$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa File: 3d6e6780-8869-3ccf-bba7-a7878578a91e.roa (raw, json) Hash identifier: j3WGnbyMHOyPWo4kSOSsl6pM5F7LifT4dbN67c8XRVY= Subject key identifier: C1:AC:29:C8:86:AD:B9:9E:99:9C:18:E2:8D:63:3E:E0:AD:FB:A5:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D9FB56E58FAD56DD8160F4800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 7029 IP address blocks: 75.117.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:6e:58:fa:d5:6d:d8:16:0f:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=8ebdff87-bb48-4540-9c60-c8d3029364dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:74:fb:22:ff:84:a1:36:34:fd:f9:23:14:43: ac:3b:0f:bc:5b:7d:e2:9a:42:b2:b4:b0:20:e7:47: 32:04:44:99:58:56:aa:52:25:3f:d7:05:9d:97:7d: 6f:32:7e:77:1e:78:20:fc:48:95:70:9b:a8:bd:fe: 1c:22:0b:81:8e:cf:50:e4:1a:d7:f3:49:03:7c:a7: b0:16:98:3d:ac:f9:04:57:39:02:81:71:7a:1a:7b: 8a:8e:bc:95:e9:ed:36:7f:9c:b6:30:74:c3:34:24: 6d:4f:84:ed:0a:99:43:b6:87:54:f1:07:4a:ba:27: f6:88:c5:2e:d7:a7:e8:23:e0:a5:d4:b9:5c:68:7f: 21:a9:17:ed:07:07:91:90:64:f9:17:41:b9:50:f5: 51:6b:b6:df:8a:90:bd:56:b8:2e:d4:71:9d:bb:05: 10:34:10:39:35:3a:af:e1:a6:8c:c1:62:ef:1b:04: fd:21:ae:4b:7b:19:0a:62:7d:45:42:9f:f3:07:cc: 28:bc:f4:1d:87:6f:24:6d:b2:28:5b:31:c7:46:b7: d0:17:46:f9:2f:38:f7:e5:ee:ff:df:1f:d6:94:17: 87:9b:73:c4:60:d7:d5:b0:d2:73:86:b7:ce:3f:8e: d6:44:d7:9f:dd:d4:7b:e2:4d:4a:be:66:6f:08:3d: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:29:C8:86:AD:B9:9E:99:9C:18:E2:8D:63:3E:E0:AD:FB:A5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d6e6780-8869-3ccf-bba7-a7878578a91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:63:5e:74:69:e0:93:02:51:58:08:71:46:2a:22:4e:fe:43: 79:f7:e4:07:07:2a:21:6b:2f:9c:3a:09:0b:84:b1:3d:fe:d1: 55:13:b7:e1:4d:1e:b6:26:10:b5:5b:bc:28:41:d8:ba:47:c6: ee:d0:59:e9:90:d3:bc:11:47:65:24:b2:60:17:d5:dc:07:40: ca:5c:ed:20:5a:51:26:3b:ca:15:37:2a:8c:8d:4a:fa:f4:d0: b0:a3:9c:29:f2:6c:1d:bc:98:83:6a:d4:f2:8a:f3:29:83:97: a3:57:77:03:41:11:90:a5:a0:e4:10:cc:ba:64:82:b0:65:cd: 05:5e:6e:5e:9b:81:ed:56:19:97:a2:1d:1c:18:31:5f:75:65: fd:2a:4b:cd:d4:56:51:4a:7c:94:14:07:84:d2:64:49:5f:01: d8:1d:f1:88:2f:45:2b:be:76:53:5f:24:8d:c9:ea:6d:1b:25: 88:18:a4:86:b5:eb:22:95:3d:47:54:e3:d0:30:6c:03:4d:3e: ac:ac:77:50:d2:45:58:e3:99:b1:48:3e:1d:27:9a:78:5b:df: 0a:f9:84:05:f2:66:0f:6d:71:0a:5c:6a:cc:22:a4:04:e3:31: 9a:31:18:7c:13:2f:59:60:7c:36:de:f5:8f:d3:bb:ec:99:75: 62:7e:ef:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftW5Y+tVt2BYPSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk OGViZGZmODctYmI0OC00NTQwLTljNjAtYzhkMzAyOTM2NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHT7Iv+EoTY0/fkjFEOsOw+8W33imkKytLAg 50cyBESZWFaqUiU/1wWdl31vMn53Hngg/EiVcJuovf4cIguBjs9Q5BrX80kDfKew Fpg9rPkEVzkCgXF6GnuKjryV6e02f5y2MHTDNCRtT4TtCplDtodU8QdKuif2iMUu 16foI+Cl1LlcaH8hqRftBweRkGT5F0G5UPVRa7bfipC9Vrgu1HGduwUQNBA5NTqv 4aaMwWLvGwT9Ia5LexkKYn1FQp/zB8wovPQdh28kbbIoWzHHRrfQF0b5Lzj35e7/ 3x/WlBeHm3PEYNfVsNJzhrfOP47WRNef3dR74k1KvmZvCD0vVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGsKciGrbmemZwY4o1jPuCt+6XrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q2ZTY3ODAtODg2OS0z Y2NmLWJiYTctYTc4Nzg1NzhhOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5jXnRp4JMCUVgIcUYqIk7+Q3n35AcHKiFrL5w6CQuEsT3+0VUTt+FN HrYmELVbvChB2LpHxu7QWemQ07wRR2UksmAX1dwHQMpc7SBaUSY7yhU3KoyNSvr0 0LCjnCnybB28mINq1PKK8ymDl6NXdwNBEZCloOQQzLpkgrBlzQVebl6bge1WGZei HRwYMV91Zf0qS83UVlFKfJQUB4TSZElfAdgd8YgvRSu+dlNfJI3J6m0bJYgYpIa1 6yKVPUdU49AwbANNPqysd1DSRVjjmbFIPh0nmnhb3wr5hAXyZg9tcQpcaswipATj MZoxGHwTL1lgfDbe9Y/Tu+yZdWJ+79Y= -----END CERTIFICATE-----Generated at Wed May 13 10:55:04 2026 by rpki-client