$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: gv+CZeGR48ixQOdVhsAP2LdENMch/r1JnqPsUglEPds= Subject key identifier: D2:A5:7F:E5:C7:C1:11:27:1D:67:48:1D:68:E0:DE:1E:95:61:E4:4D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584D2D3F91581BC667C8EE2A5A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:91:58:1b:c6:67:c8:ee:2a:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=b83d9adf-1501-4d8c-be01-bb61fa362c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:9c:07:a9:8d:9a:d6:a6:5d:16:0b:c5:56: 78:73:b1:2e:80:ec:04:0c:0e:3f:61:d4:06:83:51: e8:5e:77:0c:80:7a:1e:be:93:42:35:67:98:47:6a: b1:a2:32:cd:6a:69:34:1f:20:d6:e6:2e:00:63:1b: 72:a2:d6:f3:48:fd:66:7b:68:e9:a6:e9:75:a8:a0: 76:6d:d2:ad:db:67:ca:0a:f3:c5:0b:af:6e:d7:d2: 57:7a:32:59:35:95:5f:40:ad:86:11:10:34:3c:c2: af:74:e3:a3:8a:0b:41:28:05:58:36:a4:78:f4:49: db:19:36:a2:7c:fb:4d:da:23:92:6e:23:0f:6f:60: 6f:60:ec:45:45:7d:63:98:d2:bc:a3:99:5e:8d:fc: 83:29:75:14:bb:f3:a8:42:35:b4:2c:87:e3:53:0f: b8:b2:7e:33:7b:45:ee:17:bd:e7:bb:09:5d:f8:9e: 74:b0:0a:88:cb:d2:cc:76:cb:14:c1:98:8e:9a:9a: 29:43:3b:3c:0c:68:3e:b3:4f:14:bd:21:0c:15:91: e0:1f:89:e8:db:ff:42:4b:9a:e9:6f:50:81:84:14: 0b:12:8e:e7:52:9c:29:fa:aa:ca:96:5d:79:a2:91: c0:f8:5f:24:25:9d:7d:a5:a7:39:8f:65:c3:80:f3: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:7F:E5:C7:C1:11:27:1D:67:48:1D:68:E0:DE:1E:95:61:E4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ab:42:64:d8:4d:b9:92:53:5e:5d:b7:82:ae:e6:72:bb:d7: aa:4e:b2:9d:79:10:b5:ff:fc:45:12:be:bf:79:67:b5:5b:18: 2f:c7:7f:2d:2c:b0:ad:75:e6:73:b0:53:0d:e5:e6:fe:e1:ea: 00:d0:a8:be:5a:53:90:75:63:d1:02:f1:96:9c:2e:24:ff:a7: 40:df:4e:f6:2a:0f:38:41:e0:08:d0:7d:48:3d:2d:dc:1d:61: da:41:c3:26:94:6e:74:b0:75:77:03:2a:78:92:c4:c7:ec:9e: 98:3f:23:c9:16:d6:92:5c:b9:cf:bb:e8:c9:60:81:22:a8:85: 4f:3d:ea:10:1a:65:b9:44:14:06:88:41:fa:a5:1a:f4:07:a3: a6:b9:7a:9c:aa:46:00:8c:cb:41:6b:19:2f:be:4f:33:fd:d8: 76:3a:5d:49:bb:03:d0:0a:b6:42:01:3d:fd:00:8a:b3:88:2a: 43:35:ac:91:90:a4:31:fa:e4:c1:e6:69:40:fe:8b:26:c4:5a: 96:e5:e2:14:f2:88:10:60:3c:5b:7e:f6:69:c9:10:e5:f2:f9: 82:bb:7a:b9:b5:5f:0b:a6:8e:7f:67:ad:13:63:eb:8b:47:f1: b4:d9:7d:a9:4a:f6:f0:0e:19:2d:d1:34:81:50:a6:75:c9:47: a5:d8:e8:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP5FYG8ZnyO4qWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk YjgzZDlhZGYtMTUwMS00ZDhjLWJlMDEtYmI2MWZhMzYyYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5OcB6mNmtamXRYLxVZ4c7EugOwEDA4/YdQG g1HoXncMgHoevpNCNWeYR2qxojLNamk0HyDW5i4AYxtyotbzSP1me2jppul1qKB2 bdKt22fKCvPFC69u19JXejJZNZVfQK2GERA0PMKvdOOjigtBKAVYNqR49EnbGTai fPtN2iOSbiMPb2BvYOxFRX1jmNK8o5lejfyDKXUUu/OoQjW0LIfjUw+4sn4ze0Xu F73nuwld+J50sAqIy9LMdssUwZiOmpopQzs8DGg+s08UvSEMFZHgH4no2/9CS5rp b1CBhBQLEo7nUpwp+qrKll15opHA+F8kJZ19pac5j2XDgPNs2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKlf+XHwREnHWdIHWjg3h6VYeRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFerQmTYTbmSU15dt4Ku5nK716pOsp15ELX//EUSvr95Z7VbGC/Hfy0s sK115nOwUw3l5v7h6gDQqL5aU5B1Y9EC8ZacLiT/p0DfTvYqDzhB4AjQfUg9Ldwd YdpBwyaUbnSwdXcDKniSxMfsnpg/I8kW1pJcuc+76MlggSKohU896hAaZblEFAaI QfqlGvQHo6a5epyqRgCMy0FrGS++TzP92HY6XUm7A9AKtkIBPf0AirOIKkM1rJGQ pDH65MHmaUD+iybEWpbl4hTyiBBgPFt+9mnJEOXy+YK7erm1Xwumjn9nrRNj64tH 8bTZfalK9vAOGS3RNIFQpnXJR6XY6E8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:25 2026 by rpki-client