$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa File: 5206a7d8-9dde-3613-bfee-14c20338d4d3.roa (raw, json) Hash identifier: vnVJTB/pY+Taw7T28nxnw1rMzWnTZtyk9KVOyhYwUJk= Subject key identifier: A2:66:DB:5C:8C:D8:6E:97:83:46:17:96:78:2C:6B:22:B2:6B:D4:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BA33C1724224C6AA3FBA60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 75.89.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:33:c1:72:42:24:c6:aa:3f:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=75406e8e-2fa3-4998-82e6-7d5511f4acdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:d4:20:5b:17:61:5c:ed:93:42:e9:d8:a6: 40:4f:de:a3:42:1c:2f:a4:c5:d0:4d:19:14:1e:24: 4d:87:2f:e5:26:8b:2f:38:8a:5a:c7:0a:d6:9f:3e: f6:9e:ff:79:77:ab:dc:e1:6d:0b:90:a7:a4:d3:9a: f7:4a:5d:be:50:1c:b1:a0:f8:ef:ef:90:bd:31:81: 4a:94:6e:53:7f:51:ba:96:d0:dd:86:7e:44:24:c4: 96:78:53:55:95:2d:29:29:45:02:23:ec:51:02:09: 5f:ac:27:77:93:57:41:bb:49:c4:c1:55:f1:ff:1b: f7:75:af:1c:2e:5a:a7:98:aa:3d:f0:5f:b3:a7:ea: 2b:b9:dc:31:76:10:2d:36:07:09:98:bc:d1:72:0b: 5b:9e:20:fc:93:e8:6b:aa:97:79:59:97:dc:f1:43: 36:a6:b3:1d:44:0f:92:5b:d2:cd:4f:42:56:2d:55: 5e:80:ae:b7:29:42:c0:39:af:6f:e3:89:a8:7c:84: b5:68:53:6e:c2:68:6a:c0:14:8c:1b:27:78:6a:ef: 8c:83:74:42:3d:1f:85:4a:13:53:c1:5c:eb:5c:76: c7:23:78:99:1d:91:0f:df:ba:25:70:a1:0b:6a:51: 18:f8:c5:fa:cb:84:80:d7:7c:ea:52:f6:81:ec:3a: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:66:DB:5C:8C:D8:6E:97:83:46:17:96:78:2C:6B:22:B2:6B:D4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:76:ff:f2:37:ff:36:55:fc:50:24:de:83:76:6e:70:cd:cb: 9b:1a:f4:cf:ce:c0:2a:34:32:ee:1f:22:6f:55:18:fc:06:01: c6:e6:f2:36:5a:95:be:14:44:94:37:00:53:8e:43:7c:03:d4: 4e:08:60:0d:37:49:c8:15:25:f1:d6:d6:92:96:78:f4:84:ec: 3a:0c:ce:c8:15:1b:86:2f:c1:8e:eb:32:6d:42:8c:a5:b4:5b: 11:51:f8:c0:68:54:9e:12:d3:58:b4:b7:67:7c:01:62:6c:d3: 93:c6:16:91:c8:13:50:61:9a:ad:17:fb:25:e5:1f:b2:1e:63: 78:0f:37:de:d1:7b:90:86:38:e6:68:cc:39:ae:79:e9:1f:c9: c3:91:2e:f1:d6:33:57:68:c6:a5:d4:d3:2b:4a:d9:c2:23:f9: a4:4f:17:b9:ec:03:95:fa:8f:3a:dc:3f:ac:dd:64:a8:11:86: df:a0:4f:bd:61:05:b2:89:a0:ee:15:72:72:a8:70:56:b0:d9: 39:d5:a6:06:1a:e4:f2:97:a1:39:4c:3a:f8:bd:31:05:b0:aa: a8:18:28:3e:a3:6c:f8:4d:f1:7f:81:6e:5d:86:08:89:ae:ae: 06:73:cf:fc:3f:fe:b7:2b:3b:4d:5b:e9:f6:5e:17:b1:80:84: 07:e8:68:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujPBckIkxqo/umAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NzU0MDZlOGUtMmZhMy00OTk4LTgyZTYtN2Q1NTExZjRhY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgPUIFsXYVztk0Lp2KZAT96jQhwvpMXQTRkU HiRNhy/lJosvOIpaxwrWnz72nv95d6vc4W0LkKek05r3Sl2+UByxoPjv75C9MYFK lG5Tf1G6ltDdhn5EJMSWeFNVlS0pKUUCI+xRAglfrCd3k1dBu0nEwVXx/xv3da8c LlqnmKo98F+zp+orudwxdhAtNgcJmLzRcgtbniD8k+hrqpd5WZfc8UM2prMdRA+S W9LNT0JWLVVegK63KULAOa9v44mofIS1aFNuwmhqwBSMGyd4au+Mg3RCPR+FShNT wVzrXHbHI3iZHZEP37olcKELalEY+MX6y4SA13zqUvaB7Dry0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJm21yM2G6Xg0YXlngsayKya9TAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwNmE3ZDgtOWRkZS0z NjEzLWJmZWUtMTRjMjAzMzhkNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGV2//I3/zZV/FAk3oN2bnDNy5sa9M/OwCo0Mu4fIm9VGPwGAcbm8jZa lb4URJQ3AFOOQ3wD1E4IYA03ScgVJfHW1pKWePSE7DoMzsgVG4YvwY7rMm1CjKW0 WxFR+MBoVJ4S01i0t2d8AWJs05PGFpHIE1Bhmq0X+yXlH7IeY3gPN97Re5CGOOZo zDmueekfycORLvHWM1doxqXU0ytK2cIj+aRPF7nsA5X6jzrcP6zdZKgRht+gT71h BbKJoO4VcnKocFaw2TnVpgYa5PKXoTlMOvi9MQWwqqgYKD6jbPhN8X+Bbl2GCImu rgZzz/w//rcrO01b6fZeF7GAhAfoaEw= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:27 2026 by rpki-client