$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa File: a08d7a45-9754-3d49-ace8-857d310736ba.roa (raw, json) Hash identifier: epSR+RUelBQOtCRk6dvgZYMSLqWhOKt6LCPEh0nvKUA= Subject key identifier: 31:90:A3:DD:07:60:FF:B3:27:B4:24:8F:BA:39:4C:A1:4F:65:69:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F4C3D5A4B932D0E4CCB951380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 75.89.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5a:4b:93:2d:0e:4c:cb:95:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b0d508a4-8fa5-4e72-83e0-3b379a39dce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:33:4c:34:34:cf:99:c2:f3:d3:c8:74:09:c1: 14:88:0c:ee:21:f7:1e:96:c3:3c:80:14:27:e1:8a: a7:74:af:9c:e2:aa:1e:8c:46:98:57:de:56:40:4f: 63:9c:80:22:33:42:d2:9e:ee:94:8e:9f:aa:6a:5c: c0:e2:e2:a6:a6:6d:bc:c9:bd:8e:35:66:71:2a:dc: 4d:52:ec:55:02:82:38:57:94:51:af:a8:86:71:bf: 1c:17:d2:59:93:73:51:63:14:4f:7e:03:a1:4b:cf: 93:66:3f:53:7a:5b:3f:42:a5:20:11:be:c5:65:fd: fb:8c:27:1f:57:7a:aa:03:5c:86:09:fc:c4:03:a5: 3c:09:0c:fb:14:91:cc:8e:d8:92:90:d0:27:1d:c7: c7:15:1c:fb:36:2b:e1:e5:b9:69:55:16:13:53:6c: dd:f3:b1:1c:b7:ec:41:c2:59:23:07:2d:95:e3:61: 0d:ba:e9:f3:ee:b2:1c:a0:7e:01:ee:b5:22:31:65: 15:48:49:e0:45:c8:bf:b3:6c:2e:5f:75:b8:da:36: 65:82:80:65:84:72:4e:09:f5:35:f2:34:3d:34:9d: 39:6d:1b:52:99:d9:92:df:09:8b:73:7d:a8:76:24: 6b:ee:66:4e:2e:0e:b6:ae:f3:e2:18:20:63:b4:b9: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:A3:DD:07:60:FF:B3:27:B4:24:8F:BA:39:4C:A1:4F:65:69:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b9:95:e8:b0:24:89:a4:09:6c:0a:5c:e8:9b:40:44:30:de: 96:fb:63:cc:45:0d:76:37:80:35:09:cd:1d:cb:bd:1b:e0:59: 42:89:0b:0f:ca:24:88:0e:d6:a1:c3:14:f7:2b:6b:cb:29:2b: 7e:e4:30:87:2a:f1:c9:be:d2:84:36:fc:c9:37:de:1c:5c:10: 74:93:bb:24:35:46:02:3d:46:64:a6:73:02:b1:1c:30:fa:fe: c5:ca:4b:7e:94:48:5d:4c:59:cd:1e:15:26:a9:9d:a9:b9:d8: e8:b9:78:da:9c:f1:bc:c4:06:8a:c1:7f:9b:9c:13:7f:43:9f: 8c:9c:2a:82:cc:c3:00:b4:5f:01:c9:bb:13:a5:1b:f0:9f:da: fa:9e:6a:df:55:82:37:93:ad:6b:dd:95:bd:0a:32:1a:85:59: 57:9f:77:6f:2a:2f:5c:ca:04:87:0c:01:c3:a1:ea:30:08:ff: 2e:02:a8:a6:e2:a8:4e:4b:1c:73:58:8c:bd:c2:9c:93:36:57: ae:da:17:ad:a9:b7:9a:a0:cd:8e:10:0a:66:b4:34:9a:ad:a4: 9b:6a:af:86:14:74:8b:3c:d8:de:8f:68:76:dd:63:36:11:a8: be:93:2d:d7:31:fb:5d:61:05:ab:05:72:3f:b5:53:67:bb:70: e6:7a:53:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVpLky0OTMuVE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjBkNTA4YTQtOGZhNS00ZTcyLTgzZTAtM2IzNzlhMzlkY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzNMNDTPmcLz08h0CcEUiAzuIfcelsM8gBQn 4YqndK+c4qoejEaYV95WQE9jnIAiM0LSnu6Ujp+qalzA4uKmpm28yb2ONWZxKtxN UuxVAoI4V5RRr6iGcb8cF9JZk3NRYxRPfgOhS8+TZj9Tels/QqUgEb7FZf37jCcf V3qqA1yGCfzEA6U8CQz7FJHMjtiSkNAnHcfHFRz7Nivh5blpVRYTU2zd87Ect+xB wlkjBy2V42ENuunz7rIcoH4B7rUiMWUVSEngRci/s2wuX3W42jZlgoBlhHJOCfU1 8jQ9NJ05bRtSmdmS3wmLc32odiRr7mZOLg62rvPiGCBjtLnBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGQo90HYP+zJ7Qkj7o5TKFPZWn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4ZDdhNDUtOTc1NC0z ZDQ5LWFjZTgtODU3ZDMxMDczNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW5leiwJImkCWwKXOibQEQw3pb7Y8xFDXY3gDUJzR3LvRvgWUKJCw/K JIgO1qHDFPcra8spK37kMIcq8cm+0oQ2/Mk33hxcEHSTuyQ1RgI9RmSmcwKxHDD6 /sXKS36USF1MWc0eFSapnam52Oi5eNqc8bzEBorBf5ucE39Dn4ycKoLMwwC0XwHJ uxOlG/Cf2vqeat9VgjeTrWvdlb0KMhqFWVefd28qL1zKBIcMAcOh6jAI/y4CqKbi qE5LHHNYjL3CnJM2V67aF62pt5qgzY4QCma0NJqtpJtqr4YUdIs82N6PaHbdYzYR qL6TLdcx+11hBasFcj+1U2e7cOZ6Uz0= -----END CERTIFICATE-----Generated at Sat Sep 26 18:18:46 2026 by rpki-client