$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f9319ba-75f6-35e8-a280-9ea385a445db.roa File: 3f9319ba-75f6-35e8-a280-9ea385a445db.roa (raw, json) Hash identifier: +aGw+vxQZ47LB5ks2vMzRU0XTAUWx9fR8pi7vMOMjBM= Subject key identifier: 06:AE:B0:92:72:7F:A4:2E:5D:D4:1E:C6:B1:C0:BA:A2:A6:60:D7:9A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1EEF20C96816F4BDFBD680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f9319ba-75f6-35e8-a280-9ea385a445db.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 75.117.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ef:20:c9:68:16:f4:bd:fb:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=ea6c3368-9f6c-4385-8888-932cd5f4dca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:5d:08:0d:ca:a5:60:be:97:e9:a7:93:02: fb:b7:a1:33:41:bc:e9:1b:1e:20:2f:30:c1:39:3e: 83:a2:11:f7:67:07:a2:2e:15:ed:ed:97:d9:e7:e5: c0:9c:18:43:39:42:53:84:93:65:f0:af:c6:3b:69: 94:9a:01:38:81:bf:ae:48:a5:74:a8:1d:0e:a4:51: 8d:cc:a1:67:49:f8:98:78:b3:f2:9b:20:7e:ea:ff: c4:2b:99:ad:0a:45:fc:1f:c4:e7:db:e5:b0:41:73: 8e:d9:5d:17:4e:77:28:de:d9:df:6b:c0:5c:48:bf: 64:8c:89:03:78:13:a1:af:b5:32:dc:b6:f9:07:ad: 32:e4:b4:31:d7:f8:f5:c1:53:e2:57:9d:71:e4:d2: 9c:36:ed:a0:29:da:d0:90:7a:3c:a7:35:53:28:62: e7:1e:d2:5d:7c:8e:67:9a:af:02:90:1d:1e:bc:37: 3b:53:1e:55:f5:0f:65:e5:43:c3:de:75:26:16:ac: 13:6a:e9:2c:98:fd:9d:b9:97:92:b7:c4:19:fe:7c: 09:c1:b1:0d:82:23:3a:3c:bb:03:22:1e:33:03:ca: 6a:cc:6d:f6:58:97:98:5d:4c:d3:c4:7e:ef:8c:2f: 0f:10:b6:65:d6:71:53:bf:42:1f:85:08:9d:ed:5d: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AE:B0:92:72:7F:A4:2E:5D:D4:1E:C6:B1:C0:BA:A2:A6:60:D7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f9319ba-75f6-35e8-a280-9ea385a445db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c7:7c:5c:eb:07:42:9e:0b:58:49:09:07:54:11:7a:39:7f: 4b:5c:62:4f:c3:76:d8:41:bb:92:5f:2c:32:e3:fe:25:50:dc: fb:b8:d0:92:e3:a4:e6:ec:af:31:f1:89:54:f0:f6:e2:8b:a2: 99:e2:d8:e4:bc:37:b4:0d:f8:23:5c:40:de:2a:eb:99:20:0a: 11:9b:27:a4:79:bf:e3:1d:48:b9:a7:11:3a:61:1f:9b:72:50: e3:2b:7c:85:78:33:01:26:9e:c0:5d:0f:5d:78:4a:b1:be:d0: 79:a4:22:05:ae:01:83:d2:a2:28:55:95:af:50:3b:e1:c2:11: 73:dc:36:02:59:46:62:4f:bf:de:ce:88:7e:cd:fa:f2:e4:48: 9c:bd:3d:b1:d0:33:ff:97:14:ed:59:ed:1f:1e:ca:47:17:ab: 4a:99:2d:b0:07:15:0b:98:87:84:6e:c6:64:f0:e6:b0:4e:c2: a1:59:bb:d2:b7:66:cc:a3:c9:85:61:90:f9:be:75:40:14:1f: 5b:20:b2:f2:68:fc:d9:3d:5d:6f:71:3a:9f:2f:00:2a:aa:29: 81:77:7d:50:15:54:e0:8b:8e:58:dd:da:a9:db:96:9b:61:b5: 75:c4:eb:b8:85:6b:bf:59:f1:6f:0a:7a:76:23:0d:f3:64:ce: 3c:41:1b:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHu8gyWgW9L371oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZWE2YzMzNjgtOWY2Yy00Mzg1LTg4ODgtOTMyY2Q1ZjRkY2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNZdCA3KpWC+l+mnkwL7t6EzQbzpGx4gLzDB OT6DohH3ZweiLhXt7ZfZ5+XAnBhDOUJThJNl8K/GO2mUmgE4gb+uSKV0qB0OpFGN zKFnSfiYeLPymyB+6v/EK5mtCkX8H8Tn2+WwQXOO2V0XTnco3tnfa8BcSL9kjIkD eBOhr7Uy3Lb5B60y5LQx1/j1wVPiV51x5NKcNu2gKdrQkHo8pzVTKGLnHtJdfI5n mq8CkB0evDc7Ux5V9Q9l5UPD3nUmFqwTauksmP2duZeSt8QZ/nwJwbENgiM6PLsD Ih4zA8pqzG32WJeYXUzTxH7vjC8PELZl1nFTv0IfhQid7V3bpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAausJJyf6QuXdQexrHAuqKmYNeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Y5MzE5YmEtNzVmNi0z NWU4LWEyODAtOWVhMzg1YTQ0NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3VBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnHfFzrB0KeC1hJCQdUEXo5f0tcYk/DdthBu5JfLDLj/iVQ3Pu40JLj pObsrzHxiVTw9uKLopni2OS8N7QN+CNcQN4q65kgChGbJ6R5v+MdSLmnETphH5ty UOMrfIV4MwEmnsBdD114SrG+0HmkIgWuAYPSoihVla9QO+HCEXPcNgJZRmJPv97O iH7N+vLkSJy9PbHQM/+XFO1Z7R8eykcXq0qZLbAHFQuYh4RuxmTw5rBOwqFZu9K3 ZsyjyYVhkPm+dUAUH1sgsvJo/Nk9XW9xOp8vACqqKYF3fVAVVOCLjljd2qnblpth tXXE67iFa79Z8W8KenYjDfNkzjxBG38= -----END CERTIFICATE-----Generated at Sat Jun 13 07:23:32 2026 by rpki-client