$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa File: 4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa (raw, json) Hash identifier: OQTqyHwiEixKJ4Vw8gIvQruN40CWNIpFmbSknqjd4Cw= Subject key identifier: 13:13:E9:EE:96:B7:F4:85:55:91:6D:02:26:EB:82:EF:0D:94:63:48 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300AA74944479BBB77EB49B0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40852 IP address blocks: 75.77.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:a7:49:44:47:9b:bb:77:eb:49:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=1e5530a5-23ee-4843-8bcf-f771e4d45744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:0a:fd:09:f7:b2:11:ff:64:be:65:5c:da: 29:8b:77:4b:36:80:d3:c6:d7:ad:1c:68:7d:1f:53: db:dc:b9:e2:b1:d4:cb:e0:53:86:6a:52:e9:bd:a6: ef:dc:6f:ff:6e:3c:43:f6:17:ec:64:85:7c:2a:fe: 15:7b:d4:8c:1b:d3:24:ba:b0:ea:23:45:5c:c3:3d: 5f:20:21:58:65:33:0f:ff:4d:e7:3d:eb:75:bb:6c: 3e:67:a8:17:98:a9:d4:3a:2c:69:d9:8c:b2:72:08: 34:01:80:2a:8b:4a:c8:bb:5d:f2:d7:84:92:f4:af: 72:81:c6:05:a2:07:de:45:2c:55:96:5e:16:06:ae: 35:cc:0e:cf:c5:15:00:bb:17:a6:6d:e3:0a:e4:87: 09:c5:21:9d:e1:c8:87:8c:ea:83:17:ae:33:77:6d: 0b:16:f1:e8:d3:d8:74:4c:9b:9e:6b:73:59:38:96: 50:2d:d6:90:28:5d:e1:7b:25:cb:a6:80:e2:81:a0: de:0a:13:49:42:b6:9e:78:17:f3:f3:4d:6e:ca:db: 45:aa:32:8b:a1:12:74:ea:e7:68:f3:16:3c:73:5d: df:33:ac:30:20:57:05:2e:b0:bc:dd:25:4d:7a:a4: 30:85:48:cb:9e:46:24:fc:c8:e5:01:06:0d:50:72: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:13:E9:EE:96:B7:F4:85:55:91:6D:02:26:EB:82:EF:0D:94:63:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a9b9b5d-f359-3547-85d9-3ee904cf5903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.77.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4c:7b:3f:4d:9f:17:b8:70:bd:91:41:a3:76:be:85:cd:bf: 44:88:ce:8f:b8:b2:5f:c9:57:8a:80:4f:7f:37:26:35:0e:56: 8a:4d:2d:df:d2:5a:77:69:bf:f6:45:65:89:c3:3a:61:c4:df: f4:91:3c:52:60:0a:e7:0c:37:1d:c4:20:90:60:b1:97:8b:45: a1:bf:40:c8:90:0b:95:92:0a:94:77:ba:df:8c:36:7b:10:d9: 75:06:cb:b2:69:8c:09:c6:59:e0:fe:22:5d:1d:ef:6a:0f:b2: 77:61:f3:b3:09:d0:11:83:07:2a:7a:a9:2a:09:34:fb:27:5e: 30:6d:9a:a4:00:0e:25:6c:dc:8d:99:67:72:6b:c8:fa:ec:9a: b2:3c:74:dd:aa:8a:e3:91:4a:6b:6f:8c:e8:c9:6d:5c:a4:44: 85:7d:ff:3b:96:7c:c6:99:e4:37:17:dd:1c:f2:47:75:e9:82: 55:4c:ee:d0:9b:21:ea:ea:bb:e8:ee:10:dd:18:90:6e:2f:cf: 60:5b:40:ab:ec:33:99:72:42:7c:16:7a:36:ca:2e:0c:b4:2b: fc:de:bc:cb:1e:11:57:79:fa:aa:18:4d:73:76:e9:47:11:af: d2:5f:12:f7:e3:d1:ee:f8:dd:16:63:4e:4c:07:7d:8c:37:93: ac:e6:c9:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCqdJREebu3frSbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MWU1NTMwYTUtMjNlZS00ODQzLThiY2YtZjc3MWU0ZDQ1NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYK/Qn3shH/ZL5lXNopi3dLNoDTxtetHGh9 H1Pb3LnisdTL4FOGalLpvabv3G//bjxD9hfsZIV8Kv4Ve9SMG9MkurDqI0Vcwz1f ICFYZTMP/03nPet1u2w+Z6gXmKnUOixp2Yyycgg0AYAqi0rIu13y14SS9K9ygcYF ogfeRSxVll4WBq41zA7PxRUAuxembeMK5IcJxSGd4ciHjOqDF64zd20LFvHo09h0 TJuea3NZOJZQLdaQKF3heyXLpoDigaDeChNJQraeeBfz801uyttFqjKLoRJ06udo 8xY8c13fM6wwIFcFLrC83SVNeqQwhUjLnkYk/MjlAQYNUHL4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMT6e6Wt/SFVZFtAibrgu8NlGNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGE5YjliNWQtZjM1OS0z NTQ3LTg1ZDktM2VlOTA0Y2Y1OTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS039MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlMez9Nnxe4cL2RQaN2voXNv0SIzo+4sl/JV4qAT383JjUOVopNLd/S Wndpv/ZFZYnDOmHE3/SRPFJgCucMNx3EIJBgsZeLRaG/QMiQC5WSCpR3ut+MNnsQ 2XUGy7JpjAnGWeD+Il0d72oPsndh87MJ0BGDByp6qSoJNPsnXjBtmqQADiVs3I2Z Z3JryPrsmrI8dN2qiuORSmtvjOjJbVykRIV9/zuWfMaZ5DcX3RzyR3XpglVM7tCb Ierqu+juEN0YkG4vz2BbQKvsM5lyQnwWejbKLgy0K/zevMseEVd5+qoYTXN26UcR r9JfEvfj0e743RZjTkwHfYw3k6zmyeg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:40 2026 by rpki-client