$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa File: de52a646-8150-3baa-964a-af38db1002f1.roa (raw, json) Hash identifier: 8nNkP/Xw9qOnYh3cCis9fPeS3WUxrDTzxbTrhRWBpnU= Subject key identifier: B0:99:00:8A:96:0E:ED:E5:C1:B3:2D:4C:42:66:E4:0C:6F:81:F8:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584DB7703889707A7B1B23590100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 7029 IP address blocks: 75.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:38:89:70:7a:7b:1b:23:59:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=73fb95ac-1e9f-4c9d-81e1-2a81e53416b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e2:68:b5:5f:bb:5c:fd:a7:f9:d3:6f:7a:f2: 53:ac:7d:04:8d:d5:8e:09:8f:bf:6e:21:b2:36:85: 37:c7:a5:4f:07:af:ad:64:1c:8d:25:dd:79:0c:e4: 47:d3:08:d5:bf:cf:ba:62:21:0b:bf:f6:b0:be:34: f8:8f:42:b1:5f:82:1d:af:c3:69:28:d5:c5:07:6e: 4c:ea:73:43:3b:01:0c:b8:b7:09:d4:e6:b3:78:50: 8f:dd:db:c2:4f:5a:3c:87:f4:78:da:f1:01:96:de: d8:d4:c9:1f:a3:2d:41:f6:d8:bc:68:e2:ee:f1:70: 48:1c:67:9a:75:dd:4a:3c:cc:bd:ee:15:4c:82:d3: fb:19:d1:25:0c:7f:a0:42:e1:95:e0:14:87:de:db: 62:ee:fb:1f:ce:8c:c3:1b:3f:19:6c:69:85:35:f0: c9:2f:86:6c:07:b3:b1:5f:73:37:f7:ff:90:ad:64: 8a:6c:48:7a:10:a1:15:49:b6:11:66:0f:0d:63:c4: 15:3d:a3:a0:34:9a:68:a8:96:ca:4a:3f:ee:25:49: 31:c3:82:ef:6d:40:b6:ea:1a:40:2b:6a:85:f5:41: ea:91:9f:29:0f:f1:34:52:6b:f8:f9:9f:76:41:56: b8:e3:39:72:04:a5:98:90:c1:6b:df:3f:7a:e2:a6: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:00:8A:96:0E:ED:E5:C1:B3:2D:4C:42:66:E4:0C:6F:81:F8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9c:b7:54:d7:74:0c:5b:07:bb:c9:52:32:21:4f:77:b3:9c: c4:4e:20:70:c0:7b:e9:7f:1b:68:b6:dd:41:d8:26:18:16:7b: 75:ed:bb:99:d2:61:2b:bb:d7:46:0a:d0:25:e4:fb:c2:f7:40: 7d:ce:02:b0:f7:ab:65:b4:5d:a9:00:4a:bb:36:fb:65:dd:92: e0:73:6b:51:6a:15:83:8a:b1:c9:e6:51:04:44:46:b0:e7:b8: de:cc:10:5f:db:65:f0:d1:90:94:15:34:04:bd:d9:34:c2:e3: b1:40:c3:a8:16:a8:a9:71:37:59:76:8c:f4:65:fc:65:6d:00: 93:b8:f4:03:3b:3d:fe:e4:dc:41:8d:c9:ec:5e:85:33:a3:a2: 18:5a:05:00:fd:71:40:d1:2d:f2:c8:84:c0:77:53:a9:6b:a6: 28:77:fa:48:f4:1a:88:3c:7c:4d:82:77:a4:bc:09:78:ff:b6: 89:b3:0f:fa:29:4f:86:eb:1c:a9:68:13:0d:56:c1:ad:ad:ae: 25:c1:b8:a6:5a:0f:6a:cc:ee:d9:18:a1:4a:c1:64:7e:5d:18: d0:42:c1:84:34:64:7c:90:86:9a:e5:03:d0:bc:18:d0:63:dc: c2:1e:de:d2:bc:86:88:d4:ad:68:9e:d4:ed:4d:43:18:fe:b5: 1b:80:55:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDiJcHp7GyNZAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk NzNmYjk1YWMtMWU5Zi00YzlkLTgxZTEtMmE4MWU1MzQxNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+JotV+7XP2n+dNvevJTrH0EjdWOCY+/biGy NoU3x6VPB6+tZByNJd15DORH0wjVv8+6YiELv/awvjT4j0KxX4Idr8NpKNXFB25M 6nNDOwEMuLcJ1OazeFCP3dvCT1o8h/R42vEBlt7Y1Mkfoy1B9ti8aOLu8XBIHGea dd1KPMy97hVMgtP7GdElDH+gQuGV4BSH3tti7vsfzozDGz8ZbGmFNfDJL4ZsB7Ox X3M39/+QrWSKbEh6EKEVSbYRZg8NY8QVPaOgNJpoqJbKSj/uJUkxw4LvbUC26hpA K2qF9UHqkZ8pD/E0Umv4+Z92QVa44zlyBKWYkMFr3z964qadcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCZAIqWDu3lwbMtTEJm5AxvgfjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU1MmE2NDYtODE1MC0z YmFhLTk2NGEtYWYzOGRiMTAwMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES3WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKct1TXdAxbB7vJUjIhT3eznMROIHDAe+l/G2i23UHYJhgWe3Xtu5nS YSu710YK0CXk+8L3QH3OArD3q2W0XakASrs2+2XdkuBza1FqFYOKscnmUQRERrDn uN7MEF/bZfDRkJQVNAS92TTC47FAw6gWqKlxN1l2jPRl/GVtAJO49AM7Pf7k3EGN yexehTOjohhaBQD9cUDRLfLIhMB3U6lrpih3+kj0Gog8fE2Cd6S8CXj/tomzD/op T4brHKloEw1Wwa2triXBuKZaD2rM7tkYoUrBZH5dGNBCwYQ0ZHyQhprlA9C8GNBj 3MIe3tK8hojUrWie1O1NQxj+tRuAVe8= -----END CERTIFICATE-----Generated at Wed May 13 11:41:13 2026 by rpki-client