$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa File: db864009-5792-3ef2-ae28-c97e5430da9a.roa (raw, json) Hash identifier: yKcufB56T/kMUUwW+bFL3CllBla57dkpgEsBMWedEzc= Subject key identifier: EE:11:73:62:E0:24:9A:74:EA:77:D3:67:8D:28:4E:C7:1A:E6:7D:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D5243BE7F7A8C792FE3F117C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7029 IP address blocks: 75.91.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:be:7f:7a:8c:79:2f:e3:f1:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=d7d35bb4-e7d6-4703-995e-3e21656004bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:67:67:68:ff:33:fa:14:39:02:69:e9:b6: 27:c0:30:cd:2d:f8:8a:43:a1:e4:99:c8:5e:77:8a: 8d:da:cb:47:e1:d2:c6:92:60:a8:66:06:dc:19:ad: 61:d7:e7:91:a4:2f:3b:4b:76:22:eb:62:7b:4d:73: 15:8f:42:2d:91:a4:d1:12:3c:d8:03:4a:d1:46:d4: f9:2a:1e:57:e0:ac:e3:46:5c:d0:b7:3f:77:61:ba: c8:2c:20:65:1f:0f:42:16:7c:31:e9:76:f4:a0:e0: b8:6f:f2:48:68:bd:3d:bc:6a:d7:e8:2e:d9:d2:c4: 80:2b:83:3e:10:d6:5d:34:64:b2:78:91:a6:df:ea: 26:15:2f:a8:9d:fb:fe:0c:b7:48:c6:4d:12:47:73: 83:6f:20:4a:eb:aa:31:00:7d:af:ce:c3:14:4f:76: d9:5e:df:17:b0:ba:1e:c8:1d:e3:84:96:f2:78:f0: 4b:30:9a:c1:b7:00:89:4c:f7:e9:aa:8a:03:05:2a: 04:e9:b7:d7:c6:1f:20:47:ba:c9:60:fc:20:be:a6: 00:33:8c:1c:80:93:cf:ac:85:79:69:4e:6d:fd:34: ca:c7:47:bb:ce:5e:5e:ea:03:fa:63:de:dc:51:50: c0:20:cf:aa:82:d8:9e:98:1a:be:70:15:98:d7:5d: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:11:73:62:E0:24:9A:74:EA:77:D3:67:8D:28:4E:C7:1A:E6:7D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db864009-5792-3ef2-ae28-c97e5430da9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f0:19:45:c5:3f:fe:50:f3:0e:52:f4:17:7c:73:bf:d2:de: e7:2c:3c:f5:bc:c1:b5:74:02:36:6a:c2:e3:94:77:54:52:f0: 7e:03:52:fb:79:1e:d0:fd:eb:9a:9b:8b:ef:f1:5a:79:1e:5b: 6f:fb:7b:43:c7:8d:41:bd:6b:c2:3d:72:5b:e7:f5:26:55:2a: f2:03:81:b6:f2:0b:a2:80:42:c3:c1:67:0f:c0:26:26:68:5b: ae:ba:7d:84:72:51:8b:bb:e1:1f:b2:40:95:5b:05:00:26:54: e6:e3:36:d4:17:3e:ea:92:d0:56:c1:38:c8:46:4b:59:d8:9b: 63:cd:aa:80:d3:e3:eb:01:23:a7:4f:98:ee:7b:8c:6b:31:59: c2:6d:d0:f4:fc:1a:65:e8:a2:9d:a9:53:7a:b6:ae:de:26:c4: 46:b2:be:47:12:28:dc:92:2a:f9:7a:91:3c:c7:b9:27:df:f7: ed:68:e8:6e:2f:57:c5:5a:31:96:ee:92:8f:65:1c:d4:8a:c5: 83:ed:e5:4f:f1:bc:68:fa:3a:38:9f:e4:1a:5b:8c:19:7d:00: 94:ec:64:c0:e7:c7:cb:f7:bc:a4:a2:1e:fe:fe:50:00:18:7a: 12:7a:6a:62:57:37:51:35:b3:b2:7b:a3:83:8e:70:e8:8c:6b: db:ee:ce:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ75/eox5L+PxF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZDdkMzViYjQtZTdkNi00NzAzLTk5NWUtM2UyMTY1NjAwNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUJnZ2j/M/oUOQJp6bYnwDDNLfiKQ6Hkmche d4qN2stH4dLGkmCoZgbcGa1h1+eRpC87S3Yi62J7TXMVj0ItkaTREjzYA0rRRtT5 Kh5X4KzjRlzQtz93YbrILCBlHw9CFnwx6Xb0oOC4b/JIaL09vGrX6C7Z0sSAK4M+ ENZdNGSyeJGm3+omFS+onfv+DLdIxk0SR3ODbyBK66oxAH2vzsMUT3bZXt8XsLoe yB3jhJbyePBLMJrBtwCJTPfpqooDBSoE6bfXxh8gR7rJYPwgvqYAM4wcgJPPrIV5 aU5t/TTKx0e7zl5e6gP6Y97cUVDAIM+qgtiemBq+cBWY111QDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4Rc2LgJJp06nfTZ40oTsca5n0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI4NjQwMDktNTc5Mi0z ZWYyLWFlMjgtYzk3ZTU0MzBkYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbwGUXFP/5Q8w5S9Bd8c7/S3ucsPPW8wbV0AjZqwuOUd1RS8H4DUvt5 HtD965qbi+/xWnkeW2/7e0PHjUG9a8I9clvn9SZVKvIDgbbyC6KAQsPBZw/AJiZo W666fYRyUYu74R+yQJVbBQAmVObjNtQXPuqS0FbBOMhGS1nYm2PNqoDT4+sBI6dP mO57jGsxWcJt0PT8GmXoop2pU3q2rt4mxEayvkcSKNySKvl6kTzHuSff9+1o6G4v V8VaMZbuko9lHNSKxYPt5U/xvGj6Ojif5BpbjBl9AJTsZMDnx8v3vKSiHv7+UAAY ehJ6amJXN1E1s7J7o4OOcOiMa9vuzl4= -----END CERTIFICATE-----Generated at Mon Apr 13 11:44:26 2026 by rpki-client