04:cf:4c:2a: 38:f8:c3:f8:bf:f9:af:e0:23:7a:05:2c:20:03:6b: 04:d1:2b:40:11:fd:29:81:9c:bb:01:a6:64:42:6f: a3:f0:f9:86:de:34:1c:43:2c:a0:96:87:a7:dd:dc: a7:b7:36:21:aa:73:19:7a:ca:02:f5:0a:3e:35:15: 17:05:71:04:de:2f:9e:ac:ce:a5:28:13:79:b0:5e: a7:b7:82:75:ff:ef:da:5f:02:37:14:2b:04:2d:df: fc:ec:57:06:82:be:7a:88:fc:03:fd:3b:34:36:ba: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:97:11:60:7A:4E:3C:44:D5:61:29:BA:38:7E:62:BC:E1:B4:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1a:9a:d3:0b:21:41:ed:0c:c9:3c:6d:6d:64:12:79:51:cc: f8:3a:4a:fc:b0:01:6e:7a:08:ba:7b:08:29:de:30:a3:96:d0: 41:22:eb:63:9d:3c:92:5a:78:45:bc:6b:48:22:a0:de:ce:10: f7:27:99:bf:27:b4:e3:11:3b:1d:be:d4:4e:94:9a:1c:25:a2: 3b:4a:9b:02:ac:a2:7f:ef:1d:b1:81:0d:87:de:d0:f9:6a:de: 2a:11:81:d8:e6:c2:89:9a:14:10:a5:de:c3:d7:5f:96:b4:a0: 5c:8d:4e:6e:7b:2f:f9:80:df:f2:75:0a:20:25:24:89:55:11: e0:78:72:7b:4b:84:d9:e2:c8:53:25:5a:c6:a3:f6:93:13:04: e9:ad:88:9e:33:cd:ab:c2:93:df:4d:2a:14:fc:2f:5c:71:5f: cc:19:5f:d6:e6:36:64:7c:a1:6d:8e:e9:42:82:5d:de:c5:2f: 50:65:e7:32:94:a4:68:14:15:21:40:d5:3e:98:a3:6c:5b:e1: c0:6a:51:df:0c:04:79:a9:73:06:be:74:b2:78:e5:08:41:8c: d1:7c:91:5a:bf:7c:a7:4c:5a:cc:58:f5:4f:91:b1:ef:28:45: b1:12:f9:88:f8:ca:3e:9d:d5:97:69:08:8d:86:0d:62:45:66: f6:cc:14:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6yschPOEuqUNLIL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NmFiNWVkN2MtZDIxMS00NzljLTkxNjctM2U1NzFmYzUyYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4mtf+5GcLZZAhOIwJAdSerre5Jg2YhU69sv 0q8q4NeGhZp5FW4Hh4c1FISVlODRovJMDOuFcEznxC2yZ89iRa+b+XPOXnzxNdaJ wKH2S3DY0oWjzhZQHA2MhShezp6tOgieLfEuu2zOyMIwkM2mglhoRsb+isX74ZzP nF+XN1e+se3jnkmtfFiUgJl4fv3LlwTPTCo4+MP4v/mv4CN6BSwgA2sE0StAEf0p gZy7AaZkQm+j8PmG3jQcQyygloen3dyntzYhqnMZesoC9Qo+NRUXBXEE3i+erM6l KBN5sF6nt4J1/+/aXwI3FCsELd/87FcGgr56iPwD/Ts0Nrq5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKttlxFgek48RNVhKbo4fmK84bTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMjgzOGItMDE3YS0z ZTIxLThmNzEtZTNkZTQ5YWFmMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQamtMLIUHtDMk8bW1kEnlRzPg6SvywAW56CLp7CCneMKOW0EEi62Od PJJaeEW8a0gioN7OEPcnmb8ntOMROx2+1E6UmhwlojtKmwKson/vHbGBDYfe0Plq 3ioRgdjmwomaFBCl3sPXX5a0oFyNTm57L/mA3/J1CiAlJIlVEeB4cntLhNniyFMl Wsaj9pMTBOmtiJ4zzavCk99NKhT8L1xxX8wZX9bmNmR8oW2O6UKCXd7FL1Bl5zKU pGgUFSFA1T6Yo2xb4cBqUd8MBHmpcwa+dLJ45QhBjNF8kVq/fKdMWsxY9U+Rse8o RbES+Yj4yj6d1ZdpCI2GDWJFZvbMFBo= -----END CERTIFICATE-----Generated at Thu Aug 27 11:32:54 2026 by rpki-client