$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa File: cec08d31-df68-3707-8836-0a81fc4c5ff3.roa (raw, json) Hash identifier: 6MY+hf5xfHtAe0vrMrA0Nq22aXdxO25Bx+Q5g/oshQg= Subject key identifier: 21:D9:20:FE:BD:43:68:64:AB:CF:30:C8:A2:9D:49:53:4D:66:BB:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D7F9A99234E2EBB3FCB7CDC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 75.88.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:99:23:4e:2e:bb:3f:cb:7c:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=233da6a3-eb1f-4095-bc40-a54dfe3d1250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c3:a7:0c:93:01:8d:db:05:4e:e1:ca:04:ee: 6a:28:2d:0d:d1:d0:5e:10:d5:6d:0e:97:aa:bf:b3: 32:5f:94:5a:27:1d:8a:26:94:c0:80:dd:22:79:6a: 32:59:24:f1:f5:7c:35:18:08:8b:18:cd:6d:34:e8: f3:90:b5:a9:aa:c1:e9:aa:52:b7:03:0b:0d:e4:b3: d6:62:c3:fc:78:6a:35:4c:37:25:2d:52:00:c2:94: e1:ff:3e:37:3f:b9:4e:ca:b8:1a:97:4f:cd:71:73: 2d:07:f9:e3:4b:93:36:46:69:6f:9b:b6:8c:bd:28: bb:18:ce:8d:c3:ac:a8:6d:4e:64:19:b9:53:e8:4a: 76:8a:25:7a:b1:e9:2e:97:5a:77:62:81:72:9b:0e: 7d:a0:72:85:eb:9d:6b:d6:13:26:a2:2a:af:27:21: 7c:91:ea:78:17:3b:67:dc:b0:3b:8d:73:30:29:0a: bb:a1:b3:44:2a:97:b3:09:84:09:ed:af:d2:da:73: 37:98:25:aa:81:84:ec:9f:1d:17:4c:1b:ab:ad:a1: b4:be:82:d9:a6:64:e2:b1:88:9b:69:9a:22:4e:98: 1f:d0:12:e7:47:b7:55:27:98:35:aa:ab:9a:bc:75: 9a:a9:29:25:8f:9e:52:da:2a:08:11:7f:7f:b8:a6: 9a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D9:20:FE:BD:43:68:64:AB:CF:30:C8:A2:9D:49:53:4D:66:BB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cec08d31-df68-3707-8836-0a81fc4c5ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7e:1f:e9:ef:a2:fd:d3:fc:c3:90:00:69:ba:4b:73:37:3b: 0f:a3:5c:2f:6d:6f:61:e5:61:7e:f8:e4:8e:20:a8:31:af:ab: 42:70:fb:b9:eb:ce:b9:c8:7d:40:b6:13:e5:15:da:80:b5:4b: 11:83:e4:ff:fc:3f:db:a1:0f:cf:2a:eb:1f:c1:0a:fa:c4:98: c2:26:52:50:25:fb:97:f1:a6:3d:66:71:a7:d8:06:18:4f:c4: 69:63:9d:ee:e1:dc:88:f9:03:82:85:ec:4a:03:53:3b:85:6d: 22:78:79:df:82:2a:a8:ec:81:c3:9c:fa:3b:62:23:07:1f:6a: 85:6a:ff:0e:c2:be:50:7a:5c:c0:5b:42:5d:d2:17:f3:e1:48: 4b:7a:5d:bf:ad:7f:eb:ea:5c:e3:dd:e9:9f:a5:05:c3:e5:9c: 7d:42:09:a8:c4:8d:c0:9c:81:66:24:24:f0:2d:42:c8:d6:7c: c1:4c:2c:e5:67:2c:ef:0c:81:55:42:ae:0a:4d:c3:5b:5f:31: 86:2b:a6:00:c7:1d:b7:f0:36:d4:98:8c:02:75:9e:7e:1e:30: 2b:94:3e:93:9a:87:50:f6:59:80:80:ce:ad:7a:38:92:4a:1a: 63:e2:f8:79:6d:a4:ef:bb:37:49:34:c0:d3:8c:be:d5:56:0a: eb:33:8b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpkjTi67P8t83AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjMzZGE2YTMtZWIxZi00MDk1LWJjNDAtYTU0ZGZlM2QxMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksOnDJMBjdsFTuHKBO5qKC0N0dBeENVtDpeq v7MyX5RaJx2KJpTAgN0ieWoyWSTx9Xw1GAiLGM1tNOjzkLWpqsHpqlK3AwsN5LPW YsP8eGo1TDclLVIAwpTh/z43P7lOyrgal0/NcXMtB/njS5M2Rmlvm7aMvSi7GM6N w6yobU5kGblT6Ep2iiV6sekul1p3YoFymw59oHKF651r1hMmoiqvJyF8kep4Fztn 3LA7jXMwKQq7obNEKpezCYQJ7a/S2nM3mCWqgYTsnx0XTBurraG0voLZpmTisYib aZoiTpgf0BLnR7dVJ5g1qquavHWaqSklj55S2ioIEX9/uKaaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHZIP69Q2hkq88wyKKdSVNNZrvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2VjMDhkMzEtZGY2OC0z NzA3LTg4MzYtMGE4MWZjNGM1ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1ggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB+H+nvov3T/MOQAGm6S3M3Ow+jXC9tb2HlYX745I4gqDGvq0Jw+7nr zrnIfUC2E+UV2oC1SxGD5P/8P9uhD88q6x/BCvrEmMImUlAl+5fxpj1mcafYBhhP xGljne7h3Ij5A4KF7EoDUzuFbSJ4ed+CKqjsgcOc+jtiIwcfaoVq/w7CvlB6XMBb Ql3SF/PhSEt6Xb+tf+vqXOPd6Z+lBcPlnH1CCajEjcCcgWYkJPAtQsjWfMFMLOVn LO8MgVVCrgpNw1tfMYYrpgDHHbfwNtSYjAJ1nn4eMCuUPpOah1D2WYCAzq16OJJK GmPi+HltpO+7N0k0wNOMvtVWCuszi1k= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:54 2026 by rpki-client