$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa File: 3d6e6780-8869-3ccf-bba7-a7878578a91e.roa (raw, json) Hash identifier: l58N92oEvQ6s7o1qx1Dsb5Z72GeGatcGcZjpZibBtBs= Subject key identifier: EB:7F:08:DA:C0:A1:4C:49:09:9A:BA:63:F5:AF:94:E8:CD:45:B7:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E7FFA35DBD48F0AE14F440500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa Signing time: Tue 14 Jul 2026 21:00:12 +0000 ROA not before: Tue 14 Jul 2026 21:00:12 +0000 ROA not after: Mon 12 Oct 2026 21:00:12 +0000 asID: 7029 IP address blocks: 75.117.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:fa:35:db:d4:8f:0a:e1:4f:44:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 14 21:00:12 2026 GMT Not After : Oct 12 21:00:12 2026 GMT Subject: CN=3b71ea1f-033d-40b7-8ccc-d848d864ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cc:bc:64:29:7a:20:9a:b2:b3:f3:b2:bd:74: 0f:7c:a6:0d:e1:59:6f:e4:43:21:9f:13:58:20:5b: e4:cb:29:2e:06:4f:09:c8:ba:8d:ca:29:0d:47:16: 66:2a:c0:16:69:ef:79:dd:5f:1f:37:99:fd:96:24: a7:55:96:5a:d4:b5:c9:85:4c:2e:3f:2b:8a:39:cf: 8d:b1:54:39:60:aa:f0:20:9f:00:0f:a1:f3:0f:97: 1c:1e:1e:f1:05:64:39:f4:84:b3:81:4f:4e:4b:5b: f0:29:33:69:9a:ba:20:0a:cd:bb:71:e7:62:03:cd: 83:f7:a2:7c:4b:44:40:15:d4:cb:9e:12:a0:3d:f4: 6e:ae:c3:40:e1:14:d2:a3:91:4c:21:ae:68:06:88: 1b:7f:fa:af:d3:aa:c4:36:44:07:63:64:46:87:02: 44:74:31:4b:98:f2:c9:8d:bd:82:de:88:5a:7a:91: 96:2a:d6:28:73:a8:f8:2d:18:5d:10:3d:80:9b:41: 95:62:3f:46:9f:06:c2:bc:f0:bb:6a:b4:97:0a:b8: f3:f1:6a:c6:ba:94:32:7b:73:97:0b:5a:55:9e:f2: 4f:c4:c7:35:73:a8:33:ee:18:90:93:2f:bd:b2:66: bf:03:39:3f:6e:4c:b5:36:09:21:bb:5f:fd:a1:de: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:08:DA:C0:A1:4C:49:09:9A:BA:63:F5:AF:94:E8:CD:45:B7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2b:17:10:4c:3c:4a:33:8e:17:0b:33:9d:d0:ad:a9:e6:b7: 65:d6:0c:3c:01:b0:e2:07:3c:b0:10:79:27:1f:3c:ee:9a:40: 02:b2:3c:d8:91:b9:d2:c0:6b:c9:32:25:5b:47:20:a0:46:cd: 3a:da:92:71:ce:1b:c9:cf:75:2b:f1:71:7e:df:7c:41:a9:be: 06:5e:dc:31:6f:e6:a0:61:1a:f0:5c:fb:40:91:13:63:a0:90: 4e:92:94:90:48:e3:e2:49:09:03:99:36:46:59:b9:58:ba:af: fa:9e:d6:74:74:86:71:c0:56:9e:17:ef:6d:66:44:9b:6e:27: c7:b1:08:23:94:02:aa:ba:dc:72:52:26:f4:78:b3:f4:43:8f: 12:6a:b8:ee:f1:d4:ab:a6:e5:20:47:2e:b7:6f:a8:02:ac:98: 43:08:a7:ef:38:0e:29:2b:bc:64:5b:cf:7e:9f:2e:c4:3e:03: 30:3f:f7:da:3c:56:bd:92:5a:61:73:56:29:f7:1d:45:8c:5e: a4:b4:96:2c:b4:9c:aa:2a:56:ae:fc:f5:4a:8b:5a:53:2f:36: d5:38:73:37:96:24:08:59:55:6f:d5:2d:bd:56:48:36:1a:e0: 76:f9:ab:48:83:a2:34:8b:22:b8:57:3c:cd:ac:a9:66:8d:8e: 26:64:29:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/+jXb1I8K4U9EBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcxNDIxMDAxMloXDTI2MTAxMjIxMDAxMlowLzEtMCsGA1UEAxMk M2I3MWVhMWYtMDMzZC00MGI3LThjY2MtZDg0OGQ4NjRlZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMy8ZCl6IJqys/OyvXQPfKYN4Vlv5EMhnxNY IFvkyykuBk8JyLqNyikNRxZmKsAWae953V8fN5n9liSnVZZa1LXJhUwuPyuKOc+N sVQ5YKrwIJ8AD6HzD5ccHh7xBWQ59ISzgU9OS1vwKTNpmrogCs27cediA82D96J8 S0RAFdTLnhKgPfRursNA4RTSo5FMIa5oBogbf/qv06rENkQHY2RGhwJEdDFLmPLJ jb2C3ohaepGWKtYoc6j4LRhdED2Am0GVYj9GnwbCvPC7arSXCrjz8WrGupQye3OX C1pVnvJPxMc1c6gz7hiQky+9sma/Azk/bky1Ngkhu1/9od6b8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt/CNrAoUxJCZq6Y/WvlOjNRbfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q2ZTY3ODAtODg2OS0z Y2NmLWJiYTctYTc4Nzg1NzhhOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgrFxBMPEozjhcLM53Qranmt2XWDDwBsOIHPLAQeScfPO6aQAKyPNiR udLAa8kyJVtHIKBGzTraknHOG8nPdSvxcX7ffEGpvgZe3DFv5qBhGvBc+0CRE2Og kE6SlJBI4+JJCQOZNkZZuVi6r/qe1nR0hnHAVp4X721mRJtuJ8exCCOUAqq63HJS JvR4s/RDjxJquO7x1Kum5SBHLrdvqAKsmEMIp+84DikrvGRbz36fLsQ+AzA/99o8 Vr2SWmFzVin3HUWMXqS0liy0nKoqVq789UqLWlMvNtU4czeWJAhZVW/VLb1WSDYa 4Hb5q0iDojSLIrhXPM2sqWaNjiZkKWY= -----END CERTIFICATE-----Generated at Fri Jul 24 15:11:12 2026 by rpki-client