$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa File: 8a67ce58-99c9-3737-87d0-09b3a62815bc.roa (raw, json) Hash identifier: rfK5IK6SiHhhroO+GDy0lWqTHNk5RjL1K5+qutg1eIc= Subject key identifier: 18:CE:D3:9F:6F:97:7F:B4:A1:44:C2:8F:5A:96:38:F5:F3:14:98:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0D842B02FA299D69AED285C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 7029 IP address blocks: 75.89.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:2b:02:fa:29:9d:69:ae:d2:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=de6693cc-918a-4d75-8e7f-34702fa08520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:f8:60:f5:7b:53:7e:a7:06:12:fe:d1:01: 5e:ab:ff:02:48:52:c7:f3:aa:49:24:ed:a0:ec:00: 47:a0:c1:b7:c9:4c:30:f7:77:a1:31:e5:a3:cb:8b: a0:fd:c6:e0:e1:b5:fc:64:16:1f:dc:56:2b:8d:0d: 3a:4e:cd:41:9b:46:47:1f:8c:fb:32:1c:81:43:96: c5:dd:16:52:6f:b4:ea:1c:16:d8:1e:1a:68:5f:f9: ba:47:79:7b:b2:d9:b8:bb:f1:5f:73:2a:d5:a2:c3: ce:75:2c:2d:46:ce:3a:0e:cd:9b:58:cd:1c:9c:9f: c2:7a:e6:46:f5:5e:78:0b:6b:cd:6a:04:61:6c:33: d3:bd:22:23:c4:ab:94:1f:4f:6f:ab:8f:b0:6c:db: 36:17:6c:12:4d:9d:74:fa:5b:3d:ee:75:5c:f9:9d: c7:eb:eb:2f:d2:15:fc:cd:32:7b:c1:bb:9f:22:3a: 25:4f:7e:a4:2c:71:c8:0c:c2:45:23:d1:26:40:9e: ee:ec:04:94:fe:4d:70:6d:b3:4a:7f:af:e0:f5:96: 15:4a:e9:f5:cb:25:90:1c:be:26:84:38:41:17:4b: db:1b:5d:1b:75:2e:75:66:24:79:b1:ca:62:d3:27: 3d:41:c2:c7:fc:ef:fc:2e:27:04:fe:ea:7b:98:ba: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:CE:D3:9F:6F:97:7F:B4:A1:44:C2:8F:5A:96:38:F5:F3:14:98:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8a67ce58-99c9-3737-87d0-09b3a62815bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:60:43:24:67:ee:11:1d:88:fd:7b:4b:6b:1b:90:1f:68:be: b5:d7:7d:42:9f:3b:41:2c:4b:9f:d6:ce:f2:b0:9e:cb:73:e3: 0f:dd:84:32:a2:04:7c:30:95:0e:4b:e0:81:f8:98:d3:d4:8b: d2:fb:72:06:c9:74:b4:c5:57:ab:a6:5f:d3:54:22:de:d5:d0: a1:33:b7:a9:dc:2f:4f:91:be:ce:4c:2f:03:26:03:a8:e0:c5: a5:d1:46:57:50:6a:60:f5:bd:98:ff:61:5f:f5:dd:a3:73:70: e3:be:5d:2e:84:c4:2c:b4:00:62:df:8c:2d:37:e7:0a:14:ca: 6b:6c:72:98:a9:91:f4:ec:05:e3:28:92:35:ed:36:25:57:fe: 45:2d:20:f9:61:c2:2a:5a:44:7e:27:25:b6:6d:c5:c3:d7:a8: 2e:a2:00:35:cb:31:5a:a5:95:fd:4f:c0:65:0a:77:d2:77:4d: 8e:87:7c:f2:dd:98:e3:47:cd:7c:af:ac:20:3b:2c:9c:c7:8c: a1:f4:46:44:ad:f0:2b:ba:b3:92:ee:d5:12:4c:45:d6:9c:c7: 70:8a:5a:51:cb:79:11:6c:98:eb:6f:39:34:69:2a:62:b6:67: 8e:1b:32:32:ec:7e:95:81:d1:ba:cb:03:15:05:09:94:02:b1: 11:4b:7d:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCsC+imdaa7ShcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZGU2NjkzY2MtOTE4YS00ZDc1LThlN2YtMzQ3MDJmYTA4NTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG74YPV7U36nBhL+0QFeq/8CSFLH86pJJO2g 7ABHoMG3yUww93ehMeWjy4ug/cbg4bX8ZBYf3FYrjQ06Ts1Bm0ZHH4z7MhyBQ5bF 3RZSb7TqHBbYHhpoX/m6R3l7stm4u/FfcyrVosPOdSwtRs46Ds2bWM0cnJ/CeuZG 9V54C2vNagRhbDPTvSIjxKuUH09vq4+wbNs2F2wSTZ10+ls97nVc+Z3H6+sv0hX8 zTJ7wbufIjolT36kLHHIDMJFI9EmQJ7u7ASU/k1wbbNKf6/g9ZYVSun1yyWQHL4m hDhBF0vbG10bdS51ZiR5scpi0yc9QcLH/O/8LicE/up7mLq2FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjO059vl3+0oUTCj1qWOPXzFJjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGE2N2NlNTgtOTljOS0z NzM3LTg3ZDAtMDliM2E2MjgxNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1kgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlgQyRn7hEdiP17S2sbkB9ovrXXfUKfO0EsS5/WzvKwnstz4w/dhDKi BHwwlQ5L4IH4mNPUi9L7cgbJdLTFV6umX9NUIt7V0KEzt6ncL0+Rvs5MLwMmA6jg xaXRRldQamD1vZj/YV/13aNzcOO+XS6ExCy0AGLfjC035woUymtscpipkfTsBeMo kjXtNiVX/kUtIPlhwipaRH4nJbZtxcPXqC6iADXLMVqllf1PwGUKd9J3TY6HfPLd mONHzXyvrCA7LJzHjKH0RkSt8Cu6s5Lu1RJMRdacx3CKWlHLeRFsmOtvOTRpKmK2 Z44bMjLsfpWB0brLAxUFCZQCsRFLfa8= -----END CERTIFICATE-----Generated at Sat Jun 13 06:03:23 2026 by rpki-client