$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa File: 8a67ce58-99c9-3737-87d0-09b3a62815bc.roa (raw, json) Hash identifier: RTQAxJjsAINf1ZF7UrsShBkzcSwqs8euWKzDI0ofgVA= Subject key identifier: D6:00:31:37:B3:54:06:4D:EB:1B:D8:60:35:AC:F3:57:CB:67:18:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F51D2B3782A4DFC9EFF08AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 7029 IP address blocks: 75.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b3:78:2a:4d:fc:9e:ff:08:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=d134f3b7-0b43-4bd9-b05e-8e28c14a4c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:3b:5d:33:20:3f:78:57:2d:b6:23:c2:ff: fe:72:31:a7:3d:0e:ba:70:4f:44:f4:38:de:cf:f2: 0b:27:ec:d2:4e:46:42:dd:d4:f4:05:0a:df:ca:39: f7:e5:47:0e:87:d0:57:cc:3e:19:a0:48:8c:5d:f6: 36:86:ea:95:ea:0b:94:d8:6f:46:1b:74:94:15:f1: 99:ba:3d:71:1f:45:7b:03:01:33:7b:27:82:b7:2d: c2:a2:6a:be:18:ef:09:43:03:16:59:92:4c:d2:06: d9:d0:a0:14:30:b2:b3:3c:8d:ee:96:1f:90:ed:2c: 0e:14:fc:79:1f:02:f0:c5:9f:2f:8d:05:48:cc:cd: fd:b0:02:58:c5:5d:7b:34:77:6f:71:d2:ba:97:12: 5f:9e:b7:f1:88:d7:d9:fb:22:03:10:d1:1b:94:97: 94:b2:3b:3c:4b:14:56:47:62:ab:b0:36:9a:9b:09: 0a:c0:e1:ed:1e:79:d2:73:86:d6:1e:3a:3b:be:9a: 0a:7c:4b:e2:ad:de:b9:b7:01:45:52:6a:da:64:b0: 23:3b:e5:99:1e:fc:df:7a:29:de:3a:19:9d:bb:aa: d3:59:ad:55:04:31:1a:0b:9e:03:cd:7e:1d:ff:dc: d1:7c:3e:06:34:8c:19:39:b1:07:65:f1:78:12:0a: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:00:31:37:B3:54:06:4D:EB:1B:D8:60:35:AC:F3:57:CB:67:18:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5e:f2:ef:1c:98:9b:60:e4:68:20:21:b7:29:3f:6c:2d:01: 08:7e:2f:74:bd:89:80:85:4f:8e:b4:a3:c8:97:7e:3d:6a:b5: 2a:f7:62:54:06:58:87:8c:56:6d:b8:36:ec:37:06:eb:11:e7: 39:cc:b4:c8:9a:e6:64:92:4a:bb:89:22:8f:c6:cc:2b:78:e4: ac:da:3d:53:c9:1b:55:be:84:81:71:e7:e1:1f:08:1a:42:e7: 3a:da:0f:62:41:b0:f9:66:78:d7:33:31:d3:e4:97:b7:af:3f: 77:6d:6f:30:60:7f:35:31:a7:2f:cb:e2:28:d9:ec:d3:06:ad: 6f:ec:cb:7b:09:3e:86:0a:58:e1:99:96:37:55:3c:75:a7:52: f6:b8:db:58:7f:24:5a:9e:93:c4:bb:44:38:c0:8c:14:76:e3: b7:b2:0d:86:cf:bf:d2:58:5d:d5:81:97:f3:a4:f8:e9:80:4a: db:3c:24:cf:53:03:7a:8e:fd:19:89:aa:b7:d6:ac:f3:64:0e: b5:60:45:bc:8b:01:79:1b:d7:d3:fb:32:4e:6f:57:7a:19:46: 66:e0:0d:2d:eb:30:8c:84:00:03:2a:1e:db:d8:91:05:11:80: 89:18:6a:55:69:bd:88:27:76:c0:93:fa:1a:39:c1:a9:15:8d: 3b:d1:92:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rN4Kk38nv8IqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDEzNGYzYjctMGI0My00YmQ5LWIwNWUtOGUyOGMxNGE0YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CA7XTMgP3hXLbYjwv/+cjGnPQ66cE9E9Dje z/ILJ+zSTkZC3dT0BQrfyjn35UcOh9BXzD4ZoEiMXfY2huqV6guU2G9GG3SUFfGZ uj1xH0V7AwEzeyeCty3Comq+GO8JQwMWWZJM0gbZ0KAUMLKzPI3ulh+Q7SwOFPx5 HwLwxZ8vjQVIzM39sAJYxV17NHdvcdK6lxJfnrfxiNfZ+yIDENEblJeUsjs8SxRW R2KrsDaamwkKwOHtHnnSc4bWHjo7vpoKfEvird65twFFUmraZLAjO+WZHvzfeine Ohmdu6rTWa1VBDEaC54DzX4d/9zRfD4GNIwZObEHZfF4Ego1swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYAMTezVAZN6xvYYDWs81fLZxhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE2N2NlNTgtOTljOS0z NzM3LTg3ZDAtMDliM2E2MjgxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5e8u8cmJtg5GggIbcpP2wtAQh+L3S9iYCFT460o8iXfj1qtSr3YlQG WIeMVm24Nuw3BusR5znMtMia5mSSSruJIo/GzCt45KzaPVPJG1W+hIFx5+EfCBpC 5zraD2JBsPlmeNczMdPkl7evP3dtbzBgfzUxpy/L4ijZ7NMGrW/sy3sJPoYKWOGZ ljdVPHWnUva421h/JFqek8S7RDjAjBR247eyDYbPv9JYXdWBl/Ok+OmASts8JM9T A3qO/RmJqrfWrPNkDrVgRbyLAXkb19P7Mk5vV3oZRmbgDS3rMIyEAAMqHtvYkQUR gIkYalVpvYgndsCT+ho5wakVjTvRkok= -----END CERTIFICATE-----Generated at Tue Oct 13 16:04:39 2026 by rpki-client