$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa File: 94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa (raw, json) Hash identifier: 1ST88WKrgFiNdCzdVV+QUuIezih21yNqSoB/TSil2x8= Subject key identifier: 6C:F0:21:D4:F2:5E:5C:27:40:37:A4:90:D5:0D:64:32:A8:F8:A5:B3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E31CF7BEE4A54130EA69EDA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 75.89.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:7b:ee:4a:54:13:0e:a6:9e:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=38ef6cf2-ee5c-47b4-9416-e7d6baa36f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7e:5e:f7:c2:6e:f8:ba:83:7d:ef:4c:f7:3a: ec:ea:bc:92:7b:86:ca:4f:cc:b7:34:e8:65:31:bd: 2f:44:df:17:29:ca:53:1c:0e:7b:99:c1:f6:5f:e7: 7f:50:9d:42:d0:84:54:8b:eb:ac:e9:1b:e0:6b:90: 79:0d:25:10:7e:bc:3e:15:68:40:f8:3a:f4:46:a8: 31:f8:08:1a:29:dc:9c:86:dc:97:0d:3f:09:75:2e: 66:ec:17:65:61:e0:6a:16:54:40:32:04:9d:2f:36: 5a:23:a6:20:85:b1:33:d5:da:47:68:32:de:5c:4b: 56:6d:3f:12:03:49:a2:43:3e:da:a6:9b:9d:2e:48: 43:46:28:bc:e8:2a:65:96:ef:9b:1b:e3:8f:09:9f: e9:ea:31:75:8d:d9:8c:f0:0e:4d:86:99:f0:72:cf: d8:b5:53:88:8c:f5:a7:36:b7:bc:54:fb:92:e0:42: 30:97:56:c4:7c:25:e6:1f:5b:4d:ed:ba:aa:dd:5f: 06:27:ca:03:c3:a2:1b:ca:41:0a:60:83:f3:fb:5f: 2b:60:43:98:ca:cc:65:87:f2:77:7f:e5:ec:67:b1: ee:1d:a7:da:46:c8:69:ea:91:61:d8:59:f4:91:1b: 65:fa:d4:97:30:4a:97:12:53:08:b2:08:42:cc:e7: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F0:21:D4:F2:5E:5C:27:40:37:A4:90:D5:0D:64:32:A8:F8:A5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94bf5a52-3c19-3b57-a314-f9449a0a3a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:12:2e:67:a0:e1:4b:ff:10:ab:5f:cc:17:4e:38:b7:cc:e6: 2a:fc:e0:39:05:13:4c:02:fd:79:8b:85:f1:21:fd:06:3b:6c: 8a:6a:df:b6:0d:62:4a:71:74:16:f2:95:76:e0:81:29:df:3e: 88:3f:1f:07:bd:a6:d1:4e:55:75:e0:fa:09:a7:be:d9:f5:c2: a9:7b:fa:be:1a:d2:c7:12:3d:4e:ba:1b:40:7a:6c:58:ac:1e: 7c:d0:c2:f6:1b:58:e9:52:0c:fb:ed:72:89:1e:7a:3e:e7:3d: fc:f8:73:60:8a:04:7e:da:13:26:48:8b:3b:df:69:67:63:62: 12:8a:ba:10:3c:88:76:c1:08:bd:2e:09:1a:d1:ee:d9:5f:60: cf:99:aa:9e:ac:2a:5f:87:d7:5f:d3:65:fe:de:f3:88:5b:3d: 32:4c:39:1a:7d:54:65:20:85:36:72:a3:d2:ef:71:10:3c:99: 22:69:11:83:61:00:56:dd:82:77:30:1a:74:17:c0:79:d5:5f: ec:de:9a:18:e6:02:7a:f5:19:be:08:b9:ef:fa:8b:14:43:d0: 00:33:13:4e:0e:e2:d6:56:e3:f3:a4:5d:1e:3a:c2:fe:1f:f2: a2:84:d9:5d:c5:f1:cf:91:11:90:44:18:49:fc:50:15:d4:24: cd:df:ea:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xz3vuSlQTDqae2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk MzhlZjZjZjItZWU1Yy00N2I0LTk0MTYtZTdkNmJhYTM2ZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n5e98Ju+LqDfe9M9zrs6rySe4bKT8y3NOhl Mb0vRN8XKcpTHA57mcH2X+d/UJ1C0IRUi+us6Rvga5B5DSUQfrw+FWhA+Dr0Rqgx +AgaKdychtyXDT8JdS5m7BdlYeBqFlRAMgSdLzZaI6YghbEz1dpHaDLeXEtWbT8S A0miQz7appudLkhDRii86Cpllu+bG+OPCZ/p6jF1jdmM8A5Nhpnwcs/YtVOIjPWn Nre8VPuS4EIwl1bEfCXmH1tN7bqq3V8GJ8oDw6IbykEKYIPz+18rYEOYysxlh/J3 f+XsZ7HuHafaRshp6pFh2Fn0kRtl+tSXMEqXElMIsghCzOfWqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzwIdTyXlwnQDekkNUNZDKo+KWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRiZjVhNTItM2MxOS0z YjU3LWEzMTQtZjk0NDlhMGEzYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMSLmeg4Uv/EKtfzBdOOLfM5ir84DkFE0wC/XmLhfEh/QY7bIpq37YN YkpxdBbylXbggSnfPog/Hwe9ptFOVXXg+gmnvtn1wql7+r4a0scSPU66G0B6bFis HnzQwvYbWOlSDPvtcokeej7nPfz4c2CKBH7aEyZIizvfaWdjYhKKuhA8iHbBCL0u CRrR7tlfYM+Zqp6sKl+H11/TZf7e84hbPTJMORp9VGUghTZyo9LvcRA8mSJpEYNh AFbdgncwGnQXwHnVX+zemhjmAnr1Gb4Iue/6ixRD0AAzE04O4tZW4/OkXR46wv4f 8qKE2V3F8c+REZBEGEn8UBXUJM3f6oQ= -----END CERTIFICATE-----Generated at Mon Jul 13 05:53:47 2026 by rpki-client