$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa File: 6459e395-994a-3164-a37a-515ed2b0fb1e.roa (raw, json) Hash identifier: e0+KYH/Rm5zXv1VmuIZLMFWQ6TViLO3RQs9ENoKLFcU= Subject key identifier: 14:B6:77:A6:4C:9B:DF:A6:54:8A:27:6F:B2:CC:82:53:79:C5:9B:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584CB121AD24E8C443969742C980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 7029 IP address blocks: 75.117.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:ad:24:e8:c4:43:96:97:42:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=1b1f8a9b-9261-4dae-83f6-40ec9ded6efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:d5:f0:9e:45:d4:0e:b1:4b:49:35:70:cd: bd:37:a2:2b:69:69:2e:df:05:71:2e:dd:6e:eb:c1: b0:d8:01:88:f7:bc:06:94:ca:7c:ce:5b:18:45:fc: 66:c9:07:1f:b7:6a:48:ff:b9:91:5b:5e:dc:96:58: 80:74:7f:fd:bf:9d:38:21:ba:e0:21:6d:53:4c:12: 8a:5b:41:48:53:d7:40:2e:3b:22:c5:db:9b:03:ee: 06:09:ce:c4:c5:9d:e8:b8:7a:bc:51:1c:b4:5e:58: 94:b3:49:c9:5d:04:2f:fd:c5:cc:1b:bf:ce:63:c4: 03:ae:e8:ab:09:7f:62:bd:96:6e:1c:c7:24:8d:1c: a1:c7:71:a2:73:cf:df:1d:f8:64:c8:52:a0:f1:42: 6d:20:e2:00:53:14:e2:89:2d:1e:41:84:0e:25:f0: 3f:d7:6b:3e:0e:c9:41:2d:ab:26:78:37:c4:c2:68: 4a:da:4b:cb:d6:fc:a8:a5:52:10:33:88:70:67:9c: 8e:fe:28:22:1f:91:13:71:f1:a3:e8:f5:c6:06:22: eb:65:b6:ac:61:ef:0b:03:63:df:da:fe:3f:0b:4f: 15:1f:66:f1:0f:3e:b3:a5:02:d9:a9:8f:f6:85:b6: 64:22:d5:6a:7b:a3:02:7b:a1:61:8b:b7:d5:45:10: 14:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B6:77:A6:4C:9B:DF:A6:54:8A:27:6F:B2:CC:82:53:79:C5:9B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:50:21:a0:7f:a4:11:c9:d6:c9:e1:2e:f0:81:e6:38:ec:3e: fa:2c:7a:1d:16:a2:c9:aa:0c:4d:ea:de:1b:af:ca:82:5d:1d: 44:4e:03:63:6f:e2:cf:04:0e:dd:8d:63:e3:81:21:66:47:06: 6b:76:4b:27:af:df:26:ec:22:07:94:18:0a:d0:6a:a6:ab:0c: 58:47:6b:ed:13:0e:66:40:61:2e:f5:47:7b:6a:bd:f9:a4:ea: a3:e3:bd:67:12:bb:49:89:d9:cb:d1:5a:e0:83:dc:2d:32:da: fe:83:2e:22:35:d8:5f:12:b3:d5:47:98:d6:f8:3b:72:7e:d7: 58:a6:fe:ca:e3:3d:02:47:0c:10:f3:9f:8b:b3:f1:47:3c:4c: 9f:35:89:cd:24:40:29:53:08:36:b6:3e:0a:e6:82:54:46:d5: f2:a8:ce:48:d6:dc:d4:03:d1:ad:cc:8b:a1:36:2b:46:cb:45: fd:8f:72:ba:2a:16:b4:aa:ce:23:f7:d0:ea:d6:c7:ac:2c:8f: 2d:65:df:a3:32:9b:db:98:42:12:8d:ed:b0:57:f1:e8:3a:2c: e4:23:fb:ec:28:1f:a4:dc:e3:16:5c:eb:07:c8:50:d6:ec:f6: ca:b3:ae:95:3d:bf:56:6a:d4:20:d8:ea:b8:99:d7:52:67:cb: 33:e3:fc:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIa0k6MRDlpdCyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MWIxZjhhOWItOTI2MS00ZGFlLTgzZjYtNDBlYzlkZWQ2ZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFHV8J5F1A6xS0k1cM29N6IraWku3wVxLt1u 68Gw2AGI97wGlMp8zlsYRfxmyQcft2pI/7mRW17clliAdH/9v504IbrgIW1TTBKK W0FIU9dALjsixdubA+4GCc7ExZ3ouHq8URy0XliUs0nJXQQv/cXMG7/OY8QDruir CX9ivZZuHMckjRyhx3Gic8/fHfhkyFKg8UJtIOIAUxTiiS0eQYQOJfA/12s+DslB LasmeDfEwmhK2kvL1vyopVIQM4hwZ5yO/igiH5ETcfGj6PXGBiLrZbasYe8LA2Pf 2v4/C08VH2bxDz6zpQLZqY/2hbZkItVqe6MCe6Fhi7fVRRAUBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBS2d6ZMm9+mVIonb7LMglN5xZsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQ1OWUzOTUtOTk0YS0z MTY0LWEzN2EtNTE1ZWQyYjBmYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5QIaB/pBHJ1snhLvCB5jjsPvoseh0WosmqDE3q3huvyoJdHUROA2Nv 4s8EDt2NY+OBIWZHBmt2Syev3ybsIgeUGArQaqarDFhHa+0TDmZAYS71R3tqvfmk 6qPjvWcSu0mJ2cvRWuCD3C0y2v6DLiI12F8Ss9VHmNb4O3J+11im/srjPQJHDBDz n4uz8Uc8TJ81ic0kQClTCDa2PgrmglRG1fKozkjW3NQD0a3Mi6E2K0bLRf2Pcroq FrSqziP30OrWx6wsjy1l36Mym9uYQhKN7bBX8eg6LOQj++woH6Tc4xZc6wfIUNbs 9sqzrpU9v1Zq1CDY6riZ11JnyzPj/Fk= -----END CERTIFICATE-----Generated at Thu Feb 26 07:59:12 2026 by rpki-client