$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa File: 75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa (raw, json) Hash identifier: YVOyra/vyHEpkzgGThjSNvGqiXSdQN9TQ8Pq61XDoSk= Subject key identifier: E6:AF:53:71:4F:3A:D5:32:89:1B:1E:99:D7:2D:C6:91:B0:7A:4A:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EB2B1C8937AA188C54861DD20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 7029 IP address blocks: 97.66.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:c8:93:7a:a1:88:c5:48:61:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=00dd210d-7cda-44c0-b37a-fd4a1f8e28b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:b2:1e:3b:83:26:f6:3d:28:1c:67:ad:92: 12:e8:f5:08:4c:b8:0e:22:7d:07:98:e7:0d:90:94: 8e:c1:93:d0:7e:23:bc:73:b4:f6:af:81:ed:7d:fe: 4d:c6:87:a4:da:9a:bd:41:de:0b:c3:b7:6e:86:30: 95:7a:b5:8d:e0:cf:5e:b5:53:34:cf:09:2b:ff:c1: 4c:ba:6b:3e:bc:63:18:02:86:f1:b4:45:c3:89:ff: 63:4f:42:05:3a:05:c6:a3:2f:3a:26:56:c1:4b:f1: 75:71:11:0b:91:79:40:61:f4:7f:d7:bc:91:42:ac: c4:14:24:00:7a:28:f7:3e:f1:45:15:b7:e9:7d:bd: e7:33:ef:21:c6:c1:56:c5:68:f0:39:6e:ac:4c:01: 77:d0:5d:cc:3d:ab:af:2d:66:3e:cb:03:ce:9f:0f: 49:64:54:6a:3d:61:3f:67:dd:9b:e9:92:48:b7:f4: 16:08:d3:a5:64:24:d3:57:36:8b:09:ab:49:77:bb: 63:b6:c0:84:8e:c5:28:a7:43:12:eb:08:80:6c:41: 3a:31:d9:e1:72:c2:2c:f6:1d:b4:bf:da:6e:9f:de: b4:34:fe:67:fc:6a:e3:00:f2:d4:6a:74:38:05:58: a3:dd:15:b6:84:59:15:63:1c:4c:fe:29:e4:ee:bc: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AF:53:71:4F:3A:D5:32:89:1B:1E:99:D7:2D:C6:91:B0:7A:4A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75a6223c-2cf8-30cc-bc58-4e6a0be4b1c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.66.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c0:72:ce:dd:d8:cf:64:cd:98:5c:ab:69:5c:a1:31:f3:54: 39:b5:14:78:5c:f7:f7:ca:d9:9d:33:4e:4c:8b:f0:ff:7c:9b: 1c:35:30:ba:0d:08:b2:cb:be:22:8d:ad:5b:50:ed:31:84:3c: 5c:c3:55:f5:b2:76:f7:51:a5:63:a1:61:3c:38:7a:a9:37:50: c7:9e:27:5a:01:26:8e:59:a5:9f:af:b0:46:41:55:84:13:e9: a0:3f:d8:95:bd:e1:81:0b:c6:05:ee:c6:79:09:2e:14:85:54: b3:ad:8a:a6:d5:4b:30:16:c0:de:a1:d2:00:3e:7f:74:58:d5: 7b:9c:40:28:57:14:46:12:29:3b:21:fc:5c:cb:72:93:74:98: ca:69:81:a6:f6:e7:91:ee:3a:9f:85:69:11:69:ca:c7:67:32: 50:d3:74:37:13:23:d8:96:72:ed:34:1a:8c:40:25:64:1c:70: 85:94:1c:00:40:37:6d:84:f8:97:d0:e0:42:32:4e:84:4d:d2: a3:e2:49:f2:d7:d8:19:2a:8f:92:a7:32:6f:8c:ae:b1:d4:cf: 3b:70:41:da:3f:f2:91:88:c0:cb:51:57:9b:43:87:3a:01:8b: 40:10:ab:90:76:07:1b:b3:b6:92:0d:3f:ce:5c:c3:81:93:42: a1:c4:39:9e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6ysciTeqGIxUhh3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MDBkZDIxMGQtN2NkYS00NGMwLWIzN2EtZmQ0YTFmOGUyOGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAmyHjuDJvY9KBxnrZIS6PUITLgOIn0HmOcN kJSOwZPQfiO8c7T2r4Htff5Nxoek2pq9Qd4Lw7duhjCVerWN4M9etVM0zwkr/8FM ums+vGMYAobxtEXDif9jT0IFOgXGoy86JlbBS/F1cRELkXlAYfR/17yRQqzEFCQA eij3PvFFFbfpfb3nM+8hxsFWxWjwOW6sTAF30F3MPauvLWY+ywPOnw9JZFRqPWE/ Z92b6ZJIt/QWCNOlZCTTVzaLCatJd7tjtsCEjsUop0MS6wiAbEE6MdnhcsIs9h20 v9pun960NP5n/GrjAPLUanQ4BVij3RW2hFkVYxxM/ink7rxAQQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOavU3FPOtUyiRsemdctxpGwekoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzVhNjIyM2MtMmNmOC0z MGNjLWJjNTgtNGU2YTBiZTRiMWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBYUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHsByzt3Yz2TNmFyraVyhMfNUObUUeFz398rZnTNOTIvw/3ybHDUwug0I ssu+Io2tW1DtMYQ8XMNV9bJ291GlY6FhPDh6qTdQx54nWgEmjlmln6+wRkFVhBPp oD/Ylb3hgQvGBe7GeQkuFIVUs62KptVLMBbA3qHSAD5/dFjVe5xAKFcURhIpOyH8 XMtyk3SYymmBpvbnke46n4VpEWnKx2cyUNN0NxMj2JZy7TQajEAlZBxwhZQcAEA3 bYT4l9DgQjJOhE3So+JJ8tfYGSqPkqcyb4yusdTPO3BB2j/ykYjAy1FXm0OHOgGL QBCrkHYHG7O2kg0/zlzDgZNCocQ5ng== -----END CERTIFICATE-----Generated at Thu Aug 27 11:30:46 2026 by rpki-client