$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa File: c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa (raw, json) Hash identifier: e2c8lYlcZ0Uo8zd0LU3q8LIWRWaS2bM+xIYsFQKCFBU= Subject key identifier: 48:D5:6A:4A:BB:7B:8A:B0:90:15:52:35:97:CC:38:76:01:22:98:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA383BC980C1E0916A0680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 75.89.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:38:3b:c9:80:c1:e0:91:6a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=45d43aef-c02a-4065-a269-d2865b474c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:46:63:cd:1f:2b:72:f8:65:91:5c:65:dd: 91:77:ec:15:68:45:f2:13:a0:56:74:41:b8:56:1d: f4:89:3f:fb:ea:ba:df:3d:77:42:57:7d:8b:da:b6: ea:d9:e5:99:87:8b:b2:76:0d:45:1e:b4:b9:80:3b: 2e:3d:e7:71:6e:b9:90:8b:b0:3c:a0:fc:7d:88:80: b3:ae:8d:50:9f:f3:ea:22:e0:14:ce:9c:4b:f5:29: 05:75:19:8d:1e:7d:f0:02:e1:39:72:23:26:2b:99: fd:87:36:73:d0:9b:ff:22:83:8c:51:5d:65:b5:96: e2:b6:2c:bc:d2:4b:f6:a1:f9:fb:d3:69:02:b5:2e: 90:15:59:1e:b5:dd:34:27:75:ff:a7:47:f1:20:7c: c2:35:48:8e:9b:31:ca:39:e0:9f:49:24:cc:0a:bb: 93:64:34:af:7e:94:45:6e:37:0d:5e:e3:3b:92:14: 8b:64:85:3a:3c:20:06:b5:89:24:8e:57:3e:d3:6f: cf:76:14:5c:72:39:a8:4a:ee:0c:30:e9:77:b4:3c: db:0f:c0:63:86:79:07:c4:e4:58:df:37:35:fb:03: 16:52:a5:f5:b4:44:d8:dd:6f:41:0f:e2:77:cd:d4: f3:61:e2:f4:47:9f:b4:fd:4a:81:0b:9e:ef:b6:ad: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D5:6A:4A:BB:7B:8A:B0:90:15:52:35:97:CC:38:76:01:22:98:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4194b9a-5919-3a2c-94dc-6d4c61633dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ec:fc:06:8a:0e:04:5d:35:48:5f:08:99:c4:c8:d7:ff:93: 2d:6b:46:7a:70:67:b9:03:d9:f4:30:cc:83:99:a0:55:ec:e7: 16:23:90:b5:88:2a:6f:22:16:4f:e7:98:70:b9:04:f3:a7:af: 5d:ac:cb:28:ca:53:33:f2:3a:cd:8a:e8:35:70:6a:6b:53:f6: 11:ed:a5:50:5b:d1:16:1e:2f:0c:9c:9c:0b:fe:b2:ae:be:52: ea:75:85:38:c4:6e:26:2e:b0:d9:17:f7:da:2d:5f:52:3a:29: af:80:08:0e:4a:32:4d:67:aa:9b:dc:9f:05:c2:8f:8d:89:2e: 28:fa:20:c7:11:a1:ce:cd:f0:47:bb:bc:e0:ca:23:9a:82:a0: 07:cb:19:c8:94:58:97:30:a0:ae:4c:5c:83:c6:cc:83:16:61: fa:27:ac:2e:b4:6f:53:cd:2f:72:b9:ea:3b:4b:4d:ef:30:82: 92:ed:4c:29:7e:6c:64:61:1f:9e:f4:43:40:2b:a6:f6:1d:f8: 60:1b:44:9e:6e:ff:d4:30:f5:3c:1e:ef:af:91:6c:58:80:f9: df:7c:45:9d:54:e3:bb:0e:87:0c:76:eb:f9:17:4a:10:71:5d: e8:e9:dd:16:75:89:ce:21:11:fd:22:4f:cd:52:12:36:af:cf: e7:07:38:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2jg7yYDB4JFqBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk NDVkNDNhZWYtYzAyYS00MDY1LWEyNjktZDI4NjViNDc0YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yFGY80fK3L4ZZFcZd2Rd+wVaEXyE6BWdEG4 Vh30iT/76rrfPXdCV32L2rbq2eWZh4uydg1FHrS5gDsuPedxbrmQi7A8oPx9iICz ro1Qn/PqIuAUzpxL9SkFdRmNHn3wAuE5ciMmK5n9hzZz0Jv/IoOMUV1ltZbitiy8 0kv2ofn702kCtS6QFVketd00J3X/p0fxIHzCNUiOmzHKOeCfSSTMCruTZDSvfpRF bjcNXuM7khSLZIU6PCAGtYkkjlc+02/PdhRccjmoSu4MMOl3tDzbD8BjhnkHxORY 3zc1+wMWUqX1tETY3W9BD+J3zdTzYeL0R5+0/UqBC57vtq1t+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjVakq7e4qwkBVSNZfMOHYBIpjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQxOTRiOWEtNTkxOS0z YTJjLTk0ZGMtNmQ0YzYxNjMzZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1n4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7s/AaKDgRdNUhfCJnEyNf/ky1rRnpwZ7kD2fQwzIOZoFXs5xYjkLWI Km8iFk/nmHC5BPOnr12syyjKUzPyOs2K6DVwamtT9hHtpVBb0RYeLwycnAv+sq6+ Uup1hTjEbiYusNkX99otX1I6Ka+ACA5KMk1nqpvcnwXCj42JLij6IMcRoc7N8Ee7 vODKI5qCoAfLGciUWJcwoK5MXIPGzIMWYfonrC60b1PNL3K56jtLTe8wgpLtTCl+ bGRhH570Q0ArpvYd+GAbRJ5u/9Qw9Twe76+RbFiA+d98RZ1U47sOhwx26/kXShBx Xejp3RZ1ic4hEf0iT81SEjavz+cHOJs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:08:32 2026 by rpki-client