$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6e67d16-6a86-3c78-b632-53b179d716ed.roa File: a6e67d16-6a86-3c78-b632-53b179d716ed.roa (raw, json) Hash identifier: E1Vjt4ELnzVsP5dk8B147gq5Fs/4ciaw00z+pGCCO3Q= Subject key identifier: 85:CE:C5:2F:48:20:4C:77:75:53:6A:46:91:31:5C:76:8F:15:84:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D4C99539B322B191D5040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6e67d16-6a86-3c78-b632-53b179d716ed.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 75.88.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4c:99:53:9b:32:2b:19:1d:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=78a44168-5f90-4362-a620-2f3d0d3b81db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2d:36:9d:58:1f:5e:0c:b6:d0:08:46:4a:ac: cc:44:ae:55:c3:8a:92:b7:d9:83:f7:28:d4:88:ea: 70:74:cf:e1:e2:15:b6:00:d1:9f:3c:a0:52:c2:0c: aa:93:6d:70:a9:d7:1f:7b:9a:d0:db:5f:49:5a:45: 9e:5e:bf:a6:02:06:e6:11:26:90:b5:a6:2d:16:e6: 24:51:8b:1a:f1:96:cb:5b:1a:0b:da:a0:17:ac:f8: b4:e7:53:35:7d:24:22:51:0e:4c:14:5a:11:73:51: 56:78:39:c1:21:31:6c:02:eb:8d:9f:a5:90:23:e5: 44:b5:90:46:d2:3c:14:76:d4:1a:c7:a5:fa:07:03: 67:ac:31:d0:60:9d:69:fa:f1:24:91:cd:f7:ba:92: ca:5d:04:9d:08:4b:04:5e:20:66:5d:b9:17:a3:d0: e7:20:89:76:76:1e:41:4f:6b:c9:3c:c8:b0:ca:ea: 10:cc:d0:4f:91:1f:ab:e2:de:53:79:5e:98:e4:fc: 58:33:cd:61:aa:52:f4:f3:74:d1:24:27:ca:9d:31: 31:91:32:a3:de:98:aa:37:1d:5d:88:d3:7e:d7:f1: aa:10:71:07:4a:ec:00:17:48:f0:2d:b5:b1:46:4b: d8:79:19:26:c7:45:80:90:96:3b:39:45:0a:d0:56: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:C5:2F:48:20:4C:77:75:53:6A:46:91:31:5C:76:8F:15:84:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6e67d16-6a86-3c78-b632-53b179d716ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b4:ed:a3:29:34:09:57:d4:01:e1:a1:89:ab:b4:3c:62:ca: 18:14:76:25:a8:15:51:c8:a1:21:47:78:a6:48:ed:eb:9b:28: 7e:65:56:71:b7:e0:2b:5e:32:27:ed:6f:79:a8:41:40:81:dd: 60:24:0e:8f:d7:d8:e3:5c:1a:7e:89:3a:df:bb:52:80:26:bd: 89:d1:5f:74:e9:e2:6e:9a:ff:c0:89:6a:e1:52:b3:91:8c:bf: 94:a6:8d:ae:5b:ce:6e:05:d4:74:80:d9:8d:41:cf:ed:14:61: 98:27:ce:b2:01:b9:f7:e0:63:5b:f0:01:63:d6:4a:fc:5a:63: df:75:9e:ec:34:d2:ec:fd:60:d7:aa:4c:c6:9a:a1:84:6f:c9: c3:57:84:f8:8c:c6:ee:bb:5b:27:70:32:ce:1b:86:64:a0:b5: 97:b8:5e:89:be:39:4d:32:e5:04:e2:da:06:13:3e:6c:30:1d: 8b:73:dc:50:e1:1c:64:92:c2:d7:06:fe:5a:01:61:18:80:6a: 2f:c7:c0:13:b6:f2:b0:f9:62:cf:97:c7:43:ae:c3:01:4e:dc: 3f:31:f4:90:0f:3e:4c:ad:1f:dc:48:ae:45:3e:03:22:31:32: 12:92:36:83:61:46:f3:b3:0e:86:63:76:cf:07:c8:e0:54:2e: 1d:66:97:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUyZU5syKxkdUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NzhhNDQxNjgtNWY5MC00MzYyLWE2MjAtMmYzZDBkM2I4MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS02nVgfXgy20AhGSqzMRK5Vw4qSt9mD9yjU iOpwdM/h4hW2ANGfPKBSwgyqk21wqdcfe5rQ219JWkWeXr+mAgbmESaQtaYtFuYk UYsa8ZbLWxoL2qAXrPi051M1fSQiUQ5MFFoRc1FWeDnBITFsAuuNn6WQI+VEtZBG 0jwUdtQax6X6BwNnrDHQYJ1p+vEkkc33upLKXQSdCEsEXiBmXbkXo9DnIIl2dh5B T2vJPMiwyuoQzNBPkR+r4t5TeV6Y5PxYM81hqlL083TRJCfKnTExkTKj3piqNx1d iNN+1/GqEHEHSuwAF0jwLbWxRkvYeRkmx0WAkJY7OUUK0FZI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXOxS9IIEx3dVNqRpExXHaPFYRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZlNjdkMTYtNmE4Ni0z Yzc4LWI2MzItNTNiMTc5ZDcxNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1gwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm07aMpNAlX1AHhoYmrtDxiyhgUdiWoFVHIoSFHeKZI7eubKH5lVnG3 4CteMiftb3moQUCB3WAkDo/X2ONcGn6JOt+7UoAmvYnRX3Tp4m6a/8CJauFSs5GM v5Smja5bzm4F1HSA2Y1Bz+0UYZgnzrIBuffgY1vwAWPWSvxaY991nuw00uz9YNeq TMaaoYRvycNXhPiMxu67WydwMs4bhmSgtZe4Xom+OU0y5QTi2gYTPmwwHYtz3FDh HGSSwtcG/loBYRiAai/HwBO28rD5Ys+Xx0OuwwFO3D8x9JAPPkytH9xIrkU+AyIx MhKSNoNhRvOzDoZjds8HyOBULh1mly8= -----END CERTIFICATE-----Generated at Tue Oct 6 13:52:26 2026 by rpki-client