$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa File: 7cd7301d-8874-31f5-bc17-74bd6043da2a.roa (raw, json) Hash identifier: Sb1X+daOFUtIrUvrqG2Gc6tI4h9U47MH3wFUyf8MY5E= Subject key identifier: 22:42:B8:90:AD:14:93:09:17:C1:40:0B:A7:84:4B:14:E9:1C:96:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A990C30B601A53E5836C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 75.117.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:99:0c:30:b6:01:a5:3e:58:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ffbf6be1-425f-4b98-ab78-51b42ff7d581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:36:37:28:42:43:f2:02:7b:9d:eb:25:12:af: de:6c:6d:13:42:7f:be:c3:55:6f:0a:8f:06:c9:0c: bf:eb:a1:77:d4:42:53:af:97:29:e3:d0:c5:eb:9c: 13:de:24:c0:a5:88:e4:03:9d:4f:72:5a:27:94:50: 8a:1a:ff:46:85:85:ee:cb:19:19:41:8f:c0:f7:89: 91:83:55:1b:b2:51:a6:30:1f:bb:e9:c5:ec:d0:44: 11:7b:d7:a5:63:7a:57:58:8b:ec:a4:3d:e3:f8:49: 84:d7:68:a0:6e:42:bc:bf:98:3c:1f:2b:d8:f9:0f: a0:dc:a4:e3:98:92:14:2b:af:7c:14:66:41:23:7a: 96:99:b4:9b:de:10:8c:72:c2:3d:95:81:24:e8:5e: 66:9b:94:c3:4d:c8:40:86:03:99:2b:a0:e1:4b:16: ea:e9:00:9c:a1:9c:af:91:bc:47:71:66:77:80:0e: a8:80:b8:a6:1d:cf:26:f5:a5:13:36:2c:c6:4d:19: 2c:24:6c:d1:3b:49:83:45:f6:89:99:fd:d1:95:16: a2:06:40:05:b4:84:71:0f:28:be:93:9c:b4:d6:9e: 58:78:75:65:8b:0e:b8:bb:0e:c6:be:b5:f9:ee:57: f9:c5:23:c9:85:69:42:1e:68:ae:97:53:40:97:77: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:B8:90:AD:14:93:09:17:C1:40:0B:A7:84:4B:14:E9:1C:96:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7cd7301d-8874-31f5-bc17-74bd6043da2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c0:46:29:25:85:d0:38:ac:b1:58:65:87:19:bb:2a:d5:8a: b3:b6:ec:49:9f:73:96:97:c4:f0:fa:a2:fd:40:51:23:47:cb: dd:d8:46:86:32:13:e0:3a:f7:33:40:b7:9d:1c:d5:ef:7f:d4: ed:5b:0a:5b:98:78:1e:db:d7:ca:45:df:d0:22:aa:da:06:e6: 12:4f:41:cd:4d:fc:f9:db:20:87:66:20:4c:74:52:f3:06:c3: 44:31:20:5d:40:fa:1b:8b:1a:fb:0d:b0:68:97:36:d1:32:09: 47:69:e9:1a:7e:78:d5:10:16:9a:18:55:6e:25:0e:74:39:93: e9:e8:db:71:30:c9:a5:77:f7:f1:dc:91:5c:1a:6f:a4:9d:98: 4e:ba:ff:d5:86:f9:6c:22:93:49:da:5f:2c:d5:47:ca:a8:0a: 10:b0:8b:54:cd:8a:c5:bb:73:59:d2:3c:ed:8c:bd:55:97:b8: 6e:29:ff:72:b3:09:22:44:32:09:d0:b9:fc:fe:ef:a7:d3:de: 51:33:85:0c:11:15:db:47:a9:34:ec:1c:60:7d:8b:9f:29:23: a6:79:92:b4:34:cb:cf:2d:2c:77:79:c2:d5:63:6b:56:aa:0b: 69:a2:d5:3d:90:ab:ae:2e:1d:1c:b1:1e:64:87:e6:7b:e1:e2: ce:2b:4f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCpkMMLYBpT5YNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmZiZjZiZTEtNDI1Zi00Yjk4LWFiNzgtNTFiNDJmZjdkNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DY3KEJD8gJ7neslEq/ebG0TQn++w1VvCo8G yQy/66F31EJTr5cp49DF65wT3iTApYjkA51PclonlFCKGv9GhYXuyxkZQY/A94mR g1UbslGmMB+76cXs0EQRe9elY3pXWIvspD3j+EmE12igbkK8v5g8HyvY+Q+g3KTj mJIUK698FGZBI3qWmbSb3hCMcsI9lYEk6F5mm5TDTchAhgOZK6DhSxbq6QCcoZyv kbxHcWZ3gA6ogLimHc8m9aUTNizGTRksJGzRO0mDRfaJmf3RlRaiBkAFtIRxDyi+ k5y01p5YeHVliw64uw7GvrX57lf5xSPJhWlCHmiul1NAl3cyvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJCuJCtFJMJF8FAC6eESxTpHJYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2NkNzMwMWQtODg3NC0z MWY1LWJjMTctNzRiZDYwNDNkYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS3XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTARiklhdA4rLFYZYcZuyrVirO27Emfc5aXxPD6ov1AUSNHy93YRoYy E+A69zNAt50c1e9/1O1bCluYeB7b18pF39AiqtoG5hJPQc1N/PnbIIdmIEx0UvMG w0QxIF1A+huLGvsNsGiXNtEyCUdp6Rp+eNUQFpoYVW4lDnQ5k+no23EwyaV39/Hc kVwab6SdmE66/9WG+Wwik0naXyzVR8qoChCwi1TNisW7c1nSPO2MvVWXuG4p/3Kz CSJEMgnQufz+76fT3lEzhQwRFdtHqTTsHGB9i58pI6Z5krQ0y88tLHd5wtVja1aq C2mi1T2Qq64uHRyxHmSH5nvh4s4rTxI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:54 2026 by rpki-client