$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56593a2d-ecb8-355f-b89f-30ce1f843737.roa File: 56593a2d-ecb8-355f-b89f-30ce1f843737.roa (raw, json) Hash identifier: d7t0b3d5MO8ADCJAjmu6XG2exZaTcpO7JDB1xkFk2vc= Subject key identifier: 5B:95:9B:8E:1F:44:47:C0:E6:5E:9C:78:A3:D8:89:F7:C8:21:0C:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1A568CEB010380AB88410 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56593a2d-ecb8-355f-b89f-30ce1f843737.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 75.89.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a5:68:ce:b0:10:38:0a:b8:84:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=23ed74b5-8dcf-4ce8-b15c-fe99ed0e3248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cd:2b:49:4e:56:ea:fa:9b:fe:7e:d1:a0:5a: 41:5e:5b:ea:0a:41:73:5d:3c:b9:58:e0:97:4e:9e: 30:48:db:02:02:71:21:73:ab:8a:59:45:74:07:88: a6:45:b6:40:38:2e:b8:d9:22:49:81:39:a8:fb:fd: 2d:0a:d4:96:55:8a:58:d1:5a:d9:ab:1d:dc:1e:ae: 27:ab:b0:bc:2b:47:46:98:32:8f:9b:d4:fc:94:b4: e1:9f:a4:16:09:7d:b2:c2:80:4f:af:57:cb:cf:92: 31:f0:29:87:61:3b:c7:a7:bd:de:a8:e8:49:48:34: eb:db:65:66:bb:7f:0e:0f:ea:d1:e3:f8:d3:ce:af: 57:ad:6b:e8:53:a5:42:cb:4c:23:96:b0:88:bf:12: b3:66:ed:ad:1c:d4:14:af:4f:ca:29:1e:d7:a5:f3: 99:17:6c:96:65:b4:72:61:f2:c0:74:94:55:6a:de: b2:62:85:f1:92:7c:ea:d6:07:3d:96:1c:fe:82:0e: 0f:7f:b8:0e:9e:3c:53:b5:ae:74:52:58:0d:40:8c: d2:b3:fa:c0:66:da:3e:36:92:96:ac:5f:ea:47:64: 62:6a:53:96:a0:46:75:0c:2a:53:62:09:08:b7:a1: 85:12:04:28:a0:de:13:ab:6e:79:cb:9d:25:3d:a9: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:95:9B:8E:1F:44:47:C0:E6:5E:9C:78:A3:D8:89:F7:C8:21:0C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56593a2d-ecb8-355f-b89f-30ce1f843737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:df:fa:30:15:76:c2:d7:c0:57:86:ca:de:24:e1:4d:e0:78: 29:f2:4d:a6:f7:c8:c0:38:80:eb:bd:c1:6d:a7:d4:52:33:e3: e7:1c:26:60:77:b1:55:9e:d6:43:7d:d2:15:cc:e6:d1:d7:14: 9a:01:e3:a4:34:7b:a9:98:df:ec:7d:03:c4:72:41:b7:64:51: 04:01:0d:46:bf:51:92:23:1c:6e:f6:d0:e8:01:85:ff:87:25: 93:a0:6c:0d:d8:ad:ae:c4:67:71:32:a6:35:08:03:db:9f:71: 07:13:5b:61:ed:51:86:5d:96:c1:26:e8:c1:1f:7e:8f:cc:b6: 3a:88:28:7d:6d:4b:b9:dc:08:47:e0:5b:0d:8f:00:6f:7c:fe: 4f:22:73:24:8e:dd:ec:9a:a5:04:bb:62:c8:05:17:97:07:43: fc:5d:e0:10:49:87:29:bb:58:46:28:ec:6c:9b:33:be:f3:22: 46:1f:dd:b6:c8:fb:a8:40:e7:40:86:f7:21:c9:5c:2a:31:f5: 37:59:55:63:67:4b:cb:aa:14:1e:8a:47:fb:ae:d3:5e:08:bf: ba:aa:2e:78:be:80:ef:8a:96:cb:a7:a8:06:45:7d:14:f9:2c: ec:aa:4c:a1:35:82:7d:a2:c0:a0:0a:4d:e0:2e:51:fe:23:2e: 80:38:e4:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaVozrAQOAq4hBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjNlZDc0YjUtOGRjZi00Y2U4LWIxNWMtZmU5OWVkMGUzMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms0rSU5W6vqb/n7RoFpBXlvqCkFzXTy5WOCX Tp4wSNsCAnEhc6uKWUV0B4imRbZAOC642SJJgTmo+/0tCtSWVYpY0VrZqx3cHq4n q7C8K0dGmDKPm9T8lLThn6QWCX2ywoBPr1fLz5Ix8CmHYTvHp73eqOhJSDTr22Vm u38OD+rR4/jTzq9XrWvoU6VCy0wjlrCIvxKzZu2tHNQUr0/KKR7XpfOZF2yWZbRy YfLAdJRVat6yYoXxknzq1gc9lhz+gg4Pf7gOnjxTta50UlgNQIzSs/rAZto+NpKW rF/qR2RialOWoEZ1DCpTYgkIt6GFEgQooN4Tq255y50lPanqxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuVm44fREfA5l6ceKPYiffIIQwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY1OTNhMmQtZWNiOC0z NTVmLWI4OWYtMzBjZTFmODQzNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbf+jAVdsLXwFeGyt4k4U3geCnyTab3yMA4gOu9wW2n1FIz4+ccJmB3 sVWe1kN90hXM5tHXFJoB46Q0e6mY3+x9A8RyQbdkUQQBDUa/UZIjHG720OgBhf+H JZOgbA3Yra7EZ3EypjUIA9ufcQcTW2HtUYZdlsEm6MEffo/MtjqIKH1tS7ncCEfg Ww2PAG98/k8icySO3eyapQS7YsgFF5cHQ/xd4BBJhym7WEYo7GybM77zIkYf3bbI +6hA50CG9yHJXCox9TdZVWNnS8uqFB6KR/uu014Iv7qqLni+gO+KlsunqAZFfRT5 LOyqTKE1gn2iwKAKTeAuUf4jLoA45N4= -----END CERTIFICATE-----Generated at Thu Aug 27 10:34:34 2026 by rpki-client