$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/949817a7-2f28-316c-b79d-0601b0523668.roa File: 949817a7-2f28-316c-b79d-0601b0523668.roa (raw, json) Hash identifier: NoUIOKwaQqeDZHs4+WQWhCAYBTB2XdbA/7OoCkbJcQo= Subject key identifier: 9D:0D:66:08:97:51:6D:42:B5:7D:92:BE:64:C5:BB:3D:41:4C:FE:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F894C1C173837AD238F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/949817a7-2f28-316c-b79d-0601b0523668.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 75.117.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:89:4c:1c:17:38:37:ad:23:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=8d5d50fc-44f9-4229-8ffc-723183242b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:9b:21:4b:aa:c7:8c:94:2d:8c:28:8d:d6: 63:e9:b4:3f:9f:5e:f0:62:db:5c:38:b1:05:0f:7e: 2d:86:44:b0:c1:fb:c1:bf:1a:89:a4:16:0e:27:4b: 83:f8:ea:db:fb:ba:8e:5e:14:03:15:8d:0e:21:91: 67:7b:35:5b:0c:aa:e5:35:e3:8c:3b:31:f7:1d:ed: 3c:be:9a:24:54:7e:70:79:a4:23:54:01:37:8e:c2: a6:a8:df:b5:d1:c1:a4:f2:dc:9f:c6:86:ac:fb:ce: bd:28:7b:c3:c2:d6:4c:e4:4c:85:f9:3f:20:c8:65: c0:fc:8c:be:f9:24:c2:48:2c:d2:3d:c7:c2:a7:11: e6:50:7d:ab:6f:8e:5d:b1:63:79:f4:2a:46:95:eb: b3:c3:55:80:09:15:f1:3c:fc:cd:73:0b:9c:1d:aa: 23:25:d8:b2:d2:92:0b:42:ae:ea:d9:22:4c:38:07: 88:22:a5:3c:1b:ef:ce:d0:4a:ff:b3:65:57:ca:95: a8:8d:66:d1:af:a1:1b:52:ed:3f:96:00:f5:c3:8d: f6:70:46:79:3b:7a:3c:b0:36:a5:0b:ee:b9:4c:18: 92:f9:f1:b6:c2:b6:a6:bc:3b:51:c5:17:74:63:61: fa:17:c6:5e:14:6f:7a:b9:d9:06:be:26:5c:32:87: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0D:66:08:97:51:6D:42:B5:7D:92:BE:64:C5:BB:3D:41:4C:FE:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/949817a7-2f28-316c-b79d-0601b0523668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b8:d0:7f:a9:68:b5:4e:d7:b0:38:b7:94:75:d6:6a:ff:e4: 2c:87:4b:be:40:46:8f:34:40:9c:9b:64:9a:33:5d:2a:72:42: e1:eb:1d:ba:09:e4:00:4c:16:c2:5c:99:28:33:be:6a:09:81: 9c:1b:10:8a:15:04:28:85:b0:c4:87:4e:ca:72:18:b9:c5:7e: e9:3f:40:ec:4c:a3:e3:e2:78:6c:00:09:61:d9:85:2f:f0:a3: 53:5b:f2:16:be:c0:9d:f2:b4:3e:5c:b6:cf:6c:cc:32:ed:f3: 64:b1:5e:51:b9:4c:24:1a:b4:b2:0c:b3:39:3a:1b:4c:f7:61: 25:63:14:3b:bb:3b:16:b6:81:4f:31:47:62:5c:b0:89:57:3e: b8:7a:da:5c:85:68:0f:89:b3:dc:b0:77:7c:03:8f:f3:55:6b: 1c:60:cd:88:9a:8b:06:82:98:c1:b5:39:71:3c:2a:4c:90:c3: 60:1e:b3:67:d7:78:34:56:2f:3f:74:e8:50:e1:cb:82:76:e7: 25:7e:4e:2f:56:d0:f6:44:42:1c:3a:ee:42:03:93:f2:28:de: fd:04:b7:71:dc:8f:3a:26:64:99:96:20:70:80:34:a5:bb:1d: 8f:25:8b:ab:a1:1f:f9:52:0c:ab:99:5d:c9:1a:71:24:89:9a: 0b:3f:77:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4lMHBc4N60jj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk OGQ1ZDUwZmMtNDRmOS00MjI5LThmZmMtNzIzMTgzMjQyYjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxebIUuqx4yULYwojdZj6bQ/n17wYttcOLEF D34thkSwwfvBvxqJpBYOJ0uD+Orb+7qOXhQDFY0OIZFnezVbDKrlNeOMOzH3He08 vpokVH5weaQjVAE3jsKmqN+10cGk8tyfxoas+869KHvDwtZM5EyF+T8gyGXA/Iy+ +STCSCzSPcfCpxHmUH2rb45dsWN59CpGleuzw1WACRXxPPzNcwucHaojJdiy0pIL Qq7q2SJMOAeIIqU8G+/O0Er/s2VXypWojWbRr6EbUu0/lgD1w432cEZ5O3o8sDal C+65TBiS+fG2wramvDtRxRd0Y2H6F8ZeFG96udkGviZcMoeOnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0NZgiXUW1CtX2SvmTFuz1BTP5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQ5ODE3YTctMmYyOC0z MTZjLWI3OWQtMDYwMWIwNTIzNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK40H+paLVO17A4t5R11mr/5CyHS75ARo80QJybZJozXSpyQuHrHboJ 5ABMFsJcmSgzvmoJgZwbEIoVBCiFsMSHTspyGLnFfuk/QOxMo+PieGwACWHZhS/w o1Nb8ha+wJ3ytD5cts9szDLt82SxXlG5TCQatLIMszk6G0z3YSVjFDu7Oxa2gU8x R2JcsIlXPrh62lyFaA+Js9ywd3wDj/NVaxxgzYiaiwaCmMG1OXE8KkyQw2Aes2fX eDRWLz906FDhy4J25yV+Ti9W0PZEQhw67kIDk/Io3v0Et3HcjzomZJmWIHCANKW7 HY8li6uhH/lSDKuZXckacSSJmgs/d/I= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:39 2026 by rpki-client