$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c523d5a-8c6a-3633-a1b1-4843d36775e1.roa File: 5c523d5a-8c6a-3633-a1b1-4843d36775e1.roa (raw, json) Hash identifier: PxFdxWcIPmUR3qHMoCt2Ngb9CQNF+HBr2ZJ4F0MO+Ks= Subject key identifier: 09:3B:89:B6:EA:09:4D:43:1E:45:EF:0C:52:CF:BC:CF:A0:72:B2:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584ED432236EF73AA2228423C180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c523d5a-8c6a-3633-a1b1-4843d36775e1.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 7029 IP address blocks: 75.91.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:23:6e:f7:3a:a2:22:84:23:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=d3ab21dc-a402-40cb-a686-41f4481bba7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:c3:44:62:5d:93:7c:20:8e:e6:75:0f:0f: 75:c5:1b:f2:00:e8:3c:2b:c2:41:56:ff:6e:11:47: 49:7a:4b:29:6f:3a:5d:0a:73:e6:5f:78:3a:cf:ce: 03:11:33:78:1b:21:a2:5c:aa:cd:40:1c:77:92:96: e4:d2:88:f5:52:57:fd:9a:cf:34:13:e5:fe:4c:77: 85:31:41:3b:09:1f:97:97:e8:02:2c:b4:b9:78:3e: 99:8e:ed:84:17:2c:47:2e:76:2b:0f:e9:51:4d:44: ca:aa:cd:fa:20:e3:f9:01:b0:48:79:25:f6:37:7d: 43:42:a0:63:cb:81:64:d5:72:d8:4a:44:d3:6e:2e: ac:56:13:9d:17:82:a1:36:f4:2d:64:42:4a:06:a3: 3a:4c:36:53:ab:dc:d9:a9:df:30:4c:27:d6:5e:e8: b9:37:83:23:c9:65:77:8a:9b:fe:5b:8b:42:bd:da: 93:cc:22:cf:9c:cd:59:56:61:3c:ac:fd:b4:38:3b: 24:0f:81:5c:84:d4:d9:86:83:ae:1f:a0:16:a4:d4: 08:22:cf:9f:14:0d:d7:c0:0e:58:75:00:c7:6c:9d: 67:df:99:54:52:1b:73:30:32:ba:34:6f:4a:84:74: d4:c4:75:a6:1a:82:da:2e:4f:ea:65:29:2d:63:19: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:89:B6:EA:09:4D:43:1E:45:EF:0C:52:CF:BC:CF:A0:72:B2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c523d5a-8c6a-3633-a1b1-4843d36775e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:6a:36:94:d7:69:e1:64:06:e9:15:fd:77:ee:da:22:aa:99: 3e:c1:0a:c8:20:c3:9c:06:24:b5:58:b0:19:1b:f1:54:71:b2: da:db:ab:89:e2:3e:a2:c7:b4:ab:c9:fd:e7:05:4e:f7:c1:1d: 14:60:79:c0:1d:f2:b6:d2:e8:aa:e6:71:37:b6:04:d7:05:5c: 4a:ca:67:97:f7:41:d1:61:e2:76:26:1f:a5:15:fe:c7:3a:1d: a9:4b:d2:e1:c3:08:23:39:1d:12:fe:0a:2d:b9:7d:09:8e:62: 7e:a3:e6:c4:c7:97:94:59:7e:fe:fc:8a:d7:f8:7a:7f:a9:db: 83:34:42:82:25:05:55:4c:b7:22:83:06:0a:4b:88:d5:e8:60: ce:85:d1:6a:c3:87:4b:96:b4:7b:75:f2:40:73:2d:ce:c3:ae: bb:33:7c:cf:6d:c4:81:46:e1:7e:e3:3e:5d:01:d9:09:04:ed: db:21:c9:57:45:d6:21:a5:76:b7:c0:c6:43:22:99:90:74:8c: 6f:7b:ce:dd:d5:3e:3e:db:1f:d8:b0:91:29:de:89:f0:79:dd: b0:24:f8:e6:af:3a:b2:de:b4:c7:e4:8a:b7:d4:18:35:92:50: f3:15:f5:dc:71:51:f8:2e:47:5a:ce:9b:90:13:ac:29:27:9c: 94:f2:c1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMiNu9zqiIoQjwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDNhYjIxZGMtYTQwMi00MGNiLWE2ODYtNDFmNDQ4MWJiYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueHDRGJdk3wgjuZ1Dw91xRvyAOg8K8JBVv9u EUdJekspbzpdCnPmX3g6z84DETN4GyGiXKrNQBx3kpbk0oj1Ulf9ms80E+X+THeF MUE7CR+Xl+gCLLS5eD6Zju2EFyxHLnYrD+lRTUTKqs36IOP5AbBIeSX2N31DQqBj y4Fk1XLYSkTTbi6sVhOdF4KhNvQtZEJKBqM6TDZTq9zZqd8wTCfWXui5N4MjyWV3 ipv+W4tCvdqTzCLPnM1ZVmE8rP20ODskD4FchNTZhoOuH6AWpNQIIs+fFA3XwA5Y dQDHbJ1n35lUUhtzMDK6NG9KhHTUxHWmGoLaLk/qZSktYxnE9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk7ibbqCU1DHkXvDFLPvM+gcrLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM1MjNkNWEtOGM2YS0z NjMzLWExYjEtNDg0M2QzNjc3NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1tAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVqNpTXaeFkBukV/Xfu2iKqmT7BCsggw5wGJLVYsBkb8VRxstrbq4ni PqLHtKvJ/ecFTvfBHRRgecAd8rbS6KrmcTe2BNcFXErKZ5f3QdFh4nYmH6UV/sc6 HalL0uHDCCM5HRL+Ci25fQmOYn6j5sTHl5RZfv78itf4en+p24M0QoIlBVVMtyKD BgpLiNXoYM6F0WrDh0uWtHt18kBzLc7DrrszfM9txIFG4X7jPl0B2QkE7dshyVdF 1iGldrfAxkMimZB0jG97zt3VPj7bH9iwkSneifB53bAk+OavOrLetMfkirfUGDWS UPMV9dxxUfguR1rOm5ATrCknnJTywSs= -----END CERTIFICATE-----Generated at Thu Aug 27 12:31:57 2026 by rpki-client