$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa File: a08d7a45-9754-3d49-ace8-857d310736ba.roa (raw, json) Hash identifier: xJ7r/9HK14y7y3vVbG6X6nxC1b5sCu5Vi2V5pdbuag8= Subject key identifier: A3:69:F3:CA:A8:76:04:16:36:F8:BA:BE:83:90:3D:D6:D7:F0:73:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0700A0910B46FDA112853D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 7029 IP address blocks: 75.89.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a0:91:0b:46:fd:a1:12:85:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=9c371553-3ff6-42b0-9ca1-cb36d0ae1aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:d1:3f:7c:5a:88:d6:de:79:03:8f:b1:45: 42:33:8b:66:4b:9c:ac:7f:83:8f:48:f4:82:cb:82: a7:7c:a9:65:34:61:e6:6c:a2:cc:cb:58:97:15:8f: b9:45:f1:60:2d:84:b0:7c:02:93:04:ca:50:de:05: dd:34:c2:75:b7:c0:ad:cb:85:db:44:f1:43:85:20: 91:26:5f:f6:ab:67:f3:dc:78:d0:0d:bc:da:57:96: 49:05:60:25:90:be:81:f0:cf:68:33:26:2f:0d:b1: 98:24:7f:19:d1:3c:0c:78:6d:f4:95:22:ae:f0:4d: cf:bf:4b:c1:05:a4:9b:cf:13:d7:cf:b6:2e:1e:bf: 4d:80:a4:26:65:c2:e2:12:9f:1c:93:2d:3d:c0:1d: 40:78:d7:f8:43:5c:f1:2d:20:3e:ce:93:b1:89:ce: d4:64:b8:c9:d0:b6:02:2d:cb:51:79:11:c0:77:c0: a8:89:59:7c:a3:16:69:a9:56:e8:cd:d3:65:24:f8: 1d:21:60:3d:64:fc:96:f1:5f:13:32:a1:05:a2:b0: 63:ad:46:c8:19:ec:b6:77:97:8f:26:b7:bf:56:6e: 2f:c3:84:f5:d0:8d:a7:69:8c:73:a8:6c:84:da:85: e8:e6:98:20:76:7c:fb:0b:44:a1:5c:86:a2:5e:f0: 20:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:69:F3:CA:A8:76:04:16:36:F8:BA:BE:83:90:3D:D6:D7:F0:73:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a08d7a45-9754-3d49-ace8-857d310736ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6a:d5:ae:2f:dc:1f:69:6e:10:bc:3d:0b:34:b3:e2:0d:a4: c2:a7:34:38:96:7a:c4:0c:b6:5a:a7:36:a7:50:a9:18:63:36: 87:fe:67:aa:48:e8:16:14:d8:f1:82:01:83:ee:a6:b5:4c:48: 32:7a:a3:c4:e5:cf:02:0d:b4:76:dd:7e:15:29:f3:16:5c:cf: 2c:bf:6b:82:67:c6:5f:09:55:18:f8:a9:dd:c0:6c:7e:ac:4b: db:b0:9d:11:e3:ae:54:58:99:d2:ff:db:7d:d6:cd:0b:cb:2f: 4c:38:50:fa:17:ed:ee:69:2c:00:52:2c:11:de:9b:98:64:37: 0e:30:5b:0d:ee:37:bf:5a:8e:24:83:0f:32:54:6d:11:1b:8b: 66:75:28:bf:0e:eb:e4:91:69:f2:06:af:f2:d0:66:84:0d:9f: ab:75:3f:1e:40:e6:b1:c4:d5:f4:15:85:34:70:b3:3e:a3:9c: 06:70:eb:af:25:d2:69:d4:db:4c:6d:f1:23:97:73:91:8f:9f: 05:0e:be:08:0c:49:4e:97:5b:48:23:64:c8:ab:33:76:f6:b9: 2b:58:2f:6d:c3:9f:e8:05:56:7d:bc:6d:37:73:1e:63:8a:9c: c4:07:78:46:77:c7:1b:09:a8:e3:70:5a:da:e6:7f:36:09:6c: ca:58:f5:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAKCRC0b9oRKFPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk OWMzNzE1NTMtM2ZmNi00MmIwLTljYTEtY2IzNmQwYWUxYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuprRP3xaiNbeeQOPsUVCM4tmS5ysf4OPSPSC y4KnfKllNGHmbKLMy1iXFY+5RfFgLYSwfAKTBMpQ3gXdNMJ1t8Cty4XbRPFDhSCR Jl/2q2fz3HjQDbzaV5ZJBWAlkL6B8M9oMyYvDbGYJH8Z0TwMeG30lSKu8E3Pv0vB BaSbzxPXz7YuHr9NgKQmZcLiEp8cky09wB1AeNf4Q1zxLSA+zpOxic7UZLjJ0LYC LctReRHAd8CoiVl8oxZpqVbozdNlJPgdIWA9ZPyW8V8TMqEForBjrUbIGey2d5eP Jre/Vm4vw4T10I2naYxzqGyE2oXo5pggdnz7C0ShXIaiXvAgjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNp88qodgQWNvi6voOQPdbX8HOuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTA4ZDdhNDUtOTc1NC0z ZDQ5LWFjZTgtODU3ZDMxMDczNmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS1nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlq1a4v3B9pbhC8PQs0s+INpMKnNDiWesQMtlqnNqdQqRhjNof+Z6pI 6BYU2PGCAYPuprVMSDJ6o8TlzwINtHbdfhUp8xZczyy/a4Jnxl8JVRj4qd3AbH6s S9uwnRHjrlRYmdL/233WzQvLL0w4UPoX7e5pLABSLBHem5hkNw4wWw3uN79ajiSD DzJUbREbi2Z1KL8O6+SRafIGr/LQZoQNn6t1Px5A5rHE1fQVhTRwsz6jnAZw668l 0mnU20xt8SOXc5GPnwUOvggMSU6XW0gjZMirM3b2uStYL23Dn+gFVn28bTdzHmOK nMQHeEZ3xxsJqONwWtrmfzYJbMpY9TI= -----END CERTIFICATE-----Generated at Sat Jun 13 07:29:31 2026 by rpki-client