$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7286dae8-9ab0-359f-a3c8-041dcdce5fe2.roa File: 7286dae8-9ab0-359f-a3c8-041dcdce5fe2.roa (raw, json) Hash identifier: KWjh9Dnw1PaG7Q2zS5P0fNamQ1DN6J9vJWaellVj4dY= Subject key identifier: 75:AB:63:68:64:AF:79:83:3B:03:99:0B:64:59:B8:C8:0D:AE:FA:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D75D54CABBEFC87994A922180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7286dae8-9ab0-359f-a3c8-041dcdce5fe2.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 7029 IP address blocks: 75.117.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:4c:ab:be:fc:87:99:4a:92:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=f1622736-5a8a-4084-a94d-a33bf60df3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:e0:92:59:a1:13:6f:a3:16:6a:d5:cb:33: 21:70:39:97:cc:4e:00:af:5c:da:a0:bb:57:68:8f: 1b:81:4a:28:a8:e2:78:12:61:cb:8b:aa:aa:d1:76: 8c:a8:b2:eb:6c:71:ad:b7:91:c4:59:5c:72:19:60: db:79:4c:0f:53:ba:36:b4:20:86:a4:cd:2d:db:e9: f5:09:57:1a:c8:d6:c2:2c:29:e5:e2:3b:92:6f:a3: f8:e6:eb:c3:28:a6:93:d5:96:a6:0c:02:07:e3:fa: e4:8d:d9:15:fc:9d:58:73:20:18:66:3c:5c:e9:97: dd:6c:ee:a0:06:36:f0:0f:f9:16:2a:5e:47:7f:db: b8:ad:b4:45:da:4d:b6:75:95:1f:f7:83:a4:60:88: f0:eb:94:73:61:62:1c:73:2f:4f:ad:c9:6e:42:af: 7f:9c:af:ab:9d:14:e7:e5:bc:cd:86:89:85:36:46: 2b:e5:cf:62:83:ab:d4:54:3b:62:10:dd:76:86:de: c4:e5:f6:5b:22:bb:2a:2e:44:92:b2:c1:a4:be:de: 9c:93:15:3e:d3:61:36:32:86:0e:41:6b:55:e6:9b: 83:df:94:83:b2:45:8c:e4:c4:de:31:3f:1e:07:66: 6b:5a:3e:de:11:c4:34:a3:ce:52:16:64:90:b4:92: 06:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:63:68:64:AF:79:83:3B:03:99:0B:64:59:B8:C8:0D:AE:FA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7286dae8-9ab0-359f-a3c8-041dcdce5fe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:61:58:d2:bf:8a:6d:6d:d1:d8:bb:a9:25:65:ed:d4:40:46: 97:3c:b6:60:95:dc:a0:c3:f1:11:5c:c9:59:b0:a8:2a:5e:55: 2f:4a:0a:b2:51:57:a5:60:80:d9:6c:f5:68:ff:b0:09:6c:d7: f6:e8:34:24:48:ff:66:b3:f3:82:a8:66:65:f5:b9:40:06:80: 9f:49:d2:5a:ea:c8:22:44:4f:bb:d1:03:9e:68:fe:10:53:47: 71:86:72:07:3c:42:86:74:c9:f8:9d:c4:02:81:65:73:c7:49: a8:d1:3a:d5:88:9c:a9:c8:d4:ec:18:d3:99:6c:a5:2b:d0:06: 95:bc:02:7a:26:cc:1f:18:55:60:6e:1f:53:a3:63:69:0d:cd: 48:09:bd:5a:63:f2:86:07:42:2e:61:01:f5:9a:f1:7b:ec:80: 02:88:3f:ae:6c:74:86:39:80:2d:e4:4e:44:e1:92:79:34:ed: 5d:a4:fb:23:64:0e:2e:f8:8a:81:21:85:8b:ae:d8:b4:45:3c: 79:ca:25:a8:55:af:11:31:10:2b:3e:de:a7:0d:ac:89:78:05: 9b:da:c3:6e:c4:67:68:f0:c6:c9:9d:0b:67:60:35:40:fa:cd: 00:00:cd:be:37:7e:d9:82:c9:51:6f:44:05:37:5a:92:fa:02: eb:be:f2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UyrvvyHmUqSIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZjE2MjI3MzYtNWE4YS00MDg0LWE5NGQtYTMzYmY2MGRmM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil7gklmhE2+jFmrVyzMhcDmXzE4Ar1zaoLtX aI8bgUooqOJ4EmHLi6qq0XaMqLLrbHGtt5HEWVxyGWDbeUwPU7o2tCCGpM0t2+n1 CVcayNbCLCnl4juSb6P45uvDKKaT1ZamDAIH4/rkjdkV/J1YcyAYZjxc6ZfdbO6g BjbwD/kWKl5Hf9u4rbRF2k22dZUf94OkYIjw65RzYWIccy9PrcluQq9/nK+rnRTn 5bzNhomFNkYr5c9ig6vUVDtiEN12ht7E5fZbIrsqLkSSssGkvt6ckxU+02E2MoYO QWtV5puD35SDskWM5MTeMT8eB2ZrWj7eEcQ0o85SFmSQtJIGswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWrY2hkr3mDOwOZC2RZuMgNrvoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI4NmRhZTgtOWFiMC0z NTlmLWEzYzgtMDQxZGNkY2U1ZmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRhWNK/im1t0di7qSVl7dRARpc8tmCV3KDD8RFcyVmwqCpeVS9KCrJR V6VggNls9Wj/sAls1/boNCRI/2az84KoZmX1uUAGgJ9J0lrqyCJET7vRA55o/hBT R3GGcgc8QoZ0yfidxAKBZXPHSajROtWInKnI1OwY05lspSvQBpW8AnomzB8YVWBu H1OjY2kNzUgJvVpj8oYHQi5hAfWa8XvsgAKIP65sdIY5gC3kTkThknk07V2k+yNk Di74ioEhhYuu2LRFPHnKJahVrxExECs+3qcNrIl4BZvaw27EZ2jwxsmdC2dgNUD6 zQAAzb43ftmCyVFvRAU3WpL6Auu+8iA= -----END CERTIFICATE-----Generated at Mon Apr 13 13:07:15 2026 by rpki-client