$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa File: 1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa (raw, json) Hash identifier: 4oPOxVd5D2DN7Den6kKOTgODgsgJXxVAz70qt2J0UEM= Subject key identifier: 8D:74:2B:A5:39:D5:A8:79:76:C5:EF:1E:4C:12:E7:4F:FB:C7:B4:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F62930C4BFE64D6AF65636140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 7029 IP address blocks: 75.88.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0c:4b:fe:64:d6:af:65:63:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=1a9ab5d5-13f7-4757-b5c0-31f1998d22bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:13:ac:de:9d:31:1c:68:8f:e7:7f:a0:1b: bf:59:3b:e9:34:15:19:19:0e:80:f4:f5:c6:dc:98: 1b:1b:6d:d1:a7:8f:01:25:7a:43:b6:f6:76:69:58: 79:70:78:ed:c2:49:ca:77:d1:13:30:f0:ad:c1:07: 4d:a1:41:66:8a:a0:46:67:62:fa:f3:98:79:f4:17: 26:09:25:40:df:22:6d:5f:dc:04:92:38:de:2f:bf: 93:67:6a:ba:44:de:5f:d5:dc:81:7f:81:a5:4a:db: 83:58:da:17:68:cf:24:98:83:8e:fa:50:f8:24:3f: a4:40:e1:b4:c9:45:1d:48:75:4c:3b:3f:b1:02:86: cc:cb:cd:03:c5:4f:da:fc:ed:1a:61:04:5e:74:1d: f3:8f:c9:14:32:b7:44:e8:25:01:1d:37:aa:9d:21: b1:b7:87:62:1d:56:d1:1d:e0:e4:53:d2:fe:68:9e: 3d:e4:16:e0:30:dd:1b:91:bd:10:2b:64:af:29:00: 1d:e8:d8:1e:7d:81:f2:8b:2a:ff:9b:84:b7:4a:ee: d8:a7:0d:47:42:21:89:86:87:d5:cc:95:92:b8:5d: 16:dc:64:12:ea:b4:63:54:13:3f:33:1f:44:6b:31: fd:53:45:2d:32:34:db:e3:b9:87:97:c4:34:55:0c: ad:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:74:2B:A5:39:D5:A8:79:76:C5:EF:1E:4C:12:E7:4F:FB:C7:B4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ddaa8e1-0cbe-38f5-94f7-df121cea4779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:64:20:f4:31:c9:bd:47:b6:d0:28:89:6b:34:93:a8:3b:0e: 64:83:17:53:77:80:6b:01:58:52:ed:d3:82:13:55:e2:8e:ea: ed:1d:68:f9:a1:d2:6a:7b:ed:fd:2f:49:d4:65:21:1c:23:ae: 45:57:ff:14:93:b8:00:b5:86:a4:07:ea:6d:ed:96:b9:0e:74: 59:0c:50:d2:a7:ba:12:fd:3c:ab:00:a2:06:a4:a0:43:7f:fa: e6:94:ff:95:dc:d9:cc:30:a7:b9:3e:03:6e:e8:22:79:2c:67: a5:ef:36:f4:81:cc:71:d2:38:71:a1:e2:88:8a:79:ec:3f:e4: ea:d9:38:5a:8d:52:de:c8:f9:61:f7:3b:9a:da:49:0d:86:34: e2:4b:df:0e:8d:04:04:1a:a3:b2:1a:7c:64:ca:c9:08:07:a4: 0f:36:12:9d:16:69:2e:38:94:44:34:f6:27:98:93:72:12:ea: ed:74:69:32:c2:c8:ab:3a:f9:a4:48:fc:15:7c:b9:76:8f:c8: df:5c:51:23:7a:0c:c6:63:50:54:dc:c8:ba:e8:c5:e3:93:6d: 95:1b:12:d9:6e:d5:77:32:ea:20:e2:d7:52:5e:d2:b5:70:97: ab:64:7b:4e:70:c7:b6:aa:e8:78:f2:c3:05:55:f9:47:56:a5: 73:f3:66:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwxL/mTWr2VjYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWE5YWI1ZDUtMTNmNy00NzU3LWI1YzAtMzFmMTk5OGQyMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsccTrN6dMRxoj+d/oBu/WTvpNBUZGQ6A9PXG 3JgbG23Rp48BJXpDtvZ2aVh5cHjtwknKd9ETMPCtwQdNoUFmiqBGZ2L685h59Bcm CSVA3yJtX9wEkjjeL7+TZ2q6RN5f1dyBf4GlStuDWNoXaM8kmIOO+lD4JD+kQOG0 yUUdSHVMOz+xAobMy80DxU/a/O0aYQRedB3zj8kUMrdE6CUBHTeqnSGxt4diHVbR HeDkU9L+aJ495BbgMN0bkb0QK2SvKQAd6NgefYHyiyr/m4S3Su7Ypw1HQiGJhofV zJWSuF0W3GQS6rRjVBM/Mx9EazH9U0UtMjTb47mHl8Q0VQytZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI10K6U51ah5dsXvHkwS50/7x7TZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWRkYWE4ZTEtMGNiZS0z OGY1LTk0ZjctZGYxMjFjZWE0Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlkIPQxyb1HttAoiWs0k6g7DmSDF1N3gGsBWFLt04ITVeKO6u0daPmh 0mp77f0vSdRlIRwjrkVX/xSTuAC1hqQH6m3tlrkOdFkMUNKnuhL9PKsAogakoEN/ +uaU/5Xc2cwwp7k+A27oInksZ6XvNvSBzHHSOHGh4oiKeew/5OrZOFqNUt7I+WH3 O5raSQ2GNOJL3w6NBAQao7IafGTKyQgHpA82Ep0WaS44lEQ09ieYk3IS6u10aTLC yKs6+aRI/BV8uXaPyN9cUSN6DMZjUFTcyLroxeOTbZUbEtlu1Xcy6iDi11Je0rVw l6tke05wx7aq6HjywwVV+UdWpXPzZqc= -----END CERTIFICATE-----Generated at Tue Oct 13 10:26:20 2026 by rpki-client