$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa File: 17e2838b-017a-3e21-8f71-e3de49aaf056.roa (raw, json) Hash identifier: /1NaIeRWKfEEicmkfc8oMf0G/UmNxDbUKMD+mX1EUeY= Subject key identifier: 78:E5:3A:50:4C:0B:AC:32:C5:75:DA:8C:1C:1A:88:89:41:C8:91:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A6B38957216E5839D4F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 75.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:6b:38:95:72:16:e5:83:9d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=15cc942d-d091-4a30-a4b0-8ce453672c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:a0:f1:a5:e7:0e:a5:c7:b5:d0:08:8c:7a: 33:b2:d9:9e:2f:aa:9f:bb:8e:cd:4e:04:c3:f2:cb: cc:20:71:e1:39:55:ed:ec:bc:13:f5:56:40:89:58: 93:b3:c8:f4:f3:84:9c:74:0e:f5:8e:13:6c:24:2a: bb:e5:25:7f:d9:95:9a:cb:a9:fb:fc:30:90:56:dc: 5f:dd:2f:aa:53:03:9e:9b:b2:65:0a:b4:ea:8a:df: 3b:a3:b5:9a:b9:68:6a:e3:8d:47:b6:f2:04:aa:7b: 8c:0f:f4:be:99:bb:5a:8b:96:16:c3:80:a7:d2:20: 46:e3:02:61:99:9b:b2:1c:58:a4:35:b9:70:cc:33: 8f:f2:4f:3a:87:08:b4:7a:f2:e2:c2:46:01:82:01: f2:de:fd:31:9d:bd:26:28:77:91:f1:cd:75:3c:bf: 63:55:57:40:50:82:1d:3e:d0:0f:ac:dd:43:4c:f3: c8:48:6d:36:e6:66:ac:af:f6:d1:a6:76:f6:49:e5: f8:ca:c6:92:fe:bc:78:e9:c9:5b:0b:e4:1e:54:d7: b5:f5:e2:e6:f5:8d:0e:61:46:31:ce:95:98:49:16: b8:ad:c7:da:a7:98:46:0c:8a:6e:05:31:04:96:53: ac:3e:0c:72:bd:a9:11:31:3f:1c:48:e6:f7:55:d1: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E5:3A:50:4C:0B:AC:32:C5:75:DA:8C:1C:1A:88:89:41:C8:91:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8f:24:98:57:ee:66:62:74:b4:b3:ec:f2:33:e6:80:a4:f1: f3:73:c7:7d:b1:94:43:a4:17:be:76:24:8d:04:2f:36:0a:5c: 12:c2:71:51:d2:96:35:74:ab:76:61:86:3b:ad:5e:c6:34:2e: d4:4f:e4:02:ec:53:b8:96:ec:48:f5:54:ce:88:2b:e4:5a:d3: 9e:04:44:c6:97:49:45:48:d1:c5:04:4a:5a:6a:63:f7:ee:46: 80:e7:c8:06:76:d0:4b:9e:ca:c7:fc:3b:1d:2f:9e:99:2e:8d: aa:1e:63:cf:ca:d2:f0:cd:aa:33:c0:01:e0:e3:c7:f8:51:8a: 90:07:0b:9c:f4:58:1e:46:59:31:09:44:49:78:54:4c:42:15: ee:8b:8f:62:40:e6:90:5f:4e:3e:08:a1:13:f4:25:3a:78:6f: b8:ce:45:2f:a8:c3:ab:8d:0b:51:87:87:16:a4:e0:0d:5a:0f: 0f:ad:aa:8d:d2:1c:b4:cd:12:be:f8:8f:59:17:95:65:f8:9a: b6:4f:e9:d2:18:88:df:9c:30:64:e4:f0:c5:0c:6b:ac:f8:d9: 61:df:76:3d:d8:b9:ac:0c:aa:82:f1:bf:f6:87:af:04:72:7c: 1a:77:bb:fa:6f:5e:77:80:ee:c8:16:f1:45:02:f9:45:61:07: a3:bb:90:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCms4lXIW5YOdT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTVjYzk0MmQtZDA5MS00YTMwLWE0YjAtOGNlNDUzNjcyYzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT6g8aXnDqXHtdAIjHozstmeL6qfu47NTgTD 8svMIHHhOVXt7LwT9VZAiViTs8j084ScdA71jhNsJCq75SV/2ZWay6n7/DCQVtxf 3S+qUwOem7JlCrTqit87o7WauWhq441HtvIEqnuMD/S+mbtai5YWw4Cn0iBG4wJh mZuyHFikNblwzDOP8k86hwi0evLiwkYBggHy3v0xnb0mKHeR8c11PL9jVVdAUIId PtAPrN1DTPPISG025masr/bRpnb2SeX4ysaS/rx46clbC+QeVNe19eLm9Y0OYUYx zpWYSRa4rcfap5hGDIpuBTEEllOsPgxyvakRMT8cSOb3VdE86wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjlOlBMC6wyxXXajBwaiIlByJGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMjgzOGItMDE3YS0z ZTIxLThmNzEtZTNkZTQ5YWFmMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKPJJhX7mZidLSz7PIz5oCk8fNzx32xlEOkF752JI0ELzYKXBLCcVHS ljV0q3ZhhjutXsY0LtRP5ALsU7iW7Ej1VM6IK+Ra054ERMaXSUVI0cUESlpqY/fu RoDnyAZ20Eueysf8Ox0vnpkujaoeY8/K0vDNqjPAAeDjx/hRipAHC5z0WB5GWTEJ REl4VExCFe6Lj2JA5pBfTj4IoRP0JTp4b7jORS+ow6uNC1GHhxak4A1aDw+tqo3S HLTNEr74j1kXlWX4mrZP6dIYiN+cMGTk8MUMa6z42WHfdj3YuawMqoLxv/aHrwRy fBp3u/pvXneA7sgW8UUC+UVhB6O7kKM= -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:21 2026 by rpki-client