$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa File: 5206a7d8-9dde-3613-bfee-14c20338d4d3.roa (raw, json) Hash identifier: mv/JZHB9l1hsVaiu0+kBiFpdihN8y8RMsNr3grOPeTc= Subject key identifier: 27:75:D7:38:FB:55:46:E0:27:63:B1:44:44:3A:8F:4C:65:6D:7D:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E35FF0CD1BFB57D7AA6633C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 7029 IP address blocks: 75.89.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:0c:d1:bf:b5:7d:7a:a6:63:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=4a44a2d5-2a93-45e0-a5a3-b81430f54d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e3:a4:56:ca:d6:1b:3c:69:77:00:2e:39:a2: 90:03:45:2d:12:9a:b4:d8:b0:a9:ca:82:63:5a:20: 00:7f:2b:88:6c:c5:c0:8e:a4:e3:0d:52:c5:6a:26: d3:bd:9b:ad:5b:60:d9:c5:b0:82:08:04:4b:d7:14: 88:b7:05:8e:68:d1:72:1a:d1:56:14:eb:af:26:42: d1:1d:1f:9a:0b:c6:b7:f9:26:0a:6c:b7:c8:01:d8: 75:a7:a1:32:72:a9:6b:e4:ac:8f:63:14:c0:f3:71: 24:86:6e:26:a4:ed:d0:4b:d7:66:45:28:ce:05:ab: b4:67:55:4c:74:8a:30:23:f4:a5:75:65:dc:00:83: ff:17:2f:cb:4b:74:9d:c5:6b:b7:f9:7b:bc:bf:8b: da:45:ec:7f:6c:75:7c:a7:95:82:3e:15:f4:b4:5d: 2a:94:70:77:a2:e9:df:56:10:39:df:af:23:c8:79: 3b:3b:ee:7d:16:5b:36:d7:c1:2d:e7:bb:8a:ac:bf: 80:ad:90:4b:eb:93:06:fd:cf:0f:e9:d0:40:f6:d1: 39:3c:37:dc:98:46:16:73:a4:77:f2:22:5c:67:2b: d1:ca:85:a1:8d:5b:45:d0:73:2c:ad:4d:dc:90:fa: 6a:7b:88:5f:9e:9a:b6:9a:b4:68:7f:d2:a5:82:51: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:75:D7:38:FB:55:46:E0:27:63:B1:44:44:3A:8F:4C:65:6D:7D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5206a7d8-9dde-3613-bfee-14c20338d4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:59:55:f7:35:7d:99:f1:f3:01:74:06:a2:fa:21:48:4f:79: 70:95:f8:09:a4:f8:cd:f8:1a:6f:33:17:ec:11:ec:9e:5c:3f: ac:06:44:4f:85:69:0d:48:8e:bd:f8:9d:ee:05:a9:43:2b:76: a4:07:06:bc:73:57:82:f1:2a:06:23:30:ca:b9:09:e0:8f:86: 7c:23:51:66:7c:ef:66:46:90:e6:b9:c4:55:e4:7e:8d:b7:20: c1:3e:04:7c:6a:e9:71:6f:18:83:63:a6:f0:93:44:da:d8:f5: 53:28:34:3b:d2:e8:01:11:af:34:58:98:98:16:98:04:8f:79: 42:f1:68:22:3f:0f:93:fd:22:4f:67:7e:1a:b1:9b:20:d3:80: 3e:e7:a9:22:f5:dc:c0:7b:2d:3e:22:66:28:89:53:b1:3b:10: e6:37:7c:7c:78:31:52:11:5d:6c:67:84:23:a3:dd:ea:00:9f: 96:4d:05:18:bc:70:ed:c6:4a:2c:49:6a:48:77:f1:37:47:00: 9e:b1:cc:e3:95:3f:f5:b8:df:b3:b5:a7:f8:70:bd:07:5e:67: 62:b3:8e:cd:6d:81:ac:22:20:10:b9:d5:a3:01:32:af:ac:68: e1:e9:54:e7:0d:90:c8:d5:cd:40:5b:f6:65:79:ed:c1:12:e5: 1c:5f:61:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE41/wzRv7V9eqZjPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NGE0NGEyZDUtMmE5My00NWUwLWE1YTMtYjgxNDMwZjU0ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOOkVsrWGzxpdwAuOaKQA0UtEpq02LCpyoJj WiAAfyuIbMXAjqTjDVLFaibTvZutW2DZxbCCCARL1xSItwWOaNFyGtFWFOuvJkLR HR+aC8a3+SYKbLfIAdh1p6Eycqlr5KyPYxTA83Ekhm4mpO3QS9dmRSjOBau0Z1VM dIowI/SldWXcAIP/Fy/LS3SdxWu3+Xu8v4vaRex/bHV8p5WCPhX0tF0qlHB3ounf VhA5368jyHk7O+59Fls218Et57uKrL+ArZBL65MG/c8P6dBA9tE5PDfcmEYWc6R3 8iJcZyvRyoWhjVtF0HMsrU3ckPpqe4hfnpq2mrRof9KlglG/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCd11zj7VUbgJ2OxREQ6j0xlbX1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIwNmE3ZDgtOWRkZS0z NjEzLWJmZWUtMTRjMjAzMzhkNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBZVfc1fZnx8wF0BqL6IUhPeXCV+Amk+M34Gm8zF+wR7J5cP6wGRE+F aQ1Ijr34ne4FqUMrdqQHBrxzV4LxKgYjMMq5CeCPhnwjUWZ872ZGkOa5xFXkfo23 IME+BHxq6XFvGINjpvCTRNrY9VMoNDvS6AERrzRYmJgWmASPeULxaCI/D5P9Ik9n fhqxmyDTgD7nqSL13MB7LT4iZiiJU7E7EOY3fHx4MVIRXWxnhCOj3eoAn5ZNBRi8 cO3GSixJakh38TdHAJ6xzOOVP/W437O1p/hwvQdeZ2Kzjs1tgawiIBC51aMBMq+s aOHpVOcNkMjVzUBb9mV57cES5RxfYVk= -----END CERTIFICATE-----Generated at Mon Jul 13 05:54:37 2026 by rpki-client