$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa File: cd22def7-9d41-38f8-854f-6c6e8738ef35.roa (raw, json) Hash identifier: HarOKmhXDwrOkH4WNcSxqjkXuUOlHeQMuqmgDNaX/WQ= Subject key identifier: 7C:C9:77:33:2D:3F:38:72:62:4B:14:71:B9:6E:7B:39:38:E8:B9:34 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D55BCB6B9CA16DC5492A1DF40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 7029 IP address blocks: 75.117.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b6:b9:ca:16:dc:54:92:a1:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8f3327e9-170a-4bb8-b773-2a113d0613dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:ae:a5:53:8c:28:b6:6e:55:d9:5a:13:7d: 22:82:a7:db:44:0c:2b:ec:02:e6:71:48:4e:3f:40: a5:59:eb:30:4d:96:76:d5:15:ea:d7:a3:f6:47:14: 1b:73:51:b7:02:d2:39:87:90:d3:47:1b:0f:ec:0c: a1:99:56:3b:fb:4b:61:a5:1e:f5:5c:28:23:91:62: 73:db:69:2d:57:e9:f0:a4:fc:53:e1:a7:ed:9d:1b: 13:45:a8:25:11:0a:0d:ee:aa:21:d1:2f:b2:da:3e: 11:fa:1c:c6:6c:00:9e:88:61:1b:45:e9:ac:4f:a2: 60:7f:a8:a3:7d:54:cd:b5:e3:71:91:cf:cd:2d:c4: 56:fe:8a:96:21:df:31:9c:23:fd:82:b5:56:4f:5c: 9c:c8:14:61:e9:1b:7a:77:52:53:ac:71:f5:a5:3f: 9d:f3:9e:ba:7f:bf:a7:73:77:87:62:d0:40:a8:8e: 21:49:39:28:1e:80:70:5d:b6:77:7b:9e:7a:b0:51: b5:9b:a2:42:37:4a:68:16:44:0b:68:57:57:74:ec: 1c:00:81:42:76:6d:f1:91:1e:50:d6:79:ef:9b:f8: d5:c8:f4:31:59:dc:ae:24:d9:b1:4e:ed:81:ff:c2: 73:9f:9c:4d:9a:e1:e1:56:f6:09:ad:38:7f:6b:39: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C9:77:33:2D:3F:38:72:62:4B:14:71:B9:6E:7B:39:38:E8:B9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd22def7-9d41-38f8-854f-6c6e8738ef35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4f:25:b0:e1:e4:aa:3b:e7:39:d2:b1:fe:7c:2c:d4:1b:e8: 02:37:89:1b:32:80:95:5b:ee:c0:2f:ae:c7:f2:2e:74:e2:67: 73:19:7d:97:13:b2:15:38:de:e4:bd:11:ab:83:13:f5:a2:f7: 0c:5a:c6:12:ee:af:e3:34:41:6f:48:2e:a4:1f:a5:b5:f7:ff: 57:74:72:20:c0:20:f2:62:f1:f3:7b:ed:81:e9:38:2d:77:c1: 6f:b3:f6:b4:d0:54:43:8f:fd:30:68:e6:2a:32:3c:29:2c:15: 3d:bf:b7:c7:a2:1a:f0:79:ba:6c:cb:df:4a:a1:a1:3e:6f:4d: 3e:51:15:d7:9c:65:4c:15:14:52:25:37:c5:a1:9f:7e:69:01: cc:1b:bd:d1:3e:5b:22:64:ae:9b:f0:d5:3e:ad:5c:4a:81:c1: 34:fb:3a:63:65:7a:4b:b1:a0:35:06:cc:87:9e:70:b3:8f:a3: 33:21:f1:06:2d:05:cf:ce:b6:29:f6:90:28:a5:93:6b:ed:fe: 6b:38:f4:95:67:87:d3:23:69:7f:ad:4c:d8:59:fb:6f:a7:4b: 83:de:57:c0:12:94:1b:0b:00:65:aa:3c:c0:d1:67:9c:4b:b5: e9:85:fc:b0:97:12:46:35:13:8f:d3:ce:85:82:22:51:b5:24: 54:42:4b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLa5yhbcVJKh30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGYzMzI3ZTktMTcwYS00YmI4LWI3NzMtMmExMTNkMDYxM2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5+upVOMKLZuVdlaE30igqfbRAwr7ALmcUhO P0ClWeswTZZ21RXq16P2RxQbc1G3AtI5h5DTRxsP7AyhmVY7+0thpR71XCgjkWJz 22ktV+nwpPxT4aftnRsTRaglEQoN7qoh0S+y2j4R+hzGbACeiGEbRemsT6Jgf6ij fVTNteNxkc/NLcRW/oqWId8xnCP9grVWT1ycyBRh6Rt6d1JTrHH1pT+d8566f7+n c3eHYtBAqI4hSTkoHoBwXbZ3e556sFG1m6JCN0poFkQLaFdXdOwcAIFCdm3xkR5Q 1nnvm/jVyPQxWdyuJNmxTu2B/8Jzn5xNmuHhVvYJrTh/azk20wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzJdzMtPzhyYksUcbluezk46Lk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2QyMmRlZjctOWQ0MS0z OGY4LTg1NGYtNmM2ZTg3MzhlZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3VXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFPJbDh5Ko75znSsf58LNQb6AI3iRsygJVb7sAvrsfyLnTiZ3MZfZcT shU43uS9EauDE/Wi9wxaxhLur+M0QW9ILqQfpbX3/1d0ciDAIPJi8fN77YHpOC13 wW+z9rTQVEOP/TBo5ioyPCksFT2/t8eiGvB5umzL30qhoT5vTT5RFdecZUwVFFIl N8Whn35pAcwbvdE+WyJkrpvw1T6tXEqBwTT7OmNlekuxoDUGzIeecLOPozMh8QYt Bc/Otin2kCilk2vt/ms49JVnh9MjaX+tTNhZ+2+nS4PeV8ASlBsLAGWqPMDRZ5xL temF/LCXEkY1E4/TzoWCIlG1JFRCSzc= -----END CERTIFICATE-----Generated at Mon Apr 13 11:41:50 2026 by rpki-client