$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa File: 75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa (raw, json) Hash identifier: HKs/LZStDlsWKXMCfRsTlUpdunPlXyDfdL6Y4E7CbCI= Subject key identifier: 3D:61:F9:2A:B0:4C:89:DE:32:C0:37:DC:25:BB:56:10:0A:C1:0C:B7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D47C508C2CEFF0F286CF55748 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 209.2.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:08:c2:ce:ff:0f:28:6c:f5:57:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=ee3f1f26-f012-4e3d-93c7-d9d57f1b681c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4d:e0:12:a5:f1:82:70:64:5c:da:88:72:79: 8c:00:8d:8c:64:1b:e0:a0:9a:a1:32:cb:89:26:23: 8e:1b:2b:f3:5a:0b:94:46:51:f3:ad:ec:8a:63:e5: 7a:c5:2a:48:f6:c6:ac:1c:45:b1:6c:52:1f:c0:46: da:3d:a1:b5:64:cb:1d:d1:4e:71:90:e0:d1:7d:d2: 84:eb:30:87:6a:f0:d9:b1:f3:7a:d9:a7:b2:ff:87: 64:a2:d5:1c:20:10:45:cd:f8:0c:2f:a8:2d:c1:73: 20:cf:f6:96:b5:88:ac:ff:b4:99:2d:50:06:a4:2e: ec:b0:60:21:af:9b:5c:b0:1d:b1:dc:89:bb:69:d3: a9:9d:4b:b6:21:dc:fd:34:bf:73:53:1f:65:d3:96: ed:5f:18:8e:9e:27:75:d4:00:96:b1:24:f2:22:6b: b6:54:93:29:d9:87:b4:d4:15:9b:23:1d:93:fe:43: ad:83:dc:52:df:40:f8:f8:7d:91:76:a6:99:c3:a3: 6d:35:b6:d7:bf:56:dd:04:d8:55:d7:d6:7e:3f:c8: 3b:a5:3f:07:2f:56:6f:6d:58:f2:a3:17:1d:a9:65: 9d:81:79:f4:88:7d:c5:65:1d:68:b6:c3:6c:03:4e: 70:1a:68:d6:cb:86:fe:d3:b2:31:85:ee:b2:be:fe: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:F9:2A:B0:4C:89:DE:32:C0:37:DC:25:BB:56:10:0A:C1:0C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:4b:db:7c:67:e2:ec:85:9c:57:9f:87:1e:65:ac:a0:5b: 78:5f:fd:51:ce:27:e4:60:40:4a:3e:f0:d0:50:1a:c5:ee:cf: 6c:d7:d3:b1:4b:30:be:3a:f1:a6:51:42:6c:a4:c5:1d:ad:61: c6:60:c6:52:27:14:35:44:71:6d:9a:0e:ce:5b:46:18:7b:83: a3:35:84:a6:a4:61:8c:3d:b0:55:5a:a8:77:a4:a7:58:56:25: 96:00:61:f9:b3:bb:c2:cd:2c:00:18:bc:12:62:f5:d8:d1:a7: 53:cf:61:08:60:fe:6f:57:33:1a:79:d7:b0:c8:f1:65:77:15: 52:ab:0f:5f:7a:2e:ac:29:9d:42:cc:04:44:2d:e0:99:1a:f6: 73:c3:37:48:e9:c6:03:8d:12:80:79:70:76:b9:e4:ec:ca:61: 1e:57:0d:60:9c:39:50:9a:73:c4:27:af:fd:bf:21:6d:1b:8a: c4:ab:74:ec:a7:cd:3d:d6:e8:81:43:4c:39:54:b1:81:d7:ea: 80:c5:55:ba:c3:43:ed:d8:0f:a6:51:4c:83:67:9d:dc:1d:28: d2:08:0d:e9:cb:0f:98:4d:de:0e:3e:80:a9:2a:c7:81:88:01: 19:40:3d:df:a2:b4:09:65:f6:8d:d1:44:b9:94:5a:0a:0a:b0: 13:b9:c5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQjCzv8PKGz1V0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZWUzZjFmMjYtZjAxMi00ZTNkLTkzYzctZDlkNTdmMWI2ODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE3gEqXxgnBkXNqIcnmMAI2MZBvgoJqhMsuJ JiOOGyvzWguURlHzreyKY+V6xSpI9sasHEWxbFIfwEbaPaG1ZMsd0U5xkODRfdKE 6zCHavDZsfN62aey/4dkotUcIBBFzfgML6gtwXMgz/aWtYis/7SZLVAGpC7ssGAh r5tcsB2x3Im7adOpnUu2Idz9NL9zUx9l05btXxiOnid11ACWsSTyImu2VJMp2Ye0 1BWbIx2T/kOtg9xS30D4+H2RdqaZw6NtNbbXv1bdBNhV19Z+P8g7pT8HL1ZvbVjy oxcdqWWdgXn0iH3FZR1otsNsA05wGmjWy4b+07Ixhe6yvv6tgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1h+SqwTIneMsA33CW7VhAKwQy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3OTFmZTYtZjFiNC0z MGIxLWE1MjUtMmQwOGQ0ZmIxZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjzS9t8Z+LshZxXn4ceZaygW3hf/VHOJ+RgQEo+8NBQGsXuz2zX07FL ML468aZRQmykxR2tYcZgxlInFDVEcW2aDs5bRhh7g6M1hKakYYw9sFVaqHekp1hW JZYAYfmzu8LNLAAYvBJi9djRp1PPYQhg/m9XMxp517DI8WV3FVKrD196LqwpnULM BEQt4Jka9nPDN0jpxgONEoB5cHa55OzKYR5XDWCcOVCac8Qnr/2/IW0bisSrdOyn zT3W6IFDTDlUsYHX6oDFVbrDQ+3YD6ZRTINnndwdKNIIDenLD5hN3g4+gKkqx4GI ARlAPd+itAll9o3RRLmUWgoKsBO5xVY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:45 2026 by rpki-client