$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa File: aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa (raw, json) Hash identifier: TrQmyWREGtKNlqr8vstz0oiriI473Uor98ipudIJnDU= Subject key identifier: 00:63:15:3B:F2:B2:31:E9:C1:A1:5D:4C:8B:A1:D7:F3:3F:23:51:C5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE7394BC2431AB7FFF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 75.91.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:73:94:bc:24:31:ab:7f:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=dbbec61a-3ecb-42cd-aee2-dfdb575b705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:76:dc:f0:6f:2d:d8:69:a7:d6:b6:9c:80: 88:8d:48:8c:eb:dd:1f:88:a0:8e:47:58:24:cc:46: 3b:d7:58:5d:cc:de:6d:7b:7d:a3:42:2d:89:a9:b7: 0d:6c:cd:82:bb:20:fe:49:46:f9:7e:18:7d:17:b0: 52:89:fe:db:94:60:11:c9:51:9b:0f:e3:c3:2e:28: 09:7c:25:40:f8:9d:7c:94:f1:7f:72:7a:0c:8f:7b: fc:6d:a2:11:54:c8:a7:18:d6:ac:80:91:67:72:d8: bb:19:53:4d:79:dc:f6:b1:20:6d:59:35:72:66:d7: 5e:b7:fa:9d:8a:0a:92:b3:77:2f:8c:06:d3:c5:05: 2f:10:5b:87:93:c0:47:cd:11:fd:bc:78:85:c5:81: ba:3e:d7:a4:00:9c:7c:98:eb:d7:e1:26:49:78:36: 32:ad:73:12:51:e9:6c:f1:9a:24:40:79:54:d0:79: 8a:02:5c:77:a0:74:f8:21:f6:e8:8d:18:d6:15:f6: fe:d7:6f:39:a2:63:de:51:a0:e6:96:74:4b:50:c3: 6b:92:ec:65:eb:a4:65:d6:3d:4a:da:94:bd:3f:67: 97:cf:01:93:15:ed:f4:de:a0:0b:80:c3:32:51:d1: 02:88:9f:25:b1:4c:ac:f2:1a:7e:e5:56:82:8b:74: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:63:15:3B:F2:B2:31:E9:C1:A1:5D:4C:8B:A1:D7:F3:3F:23:51:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aec7c878-fcf6-3f4b-9a40-6d20585d55eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bd:e5:97:74:c6:82:dc:aa:98:86:39:da:59:27:c9:ef:aa: e9:0b:9a:a7:59:5b:f0:66:ff:61:c1:83:32:c9:1c:65:2f:10: a9:46:12:1a:69:88:be:a6:01:dd:1f:fa:f9:eb:96:c6:d2:dc: 7a:54:93:84:8a:24:09:20:b4:89:91:c1:2e:ea:50:97:59:ed: 02:60:8b:9d:f7:89:9d:2e:d9:c6:77:d3:e2:a1:2b:17:3c:5b: 7d:ba:d6:01:7d:66:df:0f:52:8a:9c:15:a7:1c:4c:e5:80:4f: e1:6a:d4:0b:a5:4e:dc:ca:07:8c:7b:4b:aa:55:7c:24:a0:d2: cf:f2:24:f7:7c:ac:a6:30:f1:5f:55:24:26:06:b1:6f:b1:3d: c3:8b:fc:48:ef:1c:58:63:1e:41:32:ff:4a:ca:21:19:3f:35: d2:45:7d:87:0a:ad:fd:cb:fd:e3:31:a6:48:64:ce:96:c8:d0: 32:88:3a:22:af:b1:61:26:40:1c:f6:4d:ae:c2:b1:2a:5a:4d: 8c:00:25:43:59:2b:98:7b:01:a4:3a:df:97:03:1b:b2:3d:95: 40:d7:49:f4:01:e3:88:ca:76:8d:4f:7e:df:88:fd:1e:da:19: d5:27:57:3b:20:1a:10:8a:87:a1:2b:4b:20:0f:cd:3d:31:a0: 43:61:48:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ75zlLwkMat//wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZGJiZWM2MWEtM2VjYi00MmNkLWFlZTItZGZkYjU3NWI3MDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1l23PBvLdhpp9a2nICIjUiM690fiKCOR1gk zEY711hdzN5te32jQi2JqbcNbM2CuyD+SUb5fhh9F7BSif7blGARyVGbD+PDLigJ fCVA+J18lPF/cnoMj3v8baIRVMinGNasgJFncti7GVNNedz2sSBtWTVyZtdet/qd igqSs3cvjAbTxQUvEFuHk8BHzRH9vHiFxYG6PtekAJx8mOvX4SZJeDYyrXMSUels 8ZokQHlU0HmKAlx3oHT4IfbojRjWFfb+1285omPeUaDmlnRLUMNrkuxl66Rl1j1K 2pS9P2eXzwGTFe303qALgMMyUdECiJ8lsUys8hp+5VaCi3QBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABjFTvysjHpwaFdTIuh1/M/I1HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVjN2M4NzgtZmNmNi0z ZjRiLTlhNDAtNmQyMDU4NWQ1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy95Zd0xoLcqpiGOdpZJ8nvqukLmqdZW/Bm/2HBgzLJHGUvEKlGEhpp iL6mAd0f+vnrlsbS3HpUk4SKJAkgtImRwS7qUJdZ7QJgi533iZ0u2cZ30+KhKxc8 W3261gF9Zt8PUoqcFaccTOWAT+Fq1AulTtzKB4x7S6pVfCSg0s/yJPd8rKYw8V9V JCYGsW+xPcOL/EjvHFhjHkEy/0rKIRk/NdJFfYcKrf3L/eMxpkhkzpbI0DKIOiKv sWEmQBz2Ta7CsSpaTYwAJUNZK5h7AaQ635cDG7I9lUDXSfQB44jKdo1Pft+I/R7a GdUnVzsgGhCKh6ErSyAPzT0xoENhSLA= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:26 2026 by rpki-client