$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa File: 5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa (raw, json) Hash identifier: 6b0p9oaa3ejaf2lRM+NpJRPyu2OMqUD4ksONcWYndrU= Subject key identifier: F1:6D:0F:E8:BE:96:50:65:F3:BF:DF:69:E0:E4:32:E1:BE:E8:DF:B4 Certificate issuer: /CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1 Certificate serial: 010D0C9F4328584D40CA5B03199E4BFA569A2980 Authority key identifier: A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 7238 IP address blocks: 144.198.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:5b:03:19:9e:4b:fa:56:9a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=64d5ffbb-4544-4566-91d5-bad030ff48b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:13:7a:cb:9f:1a:2a:34:df:6f:0b:09:58: 47:ea:95:00:16:a2:3e:4b:0c:03:aa:f0:66:be:94: a0:f2:ba:52:f6:2d:2a:d2:5d:3a:f4:c1:8b:94:34: da:a6:dd:e9:1e:19:08:58:e9:36:16:81:7a:0e:d1: 18:8c:68:4a:5d:2a:ec:ed:40:37:20:6c:2a:fa:e6: b2:2d:63:4e:28:23:62:7d:f9:f8:b4:0c:a3:4e:bc: 0e:19:af:69:ce:e9:80:bd:30:a0:c1:02:0e:2e:65: 94:e1:de:f3:02:30:44:63:d5:7c:04:2b:14:7a:53: e1:51:11:2e:cf:d1:c7:75:6a:0c:6f:6c:02:f0:7a: 97:16:7a:5a:91:89:55:b6:cd:54:0d:e4:46:b1:e0: c4:c7:9a:30:90:cb:bc:1e:24:b6:49:79:6b:30:90: 7a:a6:52:11:fd:02:85:0a:9e:d8:a7:d5:f3:6f:78: b4:0e:00:64:e2:4a:14:92:5e:08:28:ad:e6:0c:6d: 19:d7:ce:dd:24:37:6b:3c:88:96:91:65:c3:72:ea: 6b:07:f7:19:b7:2d:71:b5:a3:69:80:5c:28:79:fa: d4:51:86:86:4c:61:81:99:ac:0f:05:68:0a:7b:38: a7:db:95:d9:5f:5d:c9:a0:30:6b:f5:be:13:5b:10: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:0F:E8:BE:96:50:65:F3:BF:DF:69:E0:E4:32:E1:BE:E8:DF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl X509v3 Authority Key Identifier: keyid:A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer sbgp-ipAddrBlock: critical IPv4: 144.198.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e3:4b:39:c3:9b:d6:f8:93:b2:97:bb:13:4a:d4:78:e5:53: 81:6c:04:8a:43:16:69:92:da:95:a7:3b:03:1d:bd:e2:10:44: e3:74:c5:a2:01:a4:e7:72:59:b7:da:d6:d1:6d:f1:82:c6:28: 92:53:41:94:82:e7:08:22:e3:5a:1f:57:7a:54:e8:01:bc:4f: cc:44:a1:9a:eb:9b:95:5f:e9:89:7c:1a:97:2e:83:02:6a:87: 1e:5c:da:27:f8:d9:c3:88:24:e3:47:4b:b4:0a:92:6c:f6:3a: 67:86:9b:28:e6:07:45:74:0f:c1:c6:99:bc:c5:ce:f5:79:d1: 1b:3d:53:cb:18:b9:a3:d0:bf:d8:ce:19:73:e3:fd:06:0a:35: 96:00:94:49:5f:40:03:ed:fa:88:73:55:bd:2e:73:12:1b:90: 17:b4:85:41:3a:8f:11:54:f7:7a:94:8e:c6:45:86:a6:31:e2: 87:a5:fb:2e:7a:53:13:48:eb:69:d2:3e:cd:3d:2a:99:35:58: cf:b0:99:ba:50:9a:45:1d:c8:d3:05:9f:ce:6d:78:bc:fc:76: 40:b1:52:0e:6f:17:51:25:52:ff:d6:b9:e8:2b:13:b8:26:a5: 6a:4f:a5:05:a1:d2:3e:85:a0:f5:31:62:32:ac:cc:53:11:c6: f3:7a:87:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylsDGZ5L+laaKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJlM2MzY2ItODM2Yy00MTBiLWE5ZjktZDE5YmU4NTFj NGMxMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjRkNWZmYmItNDU0NC00NTY2LTkxZDUtYmFkMDMwZmY0OGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2kTesufGio0328LCVhH6pUAFqI+SwwDqvBm vpSg8rpS9i0q0l069MGLlDTapt3pHhkIWOk2FoF6DtEYjGhKXSrs7UA3IGwq+uay LWNOKCNiffn4tAyjTrwOGa9pzumAvTCgwQIOLmWU4d7zAjBEY9V8BCsUelPhUREu z9HHdWoMb2wC8HqXFnpakYlVts1UDeRGseDEx5owkMu8HiS2SXlrMJB6plIR/QKF Cp7Yp9Xzb3i0DgBk4koUkl4IKK3mDG0Z187dJDdrPIiWkWXDcuprB/cZty1xtaNp gFwoefrUUYaGTGGBmawPBWgKezin25XZX13JoDBr9b4TWxD74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFtD+i+llBl87/faeDkMuG+6N+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmUz YzNjYi04MzZjLTQxMGItYTlmOS1kMTliZTg1MWM0YzEvNTA0OTM0M2MtZDY2Mi0z YzY2LTk3ZjgtNmUyZDBjYTNjZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJlM2MzY2ItODM2Yy00MTBiLWE5 ZjktZDE5YmU4NTFjNGMxLzhiZTNjM2NiLTgzNmMtNDEwYi1hOWY5LWQxOWJlODUx YzRjMS5jcmwwHwYDVR0jBBgwFoAUqFzkPdyLPxZIncn/WkdyECXfsOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmUzYzNjYi04MzZjLTQxMGItYTlmOS1kMTli ZTg1MWM0YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkMYxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfjSznDm9b4k7KXuxNK1HjlU4FsBIpDFmmS2pWnOwMdveIQRON0xaIB pOdyWbfa1tFt8YLGKJJTQZSC5wgi41ofV3pU6AG8T8xEoZrrm5Vf6Yl8GpcugwJq hx5c2if42cOIJONHS7QKkmz2OmeGmyjmB0V0D8HGmbzFzvV50Rs9U8sYuaPQv9jO GXPj/QYKNZYAlElfQAPt+ohzVb0ucxIbkBe0hUE6jxFU93qUjsZFhqYx4oel+y56 UxNI62nSPs09Kpk1WM+wmbpQmkUdyNMFn85teLz8dkCxUg5vF1ElUv/WuegrE7gm pWpPpQWh0j6FoPUxYjKszFMRxvN6h5E= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:26 2026 by rpki-client