$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84626e1-4143-33ce-a695-f94628beeb3f.roa File: f84626e1-4143-33ce-a695-f94628beeb3f.roa (raw, json) Hash identifier: E84GuydE+t9oujCgDL2xSWYw5rE1Q/LMn+G9G3h5Kc4= Subject key identifier: 8D:A7:EE:FB:A6:6A:F7:CE:21:C8:F5:3D:9C:46:4D:E6:FA:32:3C:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584F1467AFD34E5E6877C2930300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84626e1-4143-33ce-a695-f94628beeb3f.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7029 IP address blocks: 75.117.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:af:d3:4e:5e:68:77:c2:93:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=fcd81da3-f526-4e58-8bd1-7af9a37ffb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:92:9b:56:29:0f:b5:59:e7:66:95:00:aa: 8d:59:39:94:90:d2:93:c0:55:b7:3f:d5:17:9f:be: fe:7b:de:6e:4d:de:00:88:15:35:c8:87:03:08:da: e3:0c:d7:5f:b2:10:1e:3e:d6:cc:c3:80:af:be:19: c4:c8:bc:66:5b:f5:f8:61:97:02:2a:42:b4:4b:a6: 24:62:df:72:ff:e8:b4:a8:54:dd:ab:99:a0:f8:73: fa:73:43:b1:0c:65:92:31:2a:1c:01:e5:58:af:6a: 51:fa:d6:87:40:68:5e:6d:d1:c9:68:60:1e:bc:62: 51:15:2b:3c:ed:5d:64:5c:d4:5d:f1:1c:85:31:01: a1:3d:95:f9:9e:89:dd:51:04:e9:0c:97:dd:51:42: ed:03:12:d0:a3:ea:b8:f4:5c:1d:a0:d9:78:6f:32: 2d:99:8d:d3:fc:6b:83:3f:1c:0b:a0:c9:83:c0:df: 0f:f7:86:c7:2d:3a:f5:eb:43:49:6c:0c:cf:80:9b: 76:c2:5d:70:71:6e:3f:8e:57:2f:2e:22:3c:5a:03: 4e:45:dd:98:ed:dc:f8:ab:53:df:e7:d3:a1:03:d0: 13:b8:66:0c:54:80:de:16:1f:5d:b1:e5:ca:fa:22: c9:86:44:75:7f:5b:f4:92:bd:f2:2f:4c:e8:af:2b: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A7:EE:FB:A6:6A:F7:CE:21:C8:F5:3D:9C:46:4D:E6:FA:32:3C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f84626e1-4143-33ce-a695-f94628beeb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:65:b6:d8:a0:bf:fb:37:ba:91:f5:81:73:8d:82:5f:6a:93: f1:bf:cc:5e:54:6c:7e:62:95:04:b5:2b:19:5a:11:97:62:8a: ea:aa:c4:1a:b3:7c:da:a8:6e:7a:2d:76:54:8f:ca:46:72:5a: 51:fe:7e:e6:d2:99:c5:69:4c:65:06:31:09:d3:7b:4d:c6:a5: 82:89:85:e0:76:52:d1:47:ba:a1:57:db:f5:34:2b:a0:c8:f8: 5b:6b:80:08:fc:cd:1b:d2:06:28:20:ba:bd:91:59:ac:5b:09: da:70:0a:bb:56:0b:f5:0e:25:8f:52:97:b6:84:c3:ea:58:5d: 95:d2:08:80:8e:15:66:fe:ac:78:4d:ae:c8:46:d7:4b:89:10: b5:f0:cd:03:eb:e7:1b:87:d7:23:a0:a1:a1:d2:68:07:47:4d: 3a:ef:27:95:53:4d:ee:70:31:bb:95:ad:39:1b:ca:c5:11:31: 5d:a3:a1:f1:6b:4e:88:cc:11:d2:9c:0d:20:7f:51:32:0c:c6: 8a:1c:8f:76:b6:56:56:e3:51:83:a3:68:94:ae:c9:28:88:fd: 4e:d1:37:ce:55:d9:01:ce:f4:95:8a:a5:37:c4:d2:44:74:ed: 3b:e9:b0:1b:11:95:dd:bf:26:6c:b9:41:04:ff:8f:b6:e6:26: f4:3d:5a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6/TTl5od8KTAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZmNkODFkYTMtZjUyNi00ZTU4LThiZDEtN2FmOWEzN2ZmYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLWSm1YpD7VZ52aVAKqNWTmUkNKTwFW3P9UX n77+e95uTd4AiBU1yIcDCNrjDNdfshAePtbMw4CvvhnEyLxmW/X4YZcCKkK0S6Yk Yt9y/+i0qFTdq5mg+HP6c0OxDGWSMSocAeVYr2pR+taHQGhebdHJaGAevGJRFSs8 7V1kXNRd8RyFMQGhPZX5nondUQTpDJfdUULtAxLQo+q49FwdoNl4bzItmY3T/GuD PxwLoMmDwN8P94bHLTr160NJbAzPgJt2wl1wcW4/jlcvLiI8WgNORd2Y7dz4q1Pf 59OhA9ATuGYMVIDeFh9dseXK+iLJhkR1f1v0kr3yL0zorytzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2n7vumavfOIcj1PZxGTeb6MjwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg0NjI2ZTEtNDE0My0z M2NlLWE2OTUtZjk0NjI4YmVlYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBS3UOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtlttigv/s3upH1gXONgl9qk/G/zF5UbH5ilQS1KxlaEZdiiuqqxBqz fNqobnotdlSPykZyWlH+fubSmcVpTGUGMQnTe03GpYKJheB2UtFHuqFX2/U0K6DI +FtrgAj8zRvSBiggur2RWaxbCdpwCrtWC/UOJY9Sl7aEw+pYXZXSCICOFWb+rHhN rshG10uJELXwzQPr5xuH1yOgoaHSaAdHTTrvJ5VTTe5wMbuVrTkbysURMV2jofFr TojMEdKcDSB/UTIMxoocj3a2VlbjUYOjaJSuySiI/U7RN85V2QHO9JWKpTfE0kR0 7TvpsBsRld2/Jmy5QQT/j7bmJvQ9WrU= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:56 2026 by rpki-client