$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa File: d99a7803-6985-3933-9ff5-a5ce01a6780f.roa (raw, json) Hash identifier: LoG2tblP+x1u0Ka+giAcG+iwxHsM5UHqimia8A4Qano= Subject key identifier: 92:58:68:8C:A0:87:A7:E5:5F:0C:69:1B:16:D5:F0:74:47:68:E9:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F024232B3380EFCA3801E2E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7029 IP address blocks: 75.117.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:32:b3:38:0e:fc:a3:80:1e:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=e56309c0-4dd8-48e5-9379-055f037e8bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:ca:c0:c4:de:6f:db:d9:83:1e:7a:2a:2b: d8:54:64:a4:4b:cd:39:4e:22:91:6d:f4:99:99:3a: cd:bf:da:87:0f:9b:fd:03:bf:25:92:aa:9b:8c:b9: 3a:31:d7:43:e2:23:2e:ee:9c:2d:81:c9:24:e3:a4: 58:87:33:97:ee:df:18:7f:60:3e:2f:81:df:7f:15: 1d:43:90:f0:ad:0f:b2:68:2e:f7:1b:de:a3:62:7d: 65:1e:0b:ed:5f:55:c6:96:a4:af:13:d1:26:56:a0: cb:84:e5:ae:a3:92:96:70:e1:38:f9:17:4c:ad:87: 1e:23:85:15:9e:85:32:1e:e3:f7:d8:ea:ff:2c:71: 23:e2:6c:93:b4:e2:06:c1:18:13:8e:5d:ca:63:6c: 65:dd:9b:1a:b0:f8:78:dd:0e:ea:25:22:3f:57:70: 34:e5:77:80:8c:81:d2:cc:6a:47:ef:a5:28:4c:03: 79:1d:13:61:e3:79:eb:30:fd:44:50:d7:e6:9d:c5: 6c:2e:a2:ce:91:9e:fa:4e:11:f0:7e:ca:a0:2b:8f: 16:69:dd:8c:d1:15:5e:c4:63:15:2b:85:2a:e0:32: 30:9c:c9:ae:63:44:23:5c:dd:7f:12:93:26:a8:f6: 0f:3e:2f:f2:97:85:2b:3b:f3:f3:58:29:e0:6c:dd: 0c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:68:8C:A0:87:A7:E5:5F:0C:69:1B:16:D5:F0:74:47:68:E9:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d99a7803-6985-3933-9ff5-a5ce01a6780f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c0:3e:cd:4c:fe:e2:ad:2c:ec:bc:4f:e6:a6:30:d4:17:19: 01:19:e1:a8:df:17:03:d5:4a:8a:a7:4e:1a:37:a7:72:41:19: 87:b7:92:69:e2:28:f7:71:14:93:20:1a:fe:8f:a8:0e:60:49: 83:9b:f4:14:dc:7e:e8:6c:86:2b:53:de:67:53:98:9a:fc:a7: d4:ea:01:b2:f8:09:b9:83:d6:bc:8a:25:9d:9c:b7:0a:3e:93: 03:39:3f:d4:f3:1c:d9:00:b7:c4:5a:8d:83:77:36:19:40:95: 59:59:2e:b1:a3:40:16:f8:39:19:e2:b4:23:8a:2e:2a:92:a6: 5b:22:3d:a1:4e:e3:95:03:cc:9a:78:76:2f:64:10:e0:92:47: 35:2e:8a:5f:49:14:1b:d2:7c:e4:0f:9f:3a:8e:68:14:16:4c: c1:d9:ea:b2:da:40:5a:55:10:48:08:f9:9f:d9:6c:ac:e8:66: 50:50:71:8e:e7:6d:9d:14:e2:7c:5f:3c:b7:ca:b4:1c:69:6b: 55:45:28:b6:6b:81:d9:e7:f2:8e:b4:79:92:a6:5c:12:60:1d: 7b:02:64:a0:37:41:0c:61:8f:c1:c5:5c:e6:8f:2a:e7:dc:48: 1a:3d:59:5d:cf:31:7f:a3:ab:cf:e8:83:90:1c:d7:66:45:4f: ca:c8:56:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQjKzOA78o4AeLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZTU2MzA5YzAtNGRkOC00OGU1LTkzNzktMDU1ZjAzN2U4YmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlizKwMTeb9vZgx56KivYVGSkS805TiKRbfSZ mTrNv9qHD5v9A78lkqqbjLk6MddD4iMu7pwtgckk46RYhzOX7t8Yf2A+L4HffxUd Q5DwrQ+yaC73G96jYn1lHgvtX1XGlqSvE9EmVqDLhOWuo5KWcOE4+RdMrYceI4UV noUyHuP32Or/LHEj4myTtOIGwRgTjl3KY2xl3ZsasPh43Q7qJSI/V3A05XeAjIHS zGpH76UoTAN5HRNh43nrMP1EUNfmncVsLqLOkZ76ThHwfsqgK48Wad2M0RVexGMV K4Uq4DIwnMmuY0QjXN1/EpMmqPYPPi/yl4UrO/PzWCngbN0MXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJYaIygh6flXwxpGxbV8HRHaOkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk5YTc4MDMtNjk4NS0z OTMzLTlmZjUtYTVjZTAxYTY3ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3WCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDAPs1M/uKtLOy8T+amMNQXGQEZ4ajfFwPVSoqnTho3p3JBGYe3kmni KPdxFJMgGv6PqA5gSYOb9BTcfuhshitT3mdTmJr8p9TqAbL4CbmD1ryKJZ2ctwo+ kwM5P9TzHNkAt8RajYN3NhlAlVlZLrGjQBb4ORnitCOKLiqSplsiPaFO45UDzJp4 di9kEOCSRzUuil9JFBvSfOQPnzqOaBQWTMHZ6rLaQFpVEEgI+Z/ZbKzoZlBQcY7n bZ0U4nxfPLfKtBxpa1VFKLZrgdnn8o60eZKmXBJgHXsCZKA3QQxhj8HFXOaPKufc SBo9WV3PMX+jq8/og5Ac12ZFT8rIVjE= -----END CERTIFICATE-----Generated at Tue Sep 22 07:19:52 2026 by rpki-client