$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03cf7200-15db-3b2d-8887-cbc6e01e2156.roa File: 03cf7200-15db-3b2d-8887-cbc6e01e2156.roa (raw, json) Hash identifier: UMU0cPO/3GUqfdV1STcHVIvVbHNWkODq+nwk7hZt+Dc= Subject key identifier: 8F:A9:32:82:F2:E0:0E:5D:0B:5B:FF:6C:A4:43:A4:B2:EB:C3:64:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F0242322CCF74F60B1726F900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03cf7200-15db-3b2d-8887-cbc6e01e2156.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 75.91.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:32:2c:cf:74:f6:0b:17:26:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=06e32f27-c7c3-4fe8-956e-3ad4a5c784b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:11:fc:eb:d9:af:95:c4:8a:dd:05:ec:2b: 42:99:b8:02:ad:df:a8:08:26:d5:5d:0b:05:3b:11: 6e:88:4b:2c:73:a4:ee:0f:6c:13:4b:4f:03:d8:99: ad:68:0d:38:6d:8c:94:87:4c:d7:53:10:8e:cb:42: 1b:59:28:ab:07:bc:f0:a5:ef:36:a7:b1:d7:ea:12: 23:96:bc:53:6b:c4:a7:a4:c8:43:1f:09:5a:de:f3: e3:23:49:d2:ee:df:49:b1:eb:8a:5a:c0:3e:0c:69: 20:c5:dc:77:71:17:1b:de:43:85:7a:bc:4b:d3:ec: 8e:7d:1a:3e:8d:2e:07:b9:b3:9e:3f:84:bd:79:ef: b4:bd:c5:66:23:94:3e:df:ac:97:6e:4f:18:4d:7f: 4b:69:f1:1e:6f:75:1f:90:ef:60:3b:90:b1:17:90: 2c:15:e5:e3:67:96:93:28:06:a6:47:cf:e5:08:b9: e1:70:d6:3c:43:72:67:71:41:77:63:c4:a0:4b:87: 9e:40:4e:25:c2:78:d6:b5:cb:22:d4:36:b0:51:42: b7:25:7e:15:e7:7e:3d:de:0a:97:98:a7:5c:09:56: ce:44:25:10:a3:cf:85:9e:8d:bd:f6:42:67:65:f3: 07:38:9b:35:be:fe:a0:70:66:cc:c1:e5:60:ce:11: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A9:32:82:F2:E0:0E:5D:0B:5B:FF:6C:A4:43:A4:B2:EB:C3:64:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03cf7200-15db-3b2d-8887-cbc6e01e2156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0c:7f:7c:75:df:ee:07:74:01:fd:2d:a3:67:6c:a8:73:a3: 92:2f:bc:89:11:bb:fe:47:0d:0c:3d:17:13:99:01:49:08:8c: 63:11:f0:b4:78:21:82:6b:d7:5f:83:6b:20:3c:03:35:70:01: c1:61:95:27:bd:26:e7:0c:bf:bd:ab:30:88:7e:ee:93:b3:19: 26:d3:00:fa:8b:65:3f:9c:f7:41:ee:95:a0:0c:9a:47:fb:dc: 5f:5a:e2:ba:21:1c:5d:86:78:ca:9e:28:da:c1:cd:92:56:27: 98:aa:2e:95:71:01:6e:0c:a3:46:cb:26:29:8b:d3:10:cf:e5: b2:61:a5:4f:28:98:e1:e2:ec:90:36:a9:67:fe:1f:10:0d:c6: 17:13:00:dd:ae:4b:b1:7f:c8:45:33:fd:b9:c0:7d:4f:60:ad: 30:06:43:3b:b7:6e:9d:86:22:56:b9:31:16:5d:c6:06:c2:54: b2:de:1a:71:1d:49:e3:44:71:59:31:52:e2:41:3e:51:75:37: 81:5a:b9:b7:a9:82:f9:b7:f6:6e:59:c7:d7:c4:65:98:22:a8: 42:11:d5:c4:82:aa:23:86:f7:28:66:3e:25:5a:ce:f4:ae:dc: 37:e0:03:f4:6f:06:c5:a6:4a:f9:4b:38:93:ab:4c:79:ad:80: be:48:fa:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjIsz3T2Cxcm+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MDZlMzJmMjctYzdjMy00ZmU4LTk1NmUtM2FkNGE1Yzc4NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD4R/OvZr5XEit0F7CtCmbgCrd+oCCbVXQsF OxFuiEssc6TuD2wTS08D2JmtaA04bYyUh0zXUxCOy0IbWSirB7zwpe82p7HX6hIj lrxTa8SnpMhDHwla3vPjI0nS7t9JseuKWsA+DGkgxdx3cRcb3kOFerxL0+yOfRo+ jS4HubOeP4S9ee+0vcVmI5Q+36yXbk8YTX9LafEeb3UfkO9gO5CxF5AsFeXjZ5aT KAamR8/lCLnhcNY8Q3JncUF3Y8SgS4eeQE4lwnjWtcsi1DawUUK3JX4V53493gqX mKdcCVbORCUQo8+Fno299kJnZfMHOJs1vv6gcGbMweVgzhHw0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+pMoLy4A5dC1v/bKRDpLLrw2TQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDNjZjcyMDAtMTVkYi0z YjJkLTg4ODctY2JjNmUwMWUyMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsMf3x13+4HdAH9LaNnbKhzo5IvvIkRu/5HDQw9FxOZAUkIjGMR8LR4 IYJr11+DayA8AzVwAcFhlSe9JucMv72rMIh+7pOzGSbTAPqLZT+c90HulaAMmkf7 3F9a4rohHF2GeMqeKNrBzZJWJ5iqLpVxAW4Mo0bLJimL0xDP5bJhpU8omOHi7JA2 qWf+HxANxhcTAN2uS7F/yEUz/bnAfU9grTAGQzu3bp2GIla5MRZdxgbCVLLeGnEd SeNEcVkxUuJBPlF1N4Faubepgvm39m5Zx9fEZZgiqEIR1cSCqiOG9yhmPiVazvSu 3DfgA/RvBsWmSvlLOJOrTHmtgL5I+nE= -----END CERTIFICATE-----Generated at Sun Sep 20 23:38:47 2026 by rpki-client