$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa File: 20370447-4dbe-31bc-8435-e733a838a637.roa (raw, json) Hash identifier: W+RlW1YXDOHsq9WFT9WNK8H6CSUiA/jH06/1iYWgD4o= Subject key identifier: 18:66:39:31:DC:A9:15:19:6A:12:FE:5E:15:10:F7:D5:25:BF:12:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A97BFB190EC213AFA2380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 75.89.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:97:bf:b1:90:ec:21:3a:fa:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=89e8b630-8590-4309-86d9-7494e981864d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:59:ad:87:a1:3f:3d:a9:79:5c:3d:1f:6c: 23:be:8f:07:70:ad:a2:bf:ed:3c:7d:99:01:3c:75: ab:9c:a7:e3:23:06:22:25:5d:ed:e2:34:16:af:55: b0:56:01:58:51:d3:7e:21:b4:9f:43:24:be:77:c6: ae:b6:21:b7:d7:2a:e3:e4:d2:bf:51:83:37:11:2e: 8c:ff:89:33:6d:1e:cb:f9:e4:c1:ce:59:2b:4e:49: 30:30:ff:85:cf:fd:ea:71:23:9a:e4:f4:60:d7:a1: cd:c9:f3:c0:42:e0:c2:6f:f7:f7:7b:7c:19:82:e9: 0e:01:5f:6b:99:35:63:8d:ba:5f:49:8d:06:b3:e5: 26:bf:63:a6:4c:e4:fc:e5:ae:f2:9e:1a:d7:fd:0d: 39:48:d5:e8:a4:0e:8a:a4:38:db:05:73:5c:a1:e9: a9:3b:8d:cf:fd:e4:8a:c4:d3:3e:20:a9:3b:e9:1f: 9e:a2:52:8e:a4:89:0c:54:b9:dc:60:83:2b:a4:91: 8e:be:3f:a7:b3:44:5b:b3:d2:4d:2e:75:35:9a:79: 1e:41:c3:05:b3:b9:38:93:6d:5a:ac:32:44:ce:e4: a5:56:7e:8a:28:9a:d6:2a:bd:27:cb:83:13:87:cb: 4f:be:b2:89:07:70:66:3d:33:2c:f3:cb:35:f0:a0: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:39:31:DC:A9:15:19:6A:12:FE:5E:15:10:F7:D5:25:BF:12:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7a:2b:91:a4:85:85:93:98:ee:d4:cc:37:d2:6a:a4:74:f4: 08:6f:c6:69:e5:8e:7b:31:33:ff:39:0b:d5:ca:9a:93:3e:fe: d5:62:2b:d6:24:41:f3:7f:4c:ee:c0:35:7a:c1:f3:68:27:62: 5c:a0:82:d6:07:02:e7:7e:36:da:cb:ac:04:57:b1:f9:1c:64: 80:f7:67:2e:37:88:31:30:8f:11:fd:38:c0:1d:8a:20:a6:8f: 6f:aa:0b:ca:1f:d0:d3:23:2f:e1:ea:aa:f5:e9:c3:95:11:ed: d0:89:d8:62:62:36:31:d6:90:71:71:92:49:09:32:ca:fe:66: 1f:22:47:fa:1b:40:b7:30:ee:d6:41:1b:c8:1e:17:08:9f:49: 7a:59:9f:86:a3:0b:ce:78:2b:3d:33:25:50:e1:73:3f:32:f4: 1d:94:79:cd:10:79:2f:23:04:4c:18:a6:cc:38:d9:4b:08:e1: e4:f6:ac:4e:79:97:9b:b0:fc:88:22:3b:82:71:df:c2:62:1d: 9f:bb:ea:1b:42:b6:d8:d9:9d:5b:0e:88:99:2e:30:41:91:96: aa:57:49:00:33:fd:f1:37:0f:cd:42:1b:0e:f2:32:23:f9:b3: e1:9b:b1:12:b4:80:22:bf:3f:04:7d:ac:79:fe:da:ec:1f:33: 6a:9f:02:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpe/sZDsITr6I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ODllOGI2MzAtODU5MC00MzA5LTg2ZDktNzQ5NGU5ODE4NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKVZrYehPz2peVw9H2wjvo8HcK2iv+08fZkB PHWrnKfjIwYiJV3t4jQWr1WwVgFYUdN+IbSfQyS+d8autiG31yrj5NK/UYM3ES6M /4kzbR7L+eTBzlkrTkkwMP+Fz/3qcSOa5PRg16HNyfPAQuDCb/f3e3wZgukOAV9r mTVjjbpfSY0Gs+Umv2OmTOT85a7ynhrX/Q05SNXopA6KpDjbBXNcoempO43P/eSK xNM+IKk76R+eolKOpIkMVLncYIMrpJGOvj+ns0Rbs9JNLnU1mnkeQcMFs7k4k21a rDJEzuSlVn6KKJrWKr0ny4MTh8tPvrKJB3BmPTMs88s18KCt3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhmOTHcqRUZahL+XhUQ99UlvxJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAzNzA0NDctNGRiZS0z MWJjLTg0MzUtZTczM2E4MzhhNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp6K5GkhYWTmO7UzDfSaqR09AhvxmnljnsxM/85C9XKmpM+/tViK9Yk QfN/TO7ANXrB82gnYlyggtYHAud+NtrLrARXsfkcZID3Zy43iDEwjxH9OMAdiiCm j2+qC8of0NMjL+HqqvXpw5UR7dCJ2GJiNjHWkHFxkkkJMsr+Zh8iR/obQLcw7tZB G8geFwifSXpZn4ajC854Kz0zJVDhcz8y9B2Uec0QeS8jBEwYpsw42UsI4eT2rE55 l5uw/IgiO4Jx38JiHZ+76htCttjZnVsOiJkuMEGRlqpXSQAz/fE3D81CGw7yMiP5 s+GbsRK0gCK/PwR9rHn+2uwfM2qfAvs= -----END CERTIFICATE-----Generated at Fri Apr 17 20:51:31 2026 by rpki-client