$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa File: a08d7a45-9754-3d49-ace8-857d310736ba.roa (raw, json) Hash identifier: S3zk7LfpBIsT8KlRJ6NzXPMcrqkXq+Q23qWm7ll88a0= Subject key identifier: D5:B0:CB:D4:0D:86:20:7D:53:05:12:1A:2A:54:0C:F5:4F:4F:30:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2644CEA5E41E85AC57964C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 7029 IP address blocks: 75.89.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ce:a5:e4:1e:85:ac:57:96:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=d86b5dba-4b90-4f98-a51b-6ca380a19917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:31:b5:2d:2d:7e:f6:43:46:28:45:7b:2c: 9e:74:48:55:c2:4d:95:c6:5d:28:9b:19:56:12:13: 8c:75:50:3f:de:1f:ad:61:f8:e7:90:fe:bf:99:a8: fd:e7:55:8b:c9:c9:b5:5c:a7:9a:58:be:e2:b3:2f: 4a:63:57:d5:1e:d6:00:97:c9:e9:37:fc:e5:2e:66: d6:6b:1c:6d:95:8f:73:69:4b:a2:c0:69:f8:59:01: 5f:81:07:8f:a8:f3:43:c4:d0:14:ec:ee:8a:6f:b4: f5:a2:9a:97:df:bb:7b:ac:8c:15:22:06:e5:b1:ce: b1:6f:35:64:3a:3e:a5:7f:d9:a4:5e:d9:71:55:e5: 5f:2b:46:1c:fe:b1:e9:7d:3b:bf:dc:46:d5:46:01: 2e:31:c5:d3:bb:e9:b2:f9:fa:ef:43:00:f0:c3:f1: 4a:c1:72:01:e6:53:27:6a:19:46:92:93:4b:51:a4: ab:b6:ab:da:9f:0e:f0:1d:84:b7:73:b0:83:fb:16: 71:50:d3:7a:d8:d4:84:ea:8b:e7:23:e6:48:e3:49: 7c:80:41:e2:07:2c:bb:0a:bd:22:c9:fa:ae:83:a4: c1:18:6e:0a:2c:2b:47:0b:31:48:f7:25:ba:20:95: 10:02:d6:c5:4d:ff:61:c6:b7:a6:58:e9:41:90:2f: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B0:CB:D4:0D:86:20:7D:53:05:12:1A:2A:54:0C:F5:4F:4F:30:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a4:af:88:e2:46:52:76:07:62:13:61:e0:61:1e:ba:f1:c2: f4:83:f5:9e:0d:3d:0d:97:1a:9e:78:36:cd:01:a7:23:5a:dd: ad:d2:42:60:b8:56:40:97:cb:49:f8:48:1d:51:9b:f7:24:05: 86:70:da:53:22:e5:17:13:84:5d:b6:d8:0a:59:6e:d3:32:4f: 62:4b:c0:83:0e:03:54:3a:de:9b:52:5e:e5:07:2c:d6:2e:45: 79:34:37:e3:ef:59:f7:6b:77:b8:5f:17:65:8d:9a:c3:b2:61: ff:20:1d:31:74:ee:a2:2c:25:62:aa:d4:04:73:2b:80:cd:bb: de:4c:26:75:f0:fa:94:14:bf:bb:e6:bf:94:85:f8:07:15:e6: ce:f0:76:57:0b:8d:9f:79:bc:ff:38:92:f8:ff:10:aa:60:e7: fe:ed:a6:9a:6a:1d:3a:5d:54:7c:61:b7:27:75:0b:01:58:6e: 8d:00:6b:da:d2:d1:e1:5b:a4:ec:9d:fc:01:8e:5e:f3:66:a2: 25:a9:99:6e:48:a9:7e:0f:17:15:c6:9a:82:8e:54:74:37:25: 8b:d1:c6:59:46:4a:87:92:1a:2e:b6:a0:bb:c3:40:cf:07:69: 89:70:ff:05:39:32:78:a9:fe:a3:99:e7:09:6c:42:b6:01:10: d7:69:3b:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRM6l5B6FrFeWTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDg2YjVkYmEtNGI5MC00Zjk4LWE1MWItNmNhMzgwYTE5OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn10xtS0tfvZDRihFeyyedEhVwk2Vxl0omxlW EhOMdVA/3h+tYfjnkP6/maj951WLycm1XKeaWL7isy9KY1fVHtYAl8npN/zlLmbW axxtlY9zaUuiwGn4WQFfgQePqPNDxNAU7O6Kb7T1opqX37t7rIwVIgblsc6xbzVk Oj6lf9mkXtlxVeVfK0Yc/rHpfTu/3EbVRgEuMcXTu+my+frvQwDww/FKwXIB5lMn ahlGkpNLUaSrtqvanw7wHYS3c7CD+xZxUNN62NSE6ovnI+ZI40l8gEHiByy7Cr0i yfqug6TBGG4KLCtHCzFI9yW6IJUQAtbFTf9hxremWOlBkC+RrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWwy9QNhiB9UwUSGipUDPVPTzA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4ZDdhNDUtOTc1NC0z ZDQ5LWFjZTgtODU3ZDMxMDczNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2kr4jiRlJ2B2ITYeBhHrrxwvSD9Z4NPQ2XGp54Ns0BpyNa3a3SQmC4 VkCXy0n4SB1Rm/ckBYZw2lMi5RcThF222ApZbtMyT2JLwIMOA1Q63ptSXuUHLNYu RXk0N+PvWfdrd7hfF2WNmsOyYf8gHTF07qIsJWKq1ARzK4DNu95MJnXw+pQUv7vm v5SF+AcV5s7wdlcLjZ95vP84kvj/EKpg5/7tpppqHTpdVHxhtyd1CwFYbo0Aa9rS 0eFbpOyd/AGOXvNmoiWpmW5IqX4PFxXGmoKOVHQ3JYvRxllGSoeSGi62oLvDQM8H aYlw/wU5Mnip/qOZ5wlsQrYBENdpO+c= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:10 2026 by rpki-client