$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa File: 8a67ce58-99c9-3737-87d0-09b3a62815bc.roa (raw, json) Hash identifier: hu0u5YEQOpe0IJG2Q8jZeEykxadKPeMsPl3Cl/Hi8Do= Subject key identifier: 70:5A:50:EC:04:BF:ED:25:C0:69:06:85:98:BE:5E:03:73:5A:61:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F86E10472A3A6D757AEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 75.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:86:e1:04:72:a3:a6:d7:57:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=1a179646-e6f3-4dc4-97f8-71cae591d9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:9a:d6:c0:1b:d8:91:51:3a:fc:e0:57:8c: 2e:ef:9c:cc:d7:95:69:b7:41:aa:f0:2d:e1:4a:9f: 56:bc:32:24:ab:9a:73:9e:1b:d9:89:e5:c2:e4:54: 7c:74:0f:8f:c1:20:bf:85:19:f5:c2:c2:60:d2:18: 9f:37:0e:7b:a5:56:2d:6d:5d:ce:5d:33:22:01:bd: c5:b4:d1:15:10:5e:01:0d:df:c5:5b:26:58:d5:79: 0d:dc:d8:9d:47:90:4b:37:bf:94:91:5b:88:c5:b3: 03:9b:7d:e6:d9:b6:b8:b0:8a:2d:9b:85:14:3f:4a: 4c:f5:5f:20:1a:81:36:2f:60:81:35:ce:af:f7:04: d7:44:02:a7:60:dd:93:d3:bc:e6:86:b8:1d:95:54: e9:1e:6e:86:35:a5:09:13:a2:f1:6e:91:e6:42:63: be:4d:bc:67:10:e4:cc:4d:53:98:71:83:72:54:1e: 7e:ee:92:9f:82:9e:12:a1:7a:a8:a3:bc:f4:7f:99: 23:d1:32:a2:b7:b8:5b:06:df:65:1f:ba:4f:8c:9f: cc:06:23:5b:2f:1d:75:e4:21:c2:48:e1:59:1c:c4: 30:c8:35:94:d1:93:83:28:97:24:cf:a3:f3:47:0a: 7d:a2:2d:56:05:ff:c5:5f:6b:92:f8:12:59:38:81: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:50:EC:04:BF:ED:25:C0:69:06:85:98:BE:5E:03:73:5A:61:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:15:d4:4f:42:ed:f2:6d:4a:80:72:6b:c9:98:d5:ef:6e:e6: ae:b0:2b:1e:21:4b:6e:a8:01:a9:3c:17:cc:fc:93:1e:bf:4c: 77:29:2b:a8:2e:5e:75:56:97:54:70:5c:9d:be:24:ec:7f:b5: b3:50:c5:9d:b3:ae:da:70:f1:44:e9:28:c4:87:43:fe:59:e1: 3d:29:0c:86:a9:15:a0:2b:b8:1e:05:6d:1f:3a:fa:f3:0d:85: 72:96:e0:d3:b6:03:7c:81:f1:1b:ec:f1:24:ae:39:2e:b4:b8: cb:04:38:9d:0e:9f:7b:d5:a9:d8:e2:76:40:15:e5:20:5f:2d: 11:ee:aa:bc:16:21:c2:93:b1:4f:d3:41:95:13:d8:36:21:87: c7:9e:6c:c9:d7:77:d8:59:22:59:b1:61:28:e2:8a:0c:60:59: d8:f1:a7:de:3f:81:e9:4e:b8:6b:d5:3b:e9:c5:77:db:dd:77: 06:df:f2:20:e3:61:e5:09:c8:54:34:da:c9:54:bd:3d:03:68: 01:e6:0c:1b:57:9c:16:fd:7c:fa:95:22:19:04:61:7a:68:fc: 6f:eb:96:13:c0:d3:1b:64:e1:50:53:fc:92:70:8d:cf:ec:7f: b4:82:f0:91:05:dc:33:de:d8:00:c2:ee:9d:5e:45:15:c7:10: 46:c3:ba:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4bhBHKjptdXrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MWExNzk2NDYtZTZmMy00ZGM0LTk3ZjgtNzFjYWU1OTFkOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNya1sAb2JFROvzgV4wu75zM15Vpt0Gq8C3h Sp9WvDIkq5pznhvZieXC5FR8dA+PwSC/hRn1wsJg0hifNw57pVYtbV3OXTMiAb3F tNEVEF4BDd/FWyZY1XkN3NidR5BLN7+UkVuIxbMDm33m2ba4sIotm4UUP0pM9V8g GoE2L2CBNc6v9wTXRAKnYN2T07zmhrgdlVTpHm6GNaUJE6LxbpHmQmO+TbxnEOTM TVOYcYNyVB5+7pKfgp4SoXqoo7z0f5kj0TKit7hbBt9lH7pPjJ/MBiNbLx115CHC SOFZHMQwyDWU0ZODKJckz6PzRwp9oi1WBf/FX2uS+BJZOIGmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBaUOwEv+0lwGkGhZi+XgNzWmEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE2N2NlNTgtOTljOS0z NzM3LTg3ZDAtMDliM2E2MjgxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcV1E9C7fJtSoBya8mY1e9u5q6wKx4hS26oAak8F8z8kx6/THcpK6gu XnVWl1RwXJ2+JOx/tbNQxZ2zrtpw8UTpKMSHQ/5Z4T0pDIapFaAruB4FbR86+vMN hXKW4NO2A3yB8Rvs8SSuOS60uMsEOJ0On3vVqdjidkAV5SBfLRHuqrwWIcKTsU/T QZUT2DYhh8eebMnXd9hZIlmxYSjiigxgWdjxp94/gelOuGvVO+nFd9vddwbf8iDj YeUJyFQ02slUvT0DaAHmDBtXnBb9fPqVIhkEYXpo/G/rlhPA0xtk4VBT/JJwjc/s f7SC8JEF3DPe2ADC7p1eRRXHEEbDur8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:35 2026 by rpki-client