$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa File: de52a646-8150-3baa-964a-af38db1002f1.roa (raw, json) Hash identifier: pa9HpXRxvFxfoLRqsN3LGM7zzeoAokPnUhL0YCWQ23M= Subject key identifier: 86:D9:C2:F1:DE:97:3B:D0:72:56:E4:53:1C:B2:E8:81:9C:AD:52:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E97B50A9D5AB4DD52EE6ED100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 7029 IP address blocks: 75.117.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:0a:9d:5a:b4:dd:52:ee:6e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=4fa1f30d-1d61-4b66-9457-52ef35e89a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2a:da:e7:a7:23:59:32:2d:c7:dc:21:17:0e: 42:68:7d:5f:f5:e0:fe:ce:9f:ce:e9:6d:27:25:dc: 52:9f:a8:8f:5e:c8:26:c8:f9:e8:db:8d:5e:21:8e: a2:5d:6e:ed:1b:99:58:58:fe:e6:66:27:9d:7f:c5: e8:88:01:43:51:b4:52:f0:65:c4:0f:0a:6e:71:dd: 57:53:fc:fb:a8:16:73:4c:f8:63:43:9d:47:e9:f5: d5:c0:7d:19:ed:50:c4:f2:df:3a:a1:fb:cc:72:41: c2:da:eb:ea:c4:3e:e5:18:d0:c6:5b:6a:19:d0:10: 71:56:f6:2e:7a:6a:29:5e:a2:26:29:af:14:ae:77: 7f:13:5f:9e:d6:2e:44:2b:b7:d7:00:d3:ae:e7:b1: b2:20:f5:6b:22:26:14:7c:92:e5:1e:1e:cd:7e:c3: 0d:1e:c4:b8:fa:cb:21:ed:54:43:c0:10:2b:d4:49: 81:59:ec:59:94:38:5f:2c:43:e8:1e:6b:56:2e:c9: 88:f3:31:ef:cb:ac:f3:78:a5:cc:d8:b7:52:aa:5e: 02:cc:17:f0:88:8a:57:75:9b:d6:de:50:a5:f5:f5: f0:6e:4e:de:1c:1a:f4:6b:03:75:70:9b:6c:15:59: ab:e6:c2:7f:a0:cd:f8:97:04:46:88:a5:b2:54:95: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D9:C2:F1:DE:97:3B:D0:72:56:E4:53:1C:B2:E8:81:9C:AD:52:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de52a646-8150-3baa-964a-af38db1002f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:84:88:07:01:51:e6:06:b4:70:4a:1c:94:e6:f6:f8:eb:e2: 33:d1:6b:12:a9:78:7f:1b:35:2d:cf:ff:e2:37:a5:20:61:ac: b0:2c:93:79:22:08:7d:29:4b:b7:37:93:2b:47:e5:a5:69:85: 14:64:6e:7f:95:cf:73:0e:3e:f2:29:cd:54:44:87:d3:f3:02: ed:36:47:9f:ec:ac:88:19:46:3d:0a:1e:c0:d2:ee:03:1f:b4: d2:0c:f7:ed:cd:f2:61:72:42:b5:7e:62:91:19:50:cb:cd:68: d4:27:fe:36:cf:f5:b2:6b:a7:8e:b2:cf:6b:8c:5f:a8:27:ce: 46:96:a7:b8:83:e7:a1:b3:92:64:4c:55:6c:f5:3b:5d:82:e2: de:3c:0c:c5:c7:84:92:4c:e1:2d:60:96:9f:61:35:52:eb:41: 98:2f:c2:48:c5:bd:98:75:06:aa:48:34:a0:eb:15:a0:8d:dd: ea:d6:24:5d:47:3b:9f:aa:51:ea:f1:ff:86:9a:42:de:9c:50: eb:a2:a2:be:be:4c:e3:88:f4:47:d8:82:90:b2:95:a2:0a:62: 2c:63:df:1f:52:08:88:bd:22:50:d2:29:4c:0e:4b:13:b0:11: 11:f2:58:72:75:e5:39:d8:e8:cc:eb:9e:bd:c9:06:56:51:f9: d0:9b:87:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQqdWrTdUu5u0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk NGZhMWYzMGQtMWQ2MS00YjY2LTk0NTctNTJlZjM1ZTg5YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Sra56cjWTItx9whFw5CaH1f9eD+zp/O6W0n JdxSn6iPXsgmyPno241eIY6iXW7tG5lYWP7mZiedf8XoiAFDUbRS8GXEDwpucd1X U/z7qBZzTPhjQ51H6fXVwH0Z7VDE8t86ofvMckHC2uvqxD7lGNDGW2oZ0BBxVvYu emopXqImKa8Urnd/E1+e1i5EK7fXANOu57GyIPVrIiYUfJLlHh7NfsMNHsS4+ssh 7VRDwBAr1EmBWexZlDhfLEPoHmtWLsmI8zHvy6zzeKXM2LdSql4CzBfwiIpXdZvW 3lCl9fXwbk7eHBr0awN1cJtsFVmr5sJ/oM34lwRGiKWyVJWcUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbZwvHelzvQclbkUxyy6IGcrVLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU1MmE2NDYtODE1MC0z YmFhLTk2NGEtYWYzOGRiMTAwMmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES3WwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaEiAcBUeYGtHBKHJTm9vjr4jPRaxKpeH8bNS3P/+I3pSBhrLAsk3ki CH0pS7c3kytH5aVphRRkbn+Vz3MOPvIpzVREh9PzAu02R5/srIgZRj0KHsDS7gMf tNIM9+3N8mFyQrV+YpEZUMvNaNQn/jbP9bJrp46yz2uMX6gnzkaWp7iD56GzkmRM VWz1O12C4t48DMXHhJJM4S1glp9hNVLrQZgvwkjFvZh1BqpINKDrFaCN3erWJF1H O5+qUerx/4aaQt6cUOuior6+TOOI9EfYgpCylaIKYixj3x9SCIi9IlDSKUwOSxOw ERHyWHJ15TnY6Mzrnr3JBlZR+dCbh9g= -----END CERTIFICATE-----Generated at Thu Jul 23 23:17:35 2026 by rpki-client