$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa File: 6459e395-994a-3164-a37a-515ed2b0fb1e.roa (raw, json) Hash identifier: CqFqTe4cLVFqgJWcNRcL09GyamykQGqXCDg6Yl4yidw= Subject key identifier: 2E:1C:B2:34:74:6D:1D:94:37:0B:82:C2:CF:D3:01:32:E7:D2:5A:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E7204DBD48FD0247DF11B0480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 7029 IP address blocks: 75.117.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:db:d4:8f:d0:24:7d:f1:1b:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=87ae7cd3-88aa-4317-a3f6-e553b1205152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:49:4d:83:9d:a0:25:b4:e7:bb:78:80:5d: 97:7d:3c:cf:c8:e6:27:93:9a:52:cc:73:43:c5:45: 25:a2:5d:33:1b:7f:7a:13:58:0e:1c:4f:cd:8c:f3: 0b:4f:41:44:b3:e6:39:3b:d2:c6:bb:e9:1d:74:e6: c0:69:61:bd:f1:ab:e2:44:52:82:91:6e:e0:bb:be: b2:e2:94:f1:23:ef:4e:0c:1e:80:17:58:b3:d8:bf: 91:bf:e4:41:01:77:46:a7:2f:9f:a8:d3:27:ea:92: 75:b5:72:c2:d2:da:e7:29:f4:70:cc:cd:70:cd:06: 4b:04:45:0b:5f:19:73:31:1d:ee:18:13:e8:53:68: fa:2a:5d:7f:da:73:e4:f7:d4:a8:78:e2:0a:33:9f: 18:a4:97:37:95:74:5f:19:58:12:31:07:77:f1:54: c2:61:a1:03:b2:92:df:f5:7e:14:47:78:4f:c5:cc: c8:8a:af:c3:ed:8b:4f:2a:74:c5:b9:88:8c:d9:00: 89:96:f7:aa:a5:07:7d:0f:f0:ba:73:3a:07:97:e1: 4a:1f:38:b8:ca:3e:50:a2:b3:83:e1:33:5e:31:1f: 6d:0d:47:8f:be:d6:93:5d:0d:0f:93:37:07:95:e1: 0c:ac:25:47:e0:c2:86:ac:ca:d4:fe:f6:c4:64:1a: 7e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:B2:34:74:6D:1D:94:37:0B:82:C2:CF:D3:01:32:E7:D2:5A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6459e395-994a-3164-a37a-515ed2b0fb1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4e:9f:30:be:5b:07:df:72:71:d4:e8:3f:2e:af:f6:c2:d1: 56:26:d9:42:26:cf:6f:3a:51:20:ab:fa:9a:d8:21:52:2e:4f: ff:48:06:f4:3c:30:cf:f4:f2:95:63:c7:36:93:a3:b9:c0:ea: 83:b5:93:3b:41:17:50:0d:c9:77:45:50:c9:f5:ab:a0:69:e5: c6:d8:ea:5d:a9:b8:d3:5f:75:d2:29:ed:c2:6b:c8:0e:a3:06: 43:f3:25:13:f7:67:68:a3:a4:b7:a5:b2:db:64:04:ae:c7:2b: f7:a1:c6:cb:a9:d8:1d:3e:08:67:fd:4b:b4:20:93:f1:ad:8c: 26:72:29:5a:23:9d:5f:1f:b6:06:c9:1a:64:68:be:63:c4:ac: 6a:27:36:cc:50:b4:bf:31:38:12:83:f7:a1:1e:3c:48:73:32: e4:68:1c:4f:c7:0d:0f:eb:57:d5:a9:b4:54:43:e7:da:05:54: c2:66:78:b3:f9:65:a2:56:d0:ff:c2:0f:a2:f1:92:48:40:84: 4e:c5:97:d4:70:82:7a:1c:03:2e:ac:11:0a:e6:0d:10:f4:8c: 47:82:03:99:20:19:08:18:da:f4:79:1e:24:84:1e:91:f1:17: 3f:82:55:9a:5e:cc:67:aa:79:1d:83:ef:61:7f:8f:0a:37:2c: 16:61:aa:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNvUj9AkffEbBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ODdhZTdjZDMtODhhYS00MzE3LWEzZjYtZTU1M2IxMjA1MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijBJTYOdoCW057t4gF2XfTzPyOYnk5pSzHND xUUlol0zG396E1gOHE/NjPMLT0FEs+Y5O9LGu+kddObAaWG98aviRFKCkW7gu76y 4pTxI+9ODB6AF1iz2L+Rv+RBAXdGpy+fqNMn6pJ1tXLC0trnKfRwzM1wzQZLBEUL XxlzMR3uGBPoU2j6Kl1/2nPk99SoeOIKM58YpJc3lXRfGVgSMQd38VTCYaEDspLf 9X4UR3hPxczIiq/D7YtPKnTFuYiM2QCJlveqpQd9D/C6czoHl+FKHzi4yj5QorOD 4TNeMR9tDUePvtaTXQ0PkzcHleEMrCVH4MKGrMrU/vbEZBp+HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4csjR0bR2UNwuCws/TATLn0lqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjQ1OWUzOTUtOTk0YS0z MTY0LWEzN2EtNTE1ZWQyYjBmYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFOnzC+WwffcnHU6D8ur/bC0VYm2UImz286USCr+prYIVIuT/9IBvQ8 MM/08pVjxzaTo7nA6oO1kztBF1ANyXdFUMn1q6Bp5cbY6l2puNNfddIp7cJryA6j BkPzJRP3Z2ijpLelsttkBK7HK/ehxsup2B0+CGf9S7Qgk/GtjCZyKVojnV8ftgbJ GmRovmPErGonNsxQtL8xOBKD96EePEhzMuRoHE/HDQ/rV9WptFRD59oFVMJmeLP5 ZaJW0P/CD6LxkkhAhE7Fl9RwgnocAy6sEQrmDRD0jEeCA5kgGQgY2vR5HiSEHpHx Fz+CVZpezGeqeR2D72F/jwo3LBZhqvM= -----END CERTIFICATE-----Generated at Mon Jul 13 05:56:59 2026 by rpki-client