$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa File: b2166f3b-7624-37a4-94f7-a26705d37a41.roa (raw, json) Hash identifier: q4x4T1FVD4HOiposjuntA/WmG0OsQ1TezpAOZOOEneU= Subject key identifier: 66:0E:09:F2:C6:35:45:CD:CE:87:78:67:69:AF:2A:7C:B2:9E:87:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D1F4A625CB27C4EF795C46A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 75.117.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:62:5c:b2:7c:4e:f7:95:c4:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=16c6b997-b2d5-4a56-8df2-3078b7e8177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:98:e0:68:1c:25:78:d6:41:56:ba:a7:58:dc: 9f:ab:23:ea:c3:9a:be:8a:df:04:b7:76:c3:63:de: 6b:3c:d0:0f:6a:11:27:fd:39:56:7b:38:ff:16:40: 0e:62:ee:5f:f2:42:47:40:64:e8:29:84:4c:e3:a5: b6:ad:2c:94:4a:96:f1:75:fd:6e:d9:32:84:32:47: 87:25:40:c2:c7:d4:07:57:6d:41:f6:bd:3f:f8:f1: 67:c6:64:4a:a3:37:01:e9:38:58:1f:c5:3b:67:ce: 33:2c:1c:cf:49:2e:93:52:20:e8:9a:49:44:38:6c: bd:3b:75:e4:7e:33:fc:81:cf:a9:28:42:fb:b7:ce: ab:49:f6:d5:a6:91:23:bf:30:a9:60:d2:c0:4b:9d: ef:ec:5e:e1:16:be:d3:71:e0:58:64:e4:6e:a3:13: fd:8d:b0:84:99:cb:1a:c4:0d:c7:75:a4:c0:7a:fb: 4a:7f:69:79:96:ba:31:6d:4d:49:69:cf:43:45:60: f6:36:07:f1:d1:ec:0e:41:ad:06:17:85:2a:82:89: 0d:66:e0:2a:ae:61:25:aa:77:60:06:12:8f:cf:aa: 28:c9:0f:b6:25:21:c4:1a:bf:61:f4:fe:96:50:91: 8a:7f:01:b2:21:d4:de:b1:66:d1:dc:9f:8c:6d:81: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:09:F2:C6:35:45:CD:CE:87:78:67:69:AF:2A:7C:B2:9E:87:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c3:60:f8:44:f1:d2:17:b4:06:73:e0:0e:e1:65:23:72:bf: 35:2e:8a:79:18:4e:04:c9:47:92:99:c1:a0:e4:e0:41:f0:13: 02:d1:98:e1:13:c1:d5:07:f6:e4:d5:d6:3f:aa:db:a2:78:0e: 29:02:83:ff:41:89:ca:62:ca:98:ad:bf:38:8f:ed:8c:97:37: 76:72:97:41:e9:00:15:41:35:d3:06:92:89:87:03:83:bf:5f: f4:9c:95:be:2e:c4:5c:20:eb:39:d7:2d:bb:c9:06:b8:36:0b: bd:4b:81:7a:1e:c0:fc:e1:80:98:1f:95:4b:85:1a:63:d8:20: e9:8b:9a:75:a0:68:25:60:50:ed:4b:b1:9d:d9:da:eb:97:75: c2:eb:56:c5:40:56:a3:fa:dc:e5:e1:7f:95:c0:37:82:7b:7d: ac:e1:58:fc:f0:55:a8:15:94:14:c4:58:22:42:1c:f6:60:3f: f9:dc:2a:75:82:07:ac:19:85:fa:d3:72:2b:72:f1:e5:a9:69: 49:a6:97:c9:97:29:f1:57:f9:07:79:38:8c:8f:08:2e:04:97: 58:46:ef:59:88:36:96:48:45:35:d9:e5:c2:5c:ed:17:db:0e: 94:cc:c5:49:95:26:f9:36:dc:68:56:3a:a8:f4:e6:3a:60:d6: 5c:b4:3d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmJcsnxO95XEaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTZjNmI5OTctYjJkNS00YTU2LThkZjItMzA3OGI3ZTgxNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45jgaBwleNZBVrqnWNyfqyPqw5q+it8Et3bD Y95rPNAPahEn/TlWezj/FkAOYu5f8kJHQGToKYRM46W2rSyUSpbxdf1u2TKEMkeH JUDCx9QHV21B9r0/+PFnxmRKozcB6ThYH8U7Z84zLBzPSS6TUiDomklEOGy9O3Xk fjP8gc+pKEL7t86rSfbVppEjvzCpYNLAS53v7F7hFr7TceBYZORuoxP9jbCEmcsa xA3HdaTAevtKf2l5lroxbU1Jac9DRWD2Ngfx0ewOQa0GF4UqgokNZuAqrmElqndg BhKPz6ooyQ+2JSHEGr9h9P6WUJGKfwGyIdTesWbR3J+MbYESfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYOCfLGNUXNzod4Z2mvKnyynodSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIxNjZmM2ItNzYyNC0z N2E0LTk0ZjctYTI2NzA1ZDM3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfDYPhE8dIXtAZz4A7hZSNyvzUuinkYTgTJR5KZwaDk4EHwEwLRmOET wdUH9uTV1j+q26J4DikCg/9BicpiypitvziP7YyXN3Zyl0HpABVBNdMGkomHA4O/ X/Sclb4uxFwg6znXLbvJBrg2C71LgXoewPzhgJgflUuFGmPYIOmLmnWgaCVgUO1L sZ3Z2uuXdcLrVsVAVqP63OXhf5XAN4J7fazhWPzwVagVlBTEWCJCHPZgP/ncKnWC B6wZhfrTcity8eWpaUmml8mXKfFX+Qd5OIyPCC4El1hG71mINpZIRTXZ5cJc7Rfb DpTMxUmVJvk23GhWOqj05jpg1ly0PVw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:15 2026 by rpki-client