$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa File: dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa (raw, json) Hash identifier: 54YwHCs0pDzpMMf40HgqEoT/LtbQIqFWPeSPGyCg5O0= Subject key identifier: 24:47:31:91:B3:E3:9C:48:3A:3B:19:32:CC:C0:D7:99:EC:36:FF:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A98794F703ABA6C711580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 75.89.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:98:79:4f:70:3a:ba:6c:71:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=9987b333-93f5-4807-9f8d-b206a025d5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:de:65:1f:1c:7a:f0:8a:72:90:ec:82:e1: a1:2a:d8:dd:7b:f2:0a:76:5e:29:3a:e8:c7:39:70: c8:57:22:84:e2:0a:2d:4d:d2:86:d7:cb:9e:ae:df: 3b:d6:7f:e4:ff:61:c4:aa:19:da:90:44:2a:3a:be: eb:34:ca:a3:00:b3:98:ed:a7:9c:53:06:d6:55:d0: d2:76:76:df:d9:12:91:cc:0f:96:b7:c3:8c:97:eb: 18:a1:5f:64:15:55:4a:c5:8d:8b:e9:0a:26:c3:b2: 29:d3:bb:cb:bb:f2:43:77:dc:4b:e4:87:2e:a2:1f: 37:a2:ab:58:ae:2a:7b:f0:14:fb:c7:5c:fb:60:e5: 2e:80:36:7f:60:a7:f2:4c:fb:df:f1:18:a4:be:8f: 3f:06:2d:1c:52:58:57:b8:d3:29:b6:55:e7:f1:52: 66:51:eb:a3:de:e2:9c:0c:76:99:15:45:89:2c:48: d5:e5:97:91:76:4e:1c:fa:71:a5:dd:c1:df:9f:4e: 75:6b:8b:40:3c:fc:f3:59:0b:de:df:92:cb:8e:8c: a9:61:b8:fe:f6:d6:13:1b:9c:e1:02:02:f5:1c:5b: e3:c6:94:75:bd:5c:70:83:35:02:3a:7d:24:ff:8c: 85:23:b2:7f:b2:76:09:6f:91:aa:42:dc:30:cf:bc: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:47:31:91:B3:E3:9C:48:3A:3B:19:32:CC:C0:D7:99:EC:36:FF:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc00b87c-d30d-36a0-b61c-c2c29be96ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:16:5c:cc:40:82:4e:02:7f:e0:d4:63:6d:31:4f:da:ae:83: de:e5:87:e4:bc:f1:08:06:fc:61:0a:19:e8:10:2e:53:b8:7d: 19:71:8e:13:3d:50:7a:a3:2f:a1:86:a1:07:55:2f:1a:24:45: 72:c9:53:14:90:81:73:f2:26:7d:7e:03:4a:10:bd:79:1f:35: 1b:47:95:04:d3:46:6c:7d:b2:96:75:5a:5d:50:ce:83:c5:60: 17:b6:89:06:ee:24:d0:05:ed:30:eb:5a:09:c7:1a:7d:3a:6d: 6d:ef:de:dc:66:d0:0c:5a:86:5f:83:61:8d:1f:c2:e9:ff:a3: 86:9b:31:5f:53:fe:2d:ab:59:49:26:6d:1f:4d:92:10:b9:1f: 0c:4c:e1:9d:74:f6:a3:f4:0e:27:0e:b6:71:5a:37:19:25:47: 12:b9:c1:84:77:38:eb:8f:cd:bc:78:06:6c:aa:7e:83:9d:85: 5c:28:f4:69:6e:17:a4:a4:17:c3:6d:e2:b5:0e:6d:44:10:6f: 7b:d0:f2:26:2a:39:8e:29:36:80:a8:f0:55:ef:e4:c9:6c:a8: 90:25:f6:23:13:19:6e:25:f7:42:d4:e6:f6:08:db:48:f3:df: 47:a2:99:76:3b:b8:bc:2b:fc:4d:00:92:d1:22:db:3e:5b:95: 1b:9e:82:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCph5T3A6umxxFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTk4N2IzMzMtOTNmNS00ODA3LTlmOGQtYjIwNmEwMjVkNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQveZR8cevCKcpDsguGhKtjde/IKdl4pOujH OXDIVyKE4gotTdKG18uert871n/k/2HEqhnakEQqOr7rNMqjALOY7aecUwbWVdDS dnbf2RKRzA+Wt8OMl+sYoV9kFVVKxY2L6Qomw7Ip07vLu/JDd9xL5Icuoh83oqtY rip78BT7x1z7YOUugDZ/YKfyTPvf8Rikvo8/Bi0cUlhXuNMptlXn8VJmUeuj3uKc DHaZFUWJLEjV5ZeRdk4c+nGl3cHfn051a4tAPPzzWQve35LLjoypYbj+9tYTG5zh AgL1HFvjxpR1vVxwgzUCOn0k/4yFI7J/snYJb5GqQtwwz7zdLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRHMZGz45xIOjsZMszA15nsNv/UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMwMGI4N2MtZDMwZC0z NmEwLWI2MWMtYzJjMjliZTk2ZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAWXMxAgk4Cf+DUY20xT9qug97lh+S88QgG/GEKGegQLlO4fRlxjhM9 UHqjL6GGoQdVLxokRXLJUxSQgXPyJn1+A0oQvXkfNRtHlQTTRmx9spZ1Wl1QzoPF YBe2iQbuJNAF7TDrWgnHGn06bW3v3txm0Axahl+DYY0fwun/o4abMV9T/i2rWUkm bR9NkhC5HwxM4Z109qP0DicOtnFaNxklRxK5wYR3OOuPzbx4BmyqfoOdhVwo9Glu F6SkF8Nt4rUObUQQb3vQ8iYqOY4pNoCo8FXv5MlsqJAl9iMTGW4l90LU5vYI20jz 30eimXY7uLwr/E0AktEi2z5blRueggM= -----END CERTIFICATE-----Generated at Thu Mar 26 09:07:52 2026 by rpki-client