$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa File: e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa (raw, json) Hash identifier: xaufR3FtGCkYCM7R/oytotiknPIh3F6uAo2xAvrtFeA= Subject key identifier: 3B:A9:85:A3:36:05:AC:D6:3A:55:0B:89:6F:34:C8:F8:1E:72:F5:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E5FDF672E8903AB49286BE280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 7029 IP address blocks: 75.91.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:67:2e:89:03:ab:49:28:6b:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=2d820118-90bb-47df-ae25-a84d7a1260dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:33:b4:6c:44:13:93:ca:75:d2:5e:6d:99: 2c:45:9c:c8:8b:f2:c1:0a:3e:92:43:fe:d7:05:b3: 9c:31:d7:4d:70:be:b7:88:c5:a3:c8:9a:4b:3f:12: 91:97:62:84:74:29:c2:f6:b5:f7:b5:f3:a7:2d:e9: 42:a1:97:a6:58:69:20:b4:17:07:94:44:5a:6d:41: 68:31:f8:4f:7b:eb:79:20:86:8f:66:ea:35:e1:75: bf:87:48:0a:f4:21:51:17:18:14:96:33:e8:95:e5: e9:70:90:08:28:ee:0b:3c:5f:6a:57:e2:88:ae:4f: 5b:81:16:ec:74:8d:59:35:c8:16:6d:53:db:4e:ac: f6:71:82:19:ec:a6:d5:cc:bf:8b:7b:51:b8:3b:85: 53:1a:7c:78:74:e0:26:bb:03:71:42:b4:7d:a6:8d: 74:4f:cf:05:b9:b0:9c:7e:49:74:2a:98:40:2c:b3: 70:82:56:e5:6b:64:a4:9d:5b:9c:09:f8:bf:b4:e3: 4e:ab:65:29:ee:2b:9c:5f:38:72:4a:49:d0:af:e2: b1:ba:76:d1:c8:24:f5:13:85:f5:46:75:14:cd:4b: a9:32:c6:40:dd:e2:d7:2e:53:61:b3:50:eb:04:77: 07:26:6d:59:f1:ec:6f:89:fa:9b:fe:28:a6:bd:30: 2b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:85:A3:36:05:AC:D6:3A:55:0B:89:6F:34:C8:F8:1E:72:F5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8b91f5d-d63f-3fe1-b5d0-a6b25d37f29c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e0:a4:a2:73:e1:44:01:9c:f2:31:73:50:bb:c7:0f:01:12: b4:80:1e:c4:5b:09:8a:f8:cb:b7:ba:cb:d8:09:99:85:e1:fb: d3:95:b0:f2:78:ef:91:0b:61:4f:7e:ad:43:3c:8d:a3:20:a0: ef:87:d8:62:d4:11:47:b1:6d:18:4e:0f:d3:db:96:39:f7:48: d2:4f:10:fa:3a:2f:8a:7b:b7:71:c3:e4:fb:13:af:93:36:2a: aa:ab:5d:4b:b6:f6:1c:51:4c:81:b6:97:9c:5f:89:e7:d5:ce: a0:66:11:20:e1:3e:e4:3a:98:0a:3f:cc:50:3b:aa:f9:28:f5: 53:6c:0e:06:4a:ce:9c:02:97:38:b4:6d:05:e0:58:3a:9b:90: 76:ed:4b:54:95:fb:f2:ae:cb:24:72:2f:23:5c:88:16:e5:3d: a2:f2:52:a0:35:22:b2:18:9e:1e:c3:b1:df:78:71:1c:d9:48: 04:a0:b7:06:54:c1:39:1c:87:74:6b:d3:34:7e:aa:53:07:80: 72:dd:09:a3:96:3c:98:7d:8f:a3:6a:48:fe:19:a9:2e:e9:c3: 60:66:77:65:36:58:16:ac:9c:42:b2:9e:76:91:6b:da:c9:a8: 12:8f:95:a1:9f:9e:a1:6d:bc:20:63:be:33:1f:f3:db:15:0b: da:2f:d6:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32cuiQOrSShr4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MmQ4MjAxMTgtOTBiYi00N2RmLWFlMjUtYTg0ZDdhMTI2MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwncztGxEE5PKddJebZksRZzIi/LBCj6SQ/7X BbOcMddNcL63iMWjyJpLPxKRl2KEdCnC9rX3tfOnLelCoZemWGkgtBcHlERabUFo MfhPe+t5IIaPZuo14XW/h0gK9CFRFxgUljPoleXpcJAIKO4LPF9qV+KIrk9bgRbs dI1ZNcgWbVPbTqz2cYIZ7KbVzL+Le1G4O4VTGnx4dOAmuwNxQrR9po10T88FubCc fkl0KphALLNwglbla2SknVucCfi/tONOq2Up7iucXzhySknQr+KxunbRyCT1E4X1 RnUUzUupMsZA3eLXLlNhs1DrBHcHJm1Z8exvifqb/iimvTAroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuphaM2BazWOlULiW80yPgecvVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThiOTFmNWQtZDYzZi0z ZmUxLWI1ZDAtYTZiMjVkMzdmMjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS1v4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7gpKJz4UQBnPIxc1C7xw8BErSAHsRbCYr4y7e6y9gJmYXh+9OVsPJ4 75ELYU9+rUM8jaMgoO+H2GLUEUexbRhOD9Pbljn3SNJPEPo6L4p7t3HD5PsTr5M2 KqqrXUu29hxRTIG2l5xfiefVzqBmESDhPuQ6mAo/zFA7qvko9VNsDgZKzpwClzi0 bQXgWDqbkHbtS1SV+/KuyyRyLyNciBblPaLyUqA1IrIYnh7Dsd94cRzZSASgtwZU wTkch3Rr0zR+qlMHgHLdCaOWPJh9j6NqSP4ZqS7pw2Bmd2U2WBasnEKynnaRa9rJ qBKPlaGfnqFtvCBjvjMf89sVC9ov1kY= -----END CERTIFICATE-----Generated at Mon Jul 13 07:21:07 2026 by rpki-client