$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa File: 021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa (raw, json) Hash identifier: Pb9eVI6xHgo5++smfTFEoZQdvK9T9Op/WTClDCZx3Jg= Subject key identifier: D2:40:3C:8C:4F:EB:C2:70:15:92:26:88:DC:AA:8C:CA:F2:10:78:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D300A7AAD630C0D5528160A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40114 IP address blocks: 67.151.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:7a:ad:63:0c:0d:55:28:16:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=c0f13fea-27c1-4ef5-86f3-767e1c4d609d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:64:a5:7e:3a:20:f3:2f:3c:47:83:c5:72: aa:a3:ad:26:35:3c:90:c0:53:20:68:19:f1:5f:a4: ca:34:6e:75:c5:f6:e0:3e:44:78:1b:e8:a5:da:3d: 69:37:b7:f1:cf:60:f5:c6:5f:9b:2c:5c:2c:39:60: 41:61:22:1d:47:d0:81:f2:a3:d3:44:55:e2:60:df: 88:6d:1a:98:bd:09:3f:a6:b2:85:ac:f5:85:7d:cc: 1e:f4:93:ec:42:64:46:e8:50:fe:97:04:56:c0:ea: 5e:97:eb:02:68:a8:2a:6d:16:90:5b:b1:ce:70:d5: 37:46:85:57:9c:72:ea:b9:be:b3:0a:be:1f:8c:91: 9f:e6:dc:ac:b9:62:65:00:ce:7b:81:b0:99:92:ab: 75:98:67:7e:4a:a5:0e:81:db:1f:47:56:37:80:1c: 0d:ac:86:a0:11:3b:9b:f0:17:60:53:90:0a:e2:17: 3c:7b:11:82:d9:20:2f:43:a0:cb:45:c2:73:18:35: 96:e4:ad:e9:e0:31:a5:cd:df:c5:69:8e:6a:f2:b8: 74:6e:40:ba:e2:89:a0:45:82:49:ec:fb:09:a4:4a: f6:b1:5e:ee:63:43:ff:5b:b3:15:b9:1e:e2:eb:1d: 01:46:72:7e:fe:e9:e2:84:39:d9:fa:db:2f:f0:5c: 2c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:3C:8C:4F:EB:C2:70:15:92:26:88:DC:AA:8C:CA:F2:10:78:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ab:ad:3b:6c:6f:25:60:a9:25:87:fe:d3:6c:ff:76:6f:d0: 1d:18:4b:88:25:23:f6:2c:30:1c:6e:ad:d3:5b:29:54:16:cf: 40:4e:f3:ad:18:cd:3a:34:44:75:c6:c4:23:c7:a8:e9:8e:7d: e2:3c:bc:69:84:86:67:b2:e9:d7:f3:0c:b5:e2:2b:cf:09:ea: 92:91:ab:d6:6c:db:ed:33:94:74:f6:e4:8b:a4:5d:b3:74:9c: 0d:f5:08:52:e8:00:81:6a:76:0c:f2:a3:7a:68:05:0c:c2:1b: 7c:d5:f3:f7:52:07:69:26:89:2a:11:1f:89:b3:c3:eb:07:66: 06:c7:1d:24:98:7f:54:07:88:93:e2:61:44:4d:4b:78:7a:9d: 38:f5:52:15:9c:b3:19:36:30:cc:ee:c2:dc:be:10:86:f4:40: a2:5a:9c:b4:47:f5:45:53:e4:e8:fd:60:86:a6:b7:37:0c:61: 4b:25:88:6d:0c:cc:45:9e:a7:93:bd:6b:1a:3f:00:f0:b7:62: 9a:b7:87:dd:16:b6:bc:1f:0a:0f:e4:dc:27:40:74:bb:1e:10: f8:14:76:e3:02:e4:0f:65:e2:13:f5:6b:4b:3d:bb:29:55:00: 0e:69:36:78:2f:b9:9b:b4:3f:28:9a:f1:20:07:09:15:a2:42: 5b:50:88:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCnqtYwwNVSgWCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YzBmMTNmZWEtMjdjMS00ZWY1LTg2ZjMtNzY3ZTFjNGQ2MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0hkpX46IPMvPEeDxXKqo60mNTyQwFMgaBnx X6TKNG51xfbgPkR4G+il2j1pN7fxz2D1xl+bLFwsOWBBYSIdR9CB8qPTRFXiYN+I bRqYvQk/prKFrPWFfcwe9JPsQmRG6FD+lwRWwOpel+sCaKgqbRaQW7HOcNU3RoVX nHLqub6zCr4fjJGf5tysuWJlAM57gbCZkqt1mGd+SqUOgdsfR1Y3gBwNrIagETub 8BdgU5AK4hc8exGC2SAvQ6DLRcJzGDWW5K3p4DGlzd/FaY5q8rh0bkC64omgRYJJ 7PsJpEr2sV7uY0P/W7MVuR7i6x0BRnJ+/unihDnZ+tsv8FwsLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJAPIxP68JwFZImiNyqjMryEHhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIxZGQ3YTctZjIzMS0z ZDYzLTk0MjUtMDNkMmI1ZjYwZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5daMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2rrTtsbyVgqSWH/tNs/3Zv0B0YS4glI/YsMBxurdNbKVQWz0BO860Y zTo0RHXGxCPHqOmOfeI8vGmEhmey6dfzDLXiK88J6pKRq9Zs2+0zlHT25IukXbN0 nA31CFLoAIFqdgzyo3poBQzCG3zV8/dSB2kmiSoRH4mzw+sHZgbHHSSYf1QHiJPi YURNS3h6nTj1UhWcsxk2MMzuwty+EIb0QKJanLRH9UVT5Oj9YIamtzcMYUsliG0M zEWep5O9axo/APC3Ypq3h90WtrwfCg/k3CdAdLseEPgUduMC5A9l4hP1a0s9uylV AA5pNngvuZu0Pyia8SAHCRWiQltQiEY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:48 2026 by rpki-client