$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa File: f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa (raw, json) Hash identifier: +SDzueqoxm8s1zvlIquGfYBVCc1siauucTfNxCkSnl0= Subject key identifier: 93:B9:08:43:53:C2:26:5E:7B:86:6A:E0:BB:C3:E1:A6:60:5B:FC:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584E0C1ECBEF09B743C4084A6C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 7029 IP address blocks: 75.88.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:cb:ef:09:b7:43:c4:08:4a:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=e4d888d9-0b52-4757-8748-a4ad9af2ec3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:b4:0a:f4:db:3c:27:a8:16:c5:18:83:e8: 4c:a9:b7:f4:49:a9:be:ec:ad:37:99:dc:a3:db:e6: 79:b6:63:f4:61:34:f5:9b:1a:a3:2c:89:6b:87:5b: 0d:89:99:0d:df:cf:d6:76:bc:fd:a9:3e:1d:ba:ff: 35:7f:7a:87:1c:20:9b:bf:b5:d7:5d:12:0e:19:44: 94:ee:47:60:b5:f9:0d:ef:a1:37:6d:57:ed:7f:6f: 9d:c0:3e:df:cf:3f:c2:47:2e:26:f7:63:54:6e:e1: cd:90:cd:90:bc:9e:17:28:98:30:6c:5d:6f:03:34: 1c:b3:4f:16:f6:7d:89:54:15:10:2e:f6:3c:c3:60: 1a:e5:24:2b:36:8d:d5:8f:25:d7:00:06:3d:6d:10: 56:39:72:32:35:74:ee:d5:e8:2b:a0:5f:d3:f5:d5: 00:dd:24:31:ec:78:23:8d:c1:57:0a:b4:e6:f6:bc: 66:ca:8f:d2:11:2d:22:78:f0:3a:1f:73:4b:e5:ce: ee:12:26:cb:1f:86:7e:15:8b:81:3f:a0:43:f6:6b: 87:4e:ff:40:6a:2f:9f:ec:b9:4b:15:8d:59:08:41: 88:02:03:80:92:e7:97:00:a8:6e:2b:e2:e0:40:19: 21:eb:a2:77:2e:1b:2f:c8:a0:85:7d:f6:d1:8a:85: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:08:43:53:C2:26:5E:7B:86:6A:E0:BB:C3:E1:A6:60:5B:FC:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f787aa56-d6b0-3cb5-b89e-5d1e4e731970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.88.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:42:35:64:e3:53:0a:ba:eb:a9:03:66:0f:c2:cf:7b:a1:9d: 4a:0e:b0:91:f4:5a:c7:95:c0:dd:5d:ad:61:fd:82:67:bb:b6: 9e:e1:a9:0f:4e:ce:22:57:18:bb:6b:a9:b4:48:1a:c9:76:17: d2:19:06:ea:79:44:01:87:21:83:0b:34:05:73:f6:cd:cd:1a: 7f:16:a9:9b:78:ea:6d:a8:08:60:36:77:6d:c0:e2:0a:36:2a: b7:26:82:25:e5:a1:5f:fc:a1:be:85:59:0c:43:af:8b:54:59: 65:6f:77:97:3b:9a:29:10:f1:95:e4:25:f0:d4:1a:cd:77:c5: 8e:f5:96:d9:c3:fc:31:3d:1e:d3:29:76:62:39:b2:d1:26:1c: 58:5f:08:0f:da:29:de:33:61:18:5c:b0:30:5c:4d:4e:0a:4c: e2:34:18:4b:59:7d:b3:a3:95:a5:12:b7:6f:d0:d6:eb:8c:cd: c3:c8:85:89:73:5f:e9:d9:48:79:cc:a4:fd:d0:b2:d4:77:e8: cb:e5:05:cc:8c:ff:3a:63:15:43:4b:db:fc:73:22:ac:f9:95: be:80:22:bb:6c:76:bd:7e:b0:d8:f5:a1:8e:c1:94:61:4d:93: be:83:ec:9a:93:11:59:cc:cb:08:5c:b6:17:6f:d2:74:05:79: 7e:c8:a4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsvvCbdDxAhKbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk ZTRkODg4ZDktMGI1Mi00NzU3LTg3NDgtYTRhZDlhZjJlYzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7e0CvTbPCeoFsUYg+hMqbf0Sam+7K03mdyj 2+Z5tmP0YTT1mxqjLIlrh1sNiZkN38/Wdrz9qT4duv81f3qHHCCbv7XXXRIOGUSU 7kdgtfkN76E3bVftf2+dwD7fzz/CRy4m92NUbuHNkM2QvJ4XKJgwbF1vAzQcs08W 9n2JVBUQLvY8w2Aa5SQrNo3VjyXXAAY9bRBWOXIyNXTu1egroF/T9dUA3SQx7Hgj jcFXCrTm9rxmyo/SES0iePA6H3NL5c7uEibLH4Z+FYuBP6BD9muHTv9Aai+f7LlL FY1ZCEGIAgOAkueXAKhuK+LgQBkh66J3LhsvyKCFffbRioVI9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJO5CENTwiZee4Zq4LvD4aZgW/wDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjc4N2FhNTYtZDZiMC0z Y2I1LWI4OWUtNWQxZTRlNzMxOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5CNWTjUwq666kDZg/Cz3uhnUoOsJH0WseVwN1drWH9gme7tp7hqQ9O ziJXGLtrqbRIGsl2F9IZBup5RAGHIYMLNAVz9s3NGn8WqZt46m2oCGA2d23A4go2 KrcmgiXloV/8ob6FWQxDr4tUWWVvd5c7mikQ8ZXkJfDUGs13xY71ltnD/DE9HtMp dmI5stEmHFhfCA/aKd4zYRhcsDBcTU4KTOI0GEtZfbOjlaUSt2/Q1uuMzcPIhYlz X+nZSHnMpP3QstR36MvlBcyM/zpjFUNL2/xzIqz5lb6AIrtsdr1+sNj1oY7BlGFN k76D7JqTEVnMywhcthdv0nQFeX7IpDM= -----END CERTIFICATE-----Generated at Sat Jun 13 08:41:26 2026 by rpki-client