$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa File: 3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa (raw, json) Hash identifier: 3OArsy0dgzAe46T+Q9BD/QhXhT5ZV7TNaDZx11yBIZs= Subject key identifier: 80:63:C8:14:32:B7:84:2B:05:5A:A6:07:01:3A:EA:67:CB:8D:6C:8E Certificate issuer: /CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7 Certificate serial: 010D0C9F4328584DA11AB62CA3E06670DE79CEC0 Authority key identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 14618 IP address blocks: 198.212.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b6:2c:a3:e0:66:70:de:79:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=38b4e247-1d3b-4a5a-a1c6-0af464e665c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:92:b5:f7:55:e7:42:2a:c1:83:df:6f:6b:1c: 06:06:4e:9a:09:1d:e6:6e:3a:cf:50:e6:37:1b:24: 0f:1a:a6:8a:53:ba:ba:ec:cd:d2:33:f7:b1:1d:a4: 01:0b:30:e1:7c:8d:d6:d8:12:9b:6e:5e:ac:83:87: d5:04:9e:b4:17:ad:56:6e:db:9f:b3:6e:11:b6:c3: 0a:42:35:c2:9c:ef:e3:d0:68:c7:64:fa:ef:a8:be: d8:21:22:54:dc:7e:ae:7a:a0:c4:80:34:93:6d:73: 57:4b:19:d0:ec:fc:0e:0f:00:06:ca:e2:d6:48:37: 10:d9:09:ec:90:68:99:44:6c:7d:eb:6d:cd:7e:3c: f5:51:af:0c:6e:d7:21:ce:11:f0:fc:64:2b:5e:13: ed:7e:5e:f4:c6:b8:a0:9e:3f:2c:52:c4:0f:31:d8: cb:7e:8f:49:91:ca:3b:4f:0d:ba:3b:f4:20:4c:1c: 8f:d8:ad:70:99:22:75:36:66:09:1c:59:ea:2c:5c: d3:91:72:1d:fb:91:41:33:cf:b8:7c:b0:ba:15:2f: 35:1a:21:f0:46:9f:47:27:a8:3e:8c:5f:31:69:e9: c9:ec:99:09:3f:e2:ea:dc:ed:a3:1e:7b:cd:9b:76: 3c:cc:ef:02:8b:75:21:81:59:19:98:9c:f4:25:f0: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:63:C8:14:32:B7:84:2B:05:5A:A6:07:01:3A:EA:67:CB:8D:6C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/3b3253ab-1eaa-3003-99b4-14ff84d6e89f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl X509v3 Authority Key Identifier: keyid:53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer sbgp-ipAddrBlock: critical IPv4: 198.212.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:72:fb:95:8f:3f:d7:36:5e:f8:a8:9d:f4:ce:c1:50:01:46: ad:4a:79:cc:aa:dd:9c:61:0c:6b:57:d8:30:67:ab:02:7e:d6: 24:fa:f7:fe:d9:2f:7e:58:cd:9f:61:a3:2a:fc:22:74:97:85: 0d:91:0d:0d:99:64:24:1e:50:c7:4e:10:0b:d9:45:58:f9:77: eb:83:ea:74:7e:d7:c0:6e:80:e4:67:45:ad:08:00:9b:72:dd: 12:2c:3f:5e:05:d7:ee:11:44:26:49:3b:f3:12:58:1c:21:55: 8a:f6:e2:66:8b:02:0b:ef:ed:45:38:6b:c4:db:66:a6:2f:1a: fe:6e:77:5b:a8:c1:6f:7d:84:84:db:a9:a6:80:4a:b2:ef:be: b7:f2:a3:bc:a4:0a:cd:5b:73:f5:7f:39:74:f1:a7:ed:01:11: 1a:a3:23:ac:f8:31:61:c0:f7:2f:d1:60:eb:b0:94:3c:3e:3c: 79:6b:2c:b2:ce:88:28:8e:e2:01:c6:28:b8:94:2b:7b:12:9d: 73:39:05:f2:e8:20:fc:4e:32:aa:90:df:9c:c8:36:36:f9:f1: 49:59:57:3c:eb:f1:92:c1:87:f9:d8:21:de:b9:e6:82:cc:46: b0:09:8b:67:32:43:94:3e:eb:02:43:28:43:20:93:ce:91:9b: 1a:e9:ad:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrYso+BmcN55zsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDljMGJiYmQtZmEyOC00Yzg0LWE3N2ItNThmNmQ4ZTlm MGE3MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MzhiNGUyNDctMWQzYi00YTVhLWExYzYtMGFmNDY0ZTY2NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pK191XnQirBg99vaxwGBk6aCR3mbjrPUOY3 GyQPGqaKU7q67M3SM/exHaQBCzDhfI3W2BKbbl6sg4fVBJ60F61Wbtufs24RtsMK QjXCnO/j0GjHZPrvqL7YISJU3H6ueqDEgDSTbXNXSxnQ7PwODwAGyuLWSDcQ2Qns kGiZRGx9623Nfjz1Ua8MbtchzhHw/GQrXhPtfl70xrignj8sUsQPMdjLfo9Jkco7 Tw26O/QgTByP2K1wmSJ1NmYJHFnqLFzTkXId+5FBM8+4fLC6FS81GiHwRp9HJ6g+ jF8xaenJ7JkJP+Lq3O2jHnvNm3Y8zO8Ci3UhgVkZmJz0JfCySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBjyBQyt4QrBVqmBwE66mfLjWyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80OWMw YmJiZC1mYTI4LTRjODQtYTc3Yi01OGY2ZDhlOWYwYTcvM2IzMjUzYWItMWVhYS0z MDAzLTk5YjQtMTRmZjg0ZDZlODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDljMGJiYmQtZmEyOC00Yzg0LWE3 N2ItNThmNmQ4ZTlmMGE3LzQ5YzBiYmJkLWZhMjgtNGM4NC1hNzdiLTU4ZjZkOGU5 ZjBhNy5jcmwwHwYDVR0jBBgwFoAUU5RqIMhofzIh4aDj+pwy5YdKYU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80OWMwYmJiZC1mYTI4LTRjODQtYTc3Yi01OGY2 ZDhlOWYwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxtQyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJy+5WPP9c2XvionfTOwVABRq1Kecyq3ZxhDGtX2DBnqwJ+1iT69/7Z L35YzZ9hoyr8InSXhQ2RDQ2ZZCQeUMdOEAvZRVj5d+uD6nR+18BugORnRa0IAJty 3RIsP14F1+4RRCZJO/MSWBwhVYr24maLAgvv7UU4a8TbZqYvGv5ud1uowW99hITb qaaASrLvvrfyo7ykCs1bc/V/OXTxp+0BERqjI6z4MWHA9y/RYOuwlDw+PHlrLLLO iCiO4gHGKLiUK3sSnXM5BfLoIPxOMqqQ35zINjb58UlZVzzr8ZLBh/nYId655oLM RrAJi2cyQ5Q+6wJDKEMgk86RmxrprRI= -----END CERTIFICATE-----Generated at Wed May 13 11:41:13 2026 by rpki-client