$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa File: e927098c-4722-3a1a-8c6b-5da635318786.roa (raw, json) Hash identifier: E0o9lJmjoCJq6xTqs0a+O8mw7ivCIEbejN1TQTX8mDw= Subject key identifier: 34:AD:14:67:10:E9:72:62:76:09:0C:2B:3E:73:C7:9D:18:D0:4D:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2BDA128D19427CE8F8DB8860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 7029 IP address blocks: 75.88.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:12:8d:19:42:7c:e8:f8:db:88:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=cd49d0cf-c31e-4197-928e-ffd839e8a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:96:73:4e:89:42:f6:42:e1:d1:87:bb:c3:ef: 7b:43:ad:41:f8:fb:42:ca:34:66:c2:e6:81:9f:dc: 9b:2c:78:a3:3d:be:6d:58:ff:e0:db:8f:31:04:98: 27:86:79:fa:70:b0:5a:3a:5a:e4:69:12:46:7f:41: 70:86:fa:ca:41:88:63:3d:38:2d:7b:50:20:ab:ad: e6:bc:ec:dd:e9:1a:6b:1b:0e:f8:40:fb:99:6c:96: 4e:fa:5a:42:fd:97:2e:6d:9a:a3:7c:82:42:88:52: 37:be:63:7e:30:d8:a7:33:5b:c3:f5:d8:3a:d1:a0: 5f:07:14:d4:69:ee:c8:9c:ce:e1:26:c9:64:ba:86: 49:0f:f5:4f:9a:ad:50:d5:63:8b:91:0d:39:ba:ec: 58:bc:f9:6c:db:ea:94:bf:d6:c4:31:d2:94:35:e6: 43:f1:d2:69:a1:42:93:4d:8a:13:64:e8:78:da:62: f4:fd:2c:64:09:97:bc:20:8a:19:62:d4:48:af:ae: ea:e9:2c:10:cd:c4:63:8a:5a:8e:dc:c6:e8:a0:00: ef:a8:a6:55:1a:01:e2:17:a1:44:2b:c7:64:a9:cd: 7c:22:94:64:54:24:7e:e8:a8:1a:e3:ab:92:e2:f1: a2:51:a2:6d:09:75:48:d1:e3:4c:12:76:8c:a1:b6: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:14:67:10:E9:72:62:76:09:0C:2B:3E:73:C7:9D:18:D0:4D:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e927098c-4722-3a1a-8c6b-5da635318786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:25:ae:ff:81:a7:98:da:2f:4c:6f:3e:9b:3a:cf:d4:78:10: f8:28:cd:44:da:99:d5:0a:e7:74:90:42:03:93:aa:2f:d2:91: 12:64:aa:2b:f8:f6:2c:76:22:89:66:1b:28:f6:82:06:19:1a: d1:aa:9a:86:f0:73:bc:72:f6:92:7a:03:17:c2:48:71:39:41: 51:f2:ae:d3:9b:80:f8:5a:88:08:f2:f9:d9:2c:b1:e3:02:c2: b2:66:47:74:b9:ed:3c:9b:23:5f:df:64:a5:51:a6:a7:ba:31: a0:de:17:57:b6:ee:06:1e:19:d6:7e:b2:5e:84:f9:a6:62:5f: 83:91:f3:a7:27:75:1c:24:e0:52:bf:a6:c8:e0:05:47:2a:c3: 67:4a:2e:2e:1d:7a:7e:87:9a:45:e9:83:03:e3:6f:ff:92:93: 46:c5:5d:6b:04:93:a7:9e:fc:62:15:cd:21:08:c7:2c:79:dc: 25:cb:81:26:cc:a9:b4:e0:f2:e5:8c:b5:63:28:87:49:ef:6d: 71:c8:12:66:10:03:c5:77:15:16:eb:cc:13:3d:8e:3b:ba:f9: a8:92:23:c8:3c:ac:8b:b4:f7:0b:3b:cb:d7:c8:4e:ee:57:a0: 22:83:2f:2e:b8:8c:42:22:b4:84:1e:09:9e:20:34:de:2a:2d: 02:4a:29:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hKNGUJ86PjbiGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q0OWQwY2YtYzMxZS00MTk3LTkyOGUtZmZkODM5ZThhNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ZzTolC9kLh0Ye7w+97Q61B+PtCyjRmwuaB n9ybLHijPb5tWP/g248xBJgnhnn6cLBaOlrkaRJGf0FwhvrKQYhjPTgte1Agq63m vOzd6RprGw74QPuZbJZO+lpC/ZcubZqjfIJCiFI3vmN+MNinM1vD9dg60aBfBxTU ae7InM7hJslkuoZJD/VPmq1Q1WOLkQ05uuxYvPls2+qUv9bEMdKUNeZD8dJpoUKT TYoTZOh42mL0/SxkCZe8IIoZYtRIr67q6SwQzcRjilqO3MbooADvqKZVGgHiF6FE K8dkqc18IpRkVCR+6Kga46uS4vGiUaJtCXVI0eNMEnaMobZ8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDStFGcQ6XJidgkMKz5zx50Y0E2mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTkyNzA5OGMtNDcyMi0z YTFhLThjNmItNWRhNjM1MzE4Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1gYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAlrv+Bp5jaL0xvPps6z9R4EPgozUTamdUK53SQQgOTqi/SkRJkqiv4 9ix2IolmGyj2ggYZGtGqmobwc7xy9pJ6AxfCSHE5QVHyrtObgPhaiAjy+dksseMC wrJmR3S57TybI1/fZKVRpqe6MaDeF1e27gYeGdZ+sl6E+aZiX4OR86cndRwk4FK/ psjgBUcqw2dKLi4den6HmkXpgwPjb/+Sk0bFXWsEk6ee/GIVzSEIxyx53CXLgSbM qbTg8uWMtWMoh0nvbXHIEmYQA8V3FRbrzBM9jju6+aiSI8g8rIu09ws7y9fITu5X oCKDLy64jEIitIQeCZ4gNN4qLQJKKXE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:32 2026 by rpki-client