$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa File: 94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa (raw, json) Hash identifier: 75r0TWcmwnmweWP+9teAV7Mb/MFTHOiKDbF+52OB738= Subject key identifier: 72:B0:BD:52:6E:DF:22:3E:02:25:72:13:E7:10:30:21:FB:85:68:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F778357BFFF0F10FF477EB580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 75.89.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:57:bf:ff:0f:10:ff:47:7e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=2020c7eb-42aa-4a2e-89ee-6c4def31f375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:47:45:1f:cb:d5:b9:ed:6e:03:27:05:c6: 6c:4c:a2:fc:2b:56:f1:a8:f8:61:da:1c:4a:f8:f1: a3:34:2d:86:6c:ad:72:2f:c4:95:63:04:00:fa:a0: 84:2c:ee:c0:fc:1b:2e:23:ab:43:99:15:6f:87:30: 8f:28:65:04:22:20:aa:66:e0:74:fd:78:21:f1:ee: b1:9d:ab:a6:9e:27:6f:62:cf:03:e8:8e:7f:8c:b3: bc:ef:f4:8c:4c:a0:67:b9:80:f0:d0:03:14:0b:32: aa:26:8a:e5:3e:99:0c:60:41:6d:43:58:c0:e0:46: 7d:7e:67:75:fe:1b:9b:96:28:6b:6e:5f:4d:92:d7: e1:0e:97:f1:e5:3f:b7:a0:1a:bb:50:5e:77:e0:37: d7:6a:c5:55:04:bd:9a:e9:cf:53:07:6c:3d:6b:90: 2a:44:5d:bc:27:f3:a9:5c:57:72:08:a7:40:6e:a8: 88:c8:2d:35:55:f9:fc:34:c7:b5:47:0c:d5:33:55: 1c:fd:51:19:85:17:33:e3:a6:94:16:ed:5d:4f:4a: 60:95:6b:c2:ac:17:81:36:95:0d:a7:79:e0:be:eb: ad:39:c5:4d:09:2c:a8:fb:e4:a2:e4:a7:de:e2:d0: df:43:29:32:46:10:28:49:b6:9b:2e:5c:47:3a:d2: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B0:BD:52:6E:DF:22:3E:02:25:72:13:E7:10:30:21:FB:85:68:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5b:58:61:9b:cd:49:57:1c:cb:d9:50:93:ba:14:f3:ee:17: 9d:9f:47:c3:e2:08:16:ba:4d:68:65:cc:a5:a1:d4:f2:ae:d6: 11:9c:de:07:eb:4f:43:59:aa:d8:73:41:99:7f:a1:9e:59:ea: fc:27:ff:07:cd:db:d4:a4:82:c7:a5:21:dd:7b:a7:fd:be:ee: 27:3a:1a:45:f9:91:78:6b:c7:6e:db:b5:25:9a:0a:f6:53:a7: 6a:f0:37:11:5a:f6:90:d2:8f:54:2a:ec:4c:67:27:cd:56:79: a8:cd:cf:d8:55:f9:c4:ca:fb:07:2f:17:02:0c:e5:e3:18:cd: 51:30:91:ad:b6:8d:d6:f9:48:7d:c2:9a:75:ce:b3:af:c4:4c: b1:24:95:3b:51:3e:67:64:4c:08:7a:b8:02:58:ec:ac:5f:59: 68:2e:9e:da:70:47:fe:17:46:00:9a:ba:d4:69:d4:8d:45:5c: e5:64:9a:9a:7f:de:a7:7e:38:ff:76:8d:ed:c5:51:22:61:8c: a2:25:80:99:f8:8f:16:b8:f6:5e:1d:27:bc:11:60:d0:33:d6: d5:65:8c:b9:d6:8e:c0:26:78:e2:e4:bb:2c:fa:c1:c6:29:56: 11:b1:50:d9:2d:45:19:d2:c7:32:b5:8c:31:c3:3f:0b:d0:bb: ab:1d:d2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1e//w8Q/0d+tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjAyMGM3ZWItNDJhYS00YTJlLTg5ZWUtNmM0ZGVmMzFmMzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3xHRR/L1bntbgMnBcZsTKL8K1bxqPhh2hxK +PGjNC2GbK1yL8SVYwQA+qCELO7A/BsuI6tDmRVvhzCPKGUEIiCqZuB0/Xgh8e6x naumnidvYs8D6I5/jLO87/SMTKBnuYDw0AMUCzKqJorlPpkMYEFtQ1jA4EZ9fmd1 /hublihrbl9NktfhDpfx5T+3oBq7UF534DfXasVVBL2a6c9TB2w9a5AqRF28J/Op XFdyCKdAbqiIyC01Vfn8NMe1RwzVM1Uc/VEZhRcz46aUFu1dT0pglWvCrBeBNpUN p3ngvuutOcVNCSyo++Si5Kfe4tDfQykyRhAoSbabLlxHOtJp1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKwvVJu3yI+AiVyE+cQMCH7hWiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRiZjVhNTItM2MxOS0z YjU3LWEzMTQtZjk0NDlhMGEzYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1bWGGbzUlXHMvZUJO6FPPuF52fR8PiCBa6TWhlzKWh1PKu1hGc3gfr T0NZqthzQZl/oZ5Z6vwn/wfN29SkgselId17p/2+7ic6GkX5kXhrx27btSWaCvZT p2rwNxFa9pDSj1Qq7ExnJ81WeajNz9hV+cTK+wcvFwIM5eMYzVEwka22jdb5SH3C mnXOs6/ETLEklTtRPmdkTAh6uAJY7KxfWWguntpwR/4XRgCautRp1I1FXOVkmpp/ 3qd+OP92je3FUSJhjKIlgJn4jxa49l4dJ7wRYNAz1tVljLnWjsAmeOLkuyz6wcYp VhGxUNktRRnSxzK1jDHDPwvQu6sd0qA= -----END CERTIFICATE-----Generated at Tue Oct 13 19:28:23 2026 by rpki-client