$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa File: 803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa (raw, json) Hash identifier: 52ka+KwjQ5eq6QsasVTnUUgo2fN+u2JdAe2vBfbQgcY= Subject key identifier: 46:5C:2C:78:73:FF:C2:A8:D6:42:33:68:E8:4B:A6:C9:74:E7:9B:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1EEAC6C4982D363FBC1300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 75.91.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:ea:c6:c4:98:2d:36:3f:bc:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=8a03c94a-268f-4eac-8e10-4481b810830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:60:1c:bb:01:3d:ff:e7:dd:d3:37:02:7d: c0:21:74:60:83:c5:c9:aa:0e:f9:fa:54:c2:86:68: fd:d2:82:22:61:2f:a7:e0:dc:e6:5b:09:3f:b4:72: f1:40:8d:ff:0c:a8:3f:10:ea:56:b3:ec:23:e7:2f: d2:0a:9b:5c:13:6b:54:f7:3d:38:17:1e:78:b9:6e: 9a:be:f6:6c:79:27:75:97:73:ce:c5:31:88:fe:4d: 4a:74:20:8b:67:6d:72:cf:16:b1:f8:94:ac:73:fc: 6a:4e:49:b4:24:e3:45:81:ba:84:b5:70:9b:3e:c3: 03:49:9a:ff:30:73:e1:87:7e:ae:ae:a8:ac:68:0b: d3:ed:7e:29:d9:2f:05:5b:f6:03:1f:c4:50:b6:76: f5:11:34:0d:7e:2a:10:b4:d8:b6:83:98:8b:0b:ae: 5b:0c:4c:60:df:78:a3:ef:af:28:8e:73:c5:e9:78: f6:06:78:d2:86:53:82:f2:3b:6a:fb:fe:cd:62:0d: 21:cc:d2:6d:bb:b4:20:ec:07:20:37:44:23:bf:03: ef:14:01:9c:54:a1:76:8f:dc:21:16:29:72:ef:d2: ad:65:55:85:41:0b:56:bc:c3:79:ee:44:13:9c:af: d8:dc:ec:2f:e7:77:9c:ad:d2:aa:65:0c:cd:ce:5e: 78:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:2C:78:73:FF:C2:A8:D6:42:33:68:E8:4B:A6:C9:74:E7:9B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/803dc8f1-5a29-3b7f-a9e4-6d2d5f9596f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.91.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:96:d5:c8:c9:a4:66:1b:41:c5:47:ce:eb:b6:89:81:a6:80: fb:44:80:91:78:e7:78:be:20:41:b0:3f:d0:5c:fa:49:8e:d1: 83:cc:d7:e2:fb:f3:0f:07:b5:6d:97:c2:61:14:ab:32:c5:a6: f8:ce:2c:4f:10:49:8a:a4:b9:a0:45:fb:e7:b7:4e:99:74:08: 25:af:ee:64:85:12:66:2b:5a:0f:4c:b8:e9:2c:5c:52:c5:e4: c2:26:e7:c9:11:28:3b:3c:ae:d4:9a:40:a4:72:92:23:a8:74: b8:fd:76:2f:10:03:d5:11:ba:ac:a4:22:d8:2f:99:eb:47:dd: a2:bf:b9:b5:e1:ee:eb:c8:4b:41:7c:8e:be:58:49:dd:f2:79: c3:a9:2a:81:d4:6b:43:35:0d:58:fd:67:e8:cf:85:c5:ac:53: ac:e1:6c:de:1a:bc:82:ee:f2:3f:8c:4c:7f:3c:56:b3:d2:2f: a7:1c:99:81:3e:e6:4e:fa:95:1e:a9:19:6b:66:00:d8:fe:1c: 55:b1:83:24:31:88:d7:a9:0f:30:32:4a:90:e6:91:81:54:b6: c8:e7:6d:88:46:86:fc:48:c1:1e:d9:cb:0e:4a:fd:43:ef:7a: d7:59:a1:3f:c3:cc:3e:a9:42:ba:66:4b:50:73:cc:02:f4:55: 44:dc:eb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHurGxJgtNj+8EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk OGEwM2M5NGEtMjY4Zi00ZWFjLThlMTAtNDQ4MWI4MTA4MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhytgHLsBPf/n3dM3An3AIXRgg8XJqg75+lTC hmj90oIiYS+n4NzmWwk/tHLxQI3/DKg/EOpWs+wj5y/SCptcE2tU9z04Fx54uW6a vvZseSd1l3POxTGI/k1KdCCLZ21yzxax+JSsc/xqTkm0JONFgbqEtXCbPsMDSZr/ MHPhh36urqisaAvT7X4p2S8FW/YDH8RQtnb1ETQNfioQtNi2g5iLC65bDExg33ij 768ojnPF6Xj2BnjShlOC8jtq+/7NYg0hzNJtu7Qg7AcgN0QjvwPvFAGcVKF2j9wh Fily79KtZVWFQQtWvMN57kQTnK/Y3Owv53ecrdKqZQzNzl542QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZcLHhz/8Ko1kIzaOhLpsl055uUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODAzZGM4ZjEtNWEyOS0z YjdmLWE5ZTQtNmQyZDVmOTU5NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1twMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKW1cjJpGYbQcVHzuu2iYGmgPtEgJF453i+IEGwP9Bc+kmO0YPM1+L7 8w8HtW2XwmEUqzLFpvjOLE8QSYqkuaBF++e3Tpl0CCWv7mSFEmYrWg9MuOksXFLF 5MIm58kRKDs8rtSaQKRykiOodLj9di8QA9URuqykItgvmetH3aK/ubXh7uvIS0F8 jr5YSd3yecOpKoHUa0M1DVj9Z+jPhcWsU6zhbN4avILu8j+MTH88VrPSL6ccmYE+ 5k76lR6pGWtmANj+HFWxgyQxiNepDzAySpDmkYFUtsjnbYhGhvxIwR7Zyw5K/UPv etdZoT/DzD6pQrpmS1BzzAL0VUTc64o= -----END CERTIFICATE-----Generated at Sat Jun 13 07:17:54 2026 by rpki-client