$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa File: 75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa (raw, json) Hash identifier: +n3EhjS0u13838eJl3yCCbiIGs+QfFZUTaAphrzslO4= Subject key identifier: 5B:E3:BF:D3:16:8B:A3:85:BD:55:22:4E:9E:96:6E:B5:D8:18:C8:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F6C58520B7998387C6EC12000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 209.2.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:52:0b:79:98:38:7c:6e:c1:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=3983e98b-386b-4587-a20c-9d63f30cb477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:5f:eb:49:77:e8:b6:a1:c2:dc:cb:6a:84: 84:fd:50:02:19:f9:f5:c0:2d:af:2f:03:a0:11:ee: 2f:5d:83:e3:fb:2d:18:35:a4:ff:91:b4:fa:27:48: 74:2d:ff:41:2e:04:58:eb:73:05:3b:5d:32:44:f3: f5:e0:78:62:41:bd:bd:8c:17:12:aa:8f:b8:71:d6: e3:3f:2d:d6:2d:48:f0:78:39:f5:7c:a1:30:7b:e3: 12:79:1f:f8:94:85:89:12:45:49:54:16:c3:36:af: da:4e:0d:8b:a8:32:04:4d:b6:50:90:f9:5f:47:14: fc:b7:80:39:40:6b:d2:73:73:26:25:b5:dd:f9:2f: 6d:90:b8:c9:7e:29:9c:79:93:40:4a:ef:e5:82:8a: 8b:df:08:e6:62:43:e5:2e:05:17:1e:6a:1f:7f:39: da:a5:f9:a3:47:81:84:78:0f:e2:68:58:7b:60:17: 3e:57:73:a9:c8:9f:0f:ce:fa:2f:4c:87:94:5f:6a: 26:b9:57:78:16:74:63:52:14:aa:8e:92:25:51:45: c4:21:f4:c8:49:fb:de:c0:24:89:36:27:fb:92:c2: 46:0a:12:7a:84:80:16:27:08:f7:44:f6:dc:d7:f7: 37:ab:90:3f:01:f1:57:ec:ed:70:a1:11:09:4e:be: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E3:BF:D3:16:8B:A3:85:BD:55:22:4E:9E:96:6E:B5:D8:18:C8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75791fe6-f1b4-30b1-a525-2d08d4fb1d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:ca:7b:17:16:d7:e9:7c:2d:56:41:ec:70:0a:88:ea:72: e5:c6:fc:9b:2d:28:aa:57:88:3f:5d:e3:b3:cb:08:12:a0:26: 44:c8:b3:17:17:36:b3:02:2b:bd:93:ee:e2:35:af:8c:f6:87: 59:db:cb:1e:65:42:18:11:be:14:fa:6e:76:e8:b1:a9:e7:cb: 9b:23:d0:b6:e0:06:09:60:79:e5:84:8c:47:7a:75:65:c6:1b: a9:1b:90:4a:da:ae:13:c3:e9:00:8d:a9:84:57:05:ca:63:fb: e0:3f:2d:80:8b:f7:7d:64:15:12:87:e0:c2:47:7d:fa:6b:fe: 63:b6:18:17:2d:27:c2:7c:6a:6c:08:71:38:ef:6e:d3:d7:8c: 89:26:fe:c7:1b:99:d2:f1:ee:9a:74:3a:03:19:71:98:04:55: cf:b5:b7:f4:9a:50:3a:7d:b5:9d:55:08:2f:d5:43:45:39:a4: e0:2b:e3:40:92:22:c6:a3:ec:6d:28:e6:3f:79:ff:88:4b:20: d2:e4:d8:2a:fe:9f:fb:3c:ea:79:6a:51:cc:8f:b4:2e:5a:eb: 80:d5:74:3b:1a:dc:c5:97:16:fb:0f:5e:fa:61:cd:00:72:6a: 2a:30:a3:ba:6f:22:d3:87:83:ec:7c:57:1e:e6:77:7e:2f:cc: 50:3b:54:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWFILeZg4fG7BIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Mzk4M2U5OGItMzg2Yi00NTg3LWEyMGMtOWQ2M2YzMGNiNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VBf60l36LahwtzLaoSE/VACGfn1wC2vLwOg Ee4vXYPj+y0YNaT/kbT6J0h0Lf9BLgRY63MFO10yRPP14HhiQb29jBcSqo+4cdbj Py3WLUjweDn1fKEwe+MSeR/4lIWJEkVJVBbDNq/aTg2LqDIETbZQkPlfRxT8t4A5 QGvSc3MmJbXd+S9tkLjJfimceZNASu/lgoqL3wjmYkPlLgUXHmoffznapfmjR4GE eA/iaFh7YBc+V3OpyJ8PzvovTIeUX2omuVd4FnRjUhSqjpIlUUXEIfTISfvewCSJ Nif7ksJGChJ6hIAWJwj3RPbc1/c3q5A/AfFX7O1woREJTr5nlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvjv9MWi6OFvVUiTp6WbrXYGMjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzU3OTFmZTYtZjFiNC0z MGIxLWE1MjUtMmQwOGQ0ZmIxZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjRynsXFtfpfC1WQexwCojqcuXG/JstKKpXiD9d47PLCBKgJkTIsxcX NrMCK72T7uI1r4z2h1nbyx5lQhgRvhT6bnbosanny5sj0LbgBglgeeWEjEd6dWXG G6kbkErarhPD6QCNqYRXBcpj++A/LYCL931kFRKH4MJHffpr/mO2GBctJ8J8amwI cTjvbtPXjIkm/scbmdLx7pp0OgMZcZgEVc+1t/SaUDp9tZ1VCC/VQ0U5pOAr40CS Isaj7G0o5j95/4hLINLk2Cr+n/s86nlqUcyPtC5a64DVdDsa3MWXFvsPXvphzQBy aiowo7pvItOHg+x8Vx7md34vzFA7VBQ= -----END CERTIFICATE-----Generated at Tue Oct 13 04:34:05 2026 by rpki-client