$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa File: 17e2838b-017a-3e21-8f71-e3de49aaf056.roa (raw, json) Hash identifier: n4YS6yY09T0Ap6zEJ9YmYg8XwII18u/HWU5oKC/5U2g= Subject key identifier: 2E:F8:8C:EB:D1:3A:7D:F9:09:F8:B7:68:F4:02:2D:C0:78:02:14:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E104EF77007671D27D4B7AEC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 75.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:f7:70:07:67:1d:27:d4:b7:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=d85a01b3-2772-4b04-a922-698fcabbc4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c0:0f:87:1e:ef:94:5d:95:fc:00:c8:f1:b6: 31:0b:cb:27:a3:36:f5:65:43:42:5f:b9:65:d1:84: c9:92:07:e1:7c:80:44:a7:ba:7c:51:86:7b:c1:3c: c2:4e:36:ca:bc:50:3f:e8:56:85:1a:f7:54:24:c8: e9:9c:1d:5b:78:91:47:ca:79:0d:f0:32:9a:19:44: 98:c0:dc:a4:57:50:eb:a2:e5:4e:f0:a0:bb:10:84: 89:6e:a9:4c:db:7c:aa:19:6e:52:12:7d:01:c1:1a: 57:7a:d2:00:ae:76:8b:be:12:93:83:98:10:be:60: 27:18:ce:51:41:4a:b9:4f:18:6f:28:11:d1:d6:da: 93:13:be:07:19:bb:a7:68:bc:5c:9f:59:48:f6:f7: cf:b2:6d:8b:84:9b:e6:bc:32:e7:7f:5f:6e:65:63: 95:58:c1:74:cb:58:99:e5:6a:f4:36:24:41:06:f8: e1:cf:1d:cd:21:5c:3a:89:99:c5:e0:20:75:1f:90: 1c:36:53:33:a0:c1:37:cc:50:5b:81:8a:a3:25:8a: 32:37:ef:b5:2d:3d:b8:7f:6a:77:67:cd:e0:e9:76: 57:96:e8:29:ff:55:88:33:52:11:e8:3e:b1:a1:a0: 22:9e:71:9c:86:84:36:6a:d7:e0:e7:dc:dd:d1:6c: b8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F8:8C:EB:D1:3A:7D:F9:09:F8:B7:68:F4:02:2D:C0:78:02:14:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17e2838b-017a-3e21-8f71-e3de49aaf056.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:83:0f:f2:a2:6a:a1:fd:b4:5e:b6:8e:4e:ac:c8:bb:d9:15: 04:ac:05:ce:ea:72:ef:40:d8:01:2c:bd:d2:ee:93:95:85:6b: 1f:0b:22:ba:82:69:4e:ae:46:ab:8e:49:14:28:01:5a:19:47: 57:2c:40:3b:3f:d0:6d:89:a2:cc:79:5a:c3:89:e8:a3:e5:63: 80:61:5f:c0:72:29:8e:da:d0:fd:56:5d:2c:ff:cd:0a:35:72: 5c:e2:30:fb:19:e1:ef:45:33:d5:80:ec:4b:1e:b6:0e:da:c4: be:ee:42:ca:2b:0c:b3:d4:ad:ab:8f:90:9b:f4:c6:75:e2:99: 98:e9:a7:fe:f6:9d:ef:86:1a:9d:b2:1d:54:99:30:c2:e3:1f: 6e:d5:24:a2:81:7d:d7:4d:ef:0a:07:01:39:18:9b:6f:c5:12: eb:80:7c:98:76:da:24:52:17:a7:d0:0c:ef:d3:18:6b:12:b4: ae:41:3f:be:fe:e5:d5:e4:e4:2f:c4:f0:5b:86:67:2d:a0:3a: 2a:a7:6d:c2:37:77:09:21:83:82:7e:6d:fd:8e:ca:2d:e0:10: 75:f5:b1:9b:d8:59:7a:bb:90:36:4f:a7:6d:e7:da:55:ca:c2: 2e:04:10:bc:ed:84:7f:5e:59:9f:d1:3b:48:ec:2c:55:a3:f8: 52:e4:22:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTvdwB2cdJ9S3rsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZDg1YTAxYjMtMjc3Mi00YjA0LWE5MjItNjk4ZmNhYmJjNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMAPhx7vlF2V/ADI8bYxC8snozb1ZUNCX7ll 0YTJkgfhfIBEp7p8UYZ7wTzCTjbKvFA/6FaFGvdUJMjpnB1beJFHynkN8DKaGUSY wNykV1DrouVO8KC7EISJbqlM23yqGW5SEn0BwRpXetIArnaLvhKTg5gQvmAnGM5R QUq5TxhvKBHR1tqTE74HGbunaLxcn1lI9vfPsm2LhJvmvDLnf19uZWOVWMF0y1iZ 5Wr0NiRBBvjhzx3NIVw6iZnF4CB1H5AcNlMzoME3zFBbgYqjJYoyN++1LT24f2p3 Z83g6XZXlugp/1WIM1IR6D6xoaAinnGchoQ2atfg59zd0Wy4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC74jOvROn35Cfi3aPQCLcB4AhQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdlMjgzOGItMDE3YS0z ZTIxLThmNzEtZTNkZTQ5YWFmMDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWDD/KiaqH9tF62jk6syLvZFQSsBc7qcu9A2AEsvdLuk5WFax8LIrqC aU6uRquOSRQoAVoZR1csQDs/0G2Josx5WsOJ6KPlY4BhX8ByKY7a0P1WXSz/zQo1 clziMPsZ4e9FM9WA7Esetg7axL7uQsorDLPUrauPkJv0xnXimZjpp/72ne+GGp2y HVSZMMLjH27VJKKBfddN7woHATkYm2/FEuuAfJh22iRSF6fQDO/TGGsStK5BP77+ 5dXk5C/E8FuGZy2gOiqnbcI3dwkhg4J+bf2Oyi3gEHX1sZvYWXq7kDZPp23n2lXK wi4EELzthH9eWZ/RO0jsLFWj+FLkIvo= -----END CERTIFICATE-----Generated at Sat Jun 13 08:57:43 2026 by rpki-client