$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa File: ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa (raw, json) Hash identifier: Ma1xZesDTEhqDlO0UUW2g1qwcWk2HOAiYlJB0HCqtGk= Subject key identifier: EE:0A:BD:04:B1:4B:76:1A:35:92:17:EF:49:2E:3B:82:41:CA:D3:E2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F506D63706F41C0F6B12A7800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 75.89.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:63:70:6f:41:c0:f6:b1:2a:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=2c3175a0-6925-44cf-94ee-3f5682c39549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:8a:7f:87:ac:d1:08:45:25:0d:9b:16:b0: d0:60:43:92:db:2e:4b:18:76:b4:41:fc:1b:96:d9: a8:78:e2:40:71:f5:d1:97:a7:7b:5a:19:78:e4:b7: a6:9b:88:53:d1:4f:a5:a1:ac:a0:fb:f4:ed:78:89: 52:58:9d:37:47:34:36:40:0b:de:07:f7:4c:76:c1: 11:1b:a0:32:85:41:c7:a2:37:2b:26:79:eb:59:2d: e1:94:7e:00:fc:d0:9a:0f:75:43:20:4a:98:87:a4: a8:84:93:a4:0c:61:48:ae:c1:c9:a9:59:62:f5:f5: 8f:ce:4d:9b:4e:97:54:6d:70:3f:ae:48:9e:fb:34: a4:ea:b4:96:a8:98:c6:77:2f:ec:02:11:4e:d3:fe: a7:2a:eb:9b:fb:a2:66:80:4b:03:46:43:88:d2:94: e9:94:3f:d9:62:d5:2e:88:74:7a:7b:d3:af:46:4c: fa:28:f5:d9:a8:3d:3c:cc:bb:6b:a6:db:8c:78:12: cf:a5:a5:a8:59:10:ba:d2:c8:91:b3:ba:e6:37:0a: 6a:9d:29:a4:b5:d8:2c:67:79:a7:54:22:50:69:d4: d2:83:7a:c9:fc:24:21:87:f8:e6:09:92:33:b7:93: 09:66:63:46:0e:ea:72:13:6f:56:4b:d1:86:f5:d7: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0A:BD:04:B1:4B:76:1A:35:92:17:EF:49:2E:3B:82:41:CA:D3:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea73acf6-66b6-3fb9-85c5-c4a32aff65cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:15:f4:18:88:14:31:cb:ad:ae:39:6e:40:44:6d:66:2c: 61:f9:97:bd:04:7c:aa:08:4f:0f:81:38:cb:cd:4d:d0:40:c9: ac:8d:22:4d:0d:f6:ec:26:fc:95:9e:28:73:f0:04:0a:a9:4c: 6b:8a:2d:17:d9:a5:81:54:6a:76:6c:0a:ea:6e:b4:b3:56:a2: ea:eb:f0:d6:13:93:c8:b3:70:d0:c6:1b:75:47:c0:5e:18:58: 12:7d:90:54:83:5b:ca:fa:1a:6c:71:cc:04:cd:e3:8b:39:c8: 9a:e7:00:91:10:28:e6:19:46:85:ad:6f:26:20:99:f1:30:d7: 49:31:9f:89:fd:eb:b4:23:e5:a4:ac:d2:16:81:7f:34:88:f8: 87:76:1d:05:fb:39:23:aa:29:e3:f1:6c:b1:76:cc:bf:8e:e9: 84:b9:58:4c:b1:ea:82:b3:77:5e:97:6f:1a:0c:6a:85:13:2b: b2:d5:c2:1b:90:34:05:30:52:54:6a:82:81:d6:19:fd:75:a0: 66:71:12:0a:7c:d9:60:08:80:b8:ac:76:2d:f7:a5:79:36:b6: ab:aa:97:a5:9a:fc:e7:bd:f5:0a:ac:e4:6b:a9:f1:50:7b:ce: 11:c8:a8:5b:19:8d:de:04:a5:54:96:89:8e:a2:08:ab:20:85: f7:26:11:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWNwb0HA9rEqeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MmMzMTc1YTAtNjkyNS00NGNmLTk0ZWUtM2Y1NjgyYzM5NTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0mKf4es0QhFJQ2bFrDQYEOS2y5LGHa0Qfwb ltmoeOJAcfXRl6d7Whl45Lemm4hT0U+loayg+/TteIlSWJ03RzQ2QAveB/dMdsER G6AyhUHHojcrJnnrWS3hlH4A/NCaD3VDIEqYh6SohJOkDGFIrsHJqVli9fWPzk2b TpdUbXA/rkie+zSk6rSWqJjGdy/sAhFO0/6nKuub+6JmgEsDRkOI0pTplD/ZYtUu iHR6e9OvRkz6KPXZqD08zLtrptuMeBLPpaWoWRC60siRs7rmNwpqnSmktdgsZ3mn VCJQadTSg3rJ/CQhh/jmCZIzt5MJZmNGDupyE29WS9GG9dcsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4KvQSxS3YaNZIX70kuO4JBytPiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE3M2FjZjYtNjZiNi0z ZmI5LTg1YzUtYzRhMzJhZmY2NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS1lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFHFfQYiBQxy62uOW5ARG1mLGH5l70EfKoITw+BOMvNTdBAyayNIk0N 9uwm/JWeKHPwBAqpTGuKLRfZpYFUanZsCuputLNWourr8NYTk8izcNDGG3VHwF4Y WBJ9kFSDW8r6GmxxzATN44s5yJrnAJEQKOYZRoWtbyYgmfEw10kxn4n967Qj5aSs 0haBfzSI+Id2HQX7OSOqKePxbLF2zL+O6YS5WEyx6oKzd16XbxoMaoUTK7LVwhuQ NAUwUlRqgoHWGf11oGZxEgp82WAIgLisdi33pXk2tquql6Wa/Oe99Qqs5Gup8VB7 zhHIqFsZjd4EpVSWiY6iCKsghfcmEcE= -----END CERTIFICATE-----Generated at Sun Sep 27 18:36:48 2026 by rpki-client